-----BEGIN PGP SIGNED MESSAGE-----

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                     ESB-2001.086 -- RHSA-2001:017-03
                   Updated analog packages are available
                             28 February 2001

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:                analog (Secure Web Server 2.0)
Vendor:                 Red Hat
Operating System:       Red Hat Linux
Platform:               i386

- --------------------------BEGIN INCLUDED TEXT--------------------

- ---------------------------------------------------------------------
                   Red Hat, Inc. Red Hat Security Advisory

Synopsis:          Updated analog packages are available
Advisory ID:       RHSA-2001:017-03
Issue date:        2001-02-23
Updated on:        2001-02-23
Product:           Red Hat Secure Web Server
Keywords:          buffer overflow
Cross references:  
Obsoletes:         
- ---------------------------------------------------------------------

1. Topic:

Updated analog packages are available which fix a buffer overflow
vulnerability.

2. Relevant releases/architectures:

Red Hat Secure Web Server 2.0 - i386

3. Problem description:

Previous releases of analog were vulnerable to a buffer overflow
vulnerability where a malicious user could use an ALIAS command to
construct very long strings which were not checked for length.

This bug was discovered by the program author, and there is no known
exploit.

4. Solution:

To update all RPMs for your particular architecture, run:

rpm -Fvh <filenames>

where <filenames> is a list of the RPMs you wish to upgrade.  Only those
RPMs which are currently installed will be updated.  Those RPMs which are
not installed but included in the list will not be updated.  Note that you
can also use wildcards (*.rpm) if your current directly *only* contains 
the desired RPMs.

5. Bug IDs fixed (http://bugzilla.redhat.com/bugzilla for more info):



6. RPMs required:

Red Hat Secure Web Server 2.0:

SRPMS:
ftp://updates.redhat.com/secureweb/2.0/SRPMS/analog-4.16-1.src.rpm

i386:
ftp://updates.redhat.com/secureweb/2.0/i386/analog-4.16-1.i386.rpm
ftp://updates.redhat.com/secureweb/2.0/i386/analog-form-4.16-1.i386.rpm


7. Verification:

MD5 sum                           Package Name
- --------------------------------------------------------------------------
a9a47be6fa6230bd29db2f4ff36f9f98  2.0/SRPMS/analog-4.16-1.src.rpm
5e52037dfd712a36a0aaec4b60bfba35  2.0/i386/analog-4.16-1.i386.rpm
d7e7b05487b8cc744d90de91e0e184eb  2.0/i386/analog-form-4.16-1.i386.rpm

These packages are GPG signed by Red Hat, Inc. for security.  Our key
is available at:
    http://www.redhat.com/corp/contact.html

You can verify each package with the following command:
    rpm --checksig  <filename>

If you only wish to verify that each package has not been corrupted or
tampered with, examine only the md5sum with the following command:
    rpm --checksig --nogpg <filename>

8. References:

Thanks to Stephen Turner for posting the origional advisory on Bugtraq.

Copyright(c) 2000, 2001 Red Hat, Inc.



- --------------------------END INCLUDED TEXT--------------------

This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content.  The decision to use any or all of this information is
the responsibility of each user or organisation, and should be done so in
accordance with site policies and procedures.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the original authors to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

	http://www.auscert.org.au/Information/advisories.html

If you believe that your system has been compromised, contact AusCERT or
your representative in FIRST (Forum of Incident Response and Security
Teams).

Internet Email: auscert@auscert.org.au
Facsimile:	(07) 3365 7031
Telephone:	(07) 3365 4417 (International: +61 7 3365 4417)
		AusCERT personnel answer during Queensland business hours
		which are GMT+10:00 (AEST).
		On call after hours for emergencies.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key

iQCVAwUBOp0F/Sh9+71yA2DNAQHDFgP+ODXUvO6dfOvpylrykcXmt4OKU8O0Qc6W
4FrushSsF8qkcjJfJzT7i2KcsrxvMTe6MGTqD29RcCpjmQNQPngLBm5vlNgLe++T
MU/6AEuk9iqyrT6kfIw0OZSa3jwZeaBqOhyhHEg9iQohoWL1kWFKlsnohjJiToNa
Mu/K1UmOQ20=
=n9pl
-----END PGP SIGNATURE-----