[1354] in linux-security and linux-alert archive
[linux-security] SECURITY: Security fixed for libc, doom, and sendmail
daemon@ATHENA.MIT.EDU (Erik Troan)
Sun Dec 15 15:53:47 1996
Date: Sun, 15 Dec 1996 13:12:28 -0500 (EST)
From: Erik Troan <ewt@redhat.com>
Reply-To: redhat-list@redhat.com
To: redhat-announce-list@redhat.com
Prev-Resent-From: redhat-announce-list@redhat.com
Resent-To: linux-alert@redhat.com
Resent-From: "Alexander O. Yuriev" <alex@bach.cis.temple.edu>
There are known security problems with the sendmail, libc, and doom packages
distributed with Red Hat 4.0. The libc problems might allow users root
access to a Red Hat system (though no exploits have been produced),
the most recent sendmail problems allow users access to the sendmail group,
and the doom problem allows all users root access to a system.
These problems have been fixed in sendmail-8.8.4-1, libc-5.3.12-17, and
doom-1.8-7. Please upgrade these packages as soon as possible. The new
versions are available on ftp.redhat.com in /updates/4.0 and all of the
packages have been PGP signed with Red Hat's PGP key. Note that while all
of these packages are included on Red Hat Linux/Intel, the doom problem
is not present in Red Hat Linux/SPARC and neither the doom nor libc
problems affect Red Hat Linux/Alpha.
If you have direct internet access, you can upgrade to these versions with
the following commands:
i386:
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/i386/doom-1.8-7.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/i386/libc-5.3.12-17.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/i386/libc-static-5.3.12-17.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/i386/sendmail-8.8.4-1.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/i386/sendmail-cf-8.8.4-1.i386.rpm
sparc:
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/sparc/libc-5.3.12-17.sparc.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/sparc/libc-static-5.3.12-17.sparc.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/sparc/sendmail-8.8.4-1.sparc.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/sparc/sendmail-cf-8.8.4-1.sparc.rpm
alpha:
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/axp/sendmail-8.8.4-1.axp.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.0/axp/sendmail-cf-8.8.4-1.axp.rpm
(I hope I got all of those right)
Erik
-------------------------------------------------------------------------------
| I told you I'm not very bright -- Sugar in "Some Like It Hot" |
| "RPM is the greatest thing since swap-space" - Bryan C. Andregg
| |
| Erik Troan = ewt@redhat.com = ewt@sunsite.unc.edu |
--
To unsubscribe:
mail -s unsubscribe redhat-announce-list-request@redhat.com < /dev/null
