A security hole was discovered in the package mentioned above. Other Linux distributions or operating systems might be affected as well, please contact your vendor for information about this issue. There is no warranty whatsoever and no liability for any direct, indirect or incidental damage arising from this information or the installation of the update package. By sending a malicious formated email pine could be tricked into executing shell scripts or binary programs. This behavior could lead to remote root compromise of the system.
Solution Install the fixed pine package, which is available from our ftp server.
A libc5 version isn't available, because SuSE 5.3 uses pine-3.96 per default. All SuSE security announcements are send to this list. Only SuSE's security annoucements are sent to this list. You may use pgp with the public key below to ensure confidentiality. This information is provided freely to everyone interested and may be redistributed provided that it is not altered in any way.