-----BEGIN PGP SIGNED MESSAGE-----

===========================================================================
            AUSCERT External Security Bulletin Redistribution
                                    
                                    
                  ESB-98.092 -- Red Hat Linux Bulletin
         SECURITY: xscreensaver, findutils updates now available
                                10 June 1998

===========================================================================

RedHat Software, Inc. has released the following advisory concerning
various security problems found in xscreensaver and findutils.

The following security bulletin is provided as a service to AusCERT's
members.  As AusCERT did not write this document, AusCERT has had no
control over its content.  As such, the decision to use any or all of this
information is the responsibility of each user or organisation, and should
be done so in accordance with site policies and procedures.

NOTE: This is only the original release of the security bulletin.  It will
not be updated when the original bulletin is.  If downloading at a later
date, it is recommended that the bulletin is retrieved from the original
authors to ensure that the information is still current.

If you have any questions or need further information, please contact 
Red Hat Software directly.

Previous advisories and external security bulletins can be retrieved from:

	http://www.auscert.org.au/Information/advisories.html

If you believe that your system has been compromised, contact AusCERT or
your representative in FIRST (Forum of Incident Response and Security
Teams).

Internet Email: auscert@auscert.org.au
Facsimile:	(07) 3365 7031
Telephone:	(07) 3365 4417 (International: +61 7 3365 4417)
		AusCERT personnel answer during Queensland business hours
		which are GMT+10:00 (AEST).
		On call after hours for emergencies.


- --------------------------BEGIN INCLUDED TEXT--------------------


- -----BEGIN PGP SIGNED MESSAGE-----


Various security problems have been found in xscreensaver and findutils.
While all of these problems are quite minor, updating to these new
releases is a good idea.

If you are not currently using xscreensaver, there is no need to install
it. All Red Hat 4.x and 5.x systems should have the new findutils package
installed, however.

Thanks to Kevin Vajk, Jamie Zawinski, and Emmanuel Galanos for helping
out with these issues.

Erik

Red Hat 5.0 and 5.1
- - -------------------

i386:
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/i386/xscreensaver-2.16-4.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/i386/findutils-4.1-24.i386.rpm

alpha:
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/alpha/xscreensaver-2.16-4.alpha.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/alpha/findutils-4.1-24.alpha.rpm

Red Hat 4.2
- - -------------

i386:
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/i386/xscreensaver-2.16-0.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/i386/findutils-4.1-11.2.i386.rpm

alpha:
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/alpha/xscreensaver-2.16-0.alpha.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/alpha/findutils-4.1-11.2.alpha.rpm

SPARC:
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/sparc/xscreensaver-2.16-0.sparc.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/sparc/findutils-4.1-11.2.sparc.rpm


- -----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBNX37gqUg6PHLopv5AQFUowQAjYZxwFHxxJiu1WtqWPGhmoNNV2NM6lFx
V0qratS+Nyx8FNxpgz6rMLzsbM5pAJzOgJn6QL+JQqdflV1/xOK3sNvQIC00C7cK
qDWNsuRLz+5eilVOMMFJcZuhVwEZU4ddjz9nlANMQSH0dhf9VERFhx1U5IGSZFPJ
Y0/xRebLICw=
=4FTQ
- -----END PGP SIGNATURE-----


- ---------------------------END INCLUDED TEXT---------------------

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key

iQCVAwUBNYEdDih9+71yA2DNAQHJtQP+Ml5+5Erpnt0baCW+BBKAxkk3DMXBbiP0
0kdj8ZP7gP6uLSrn+34LjJoR7lH9VyLzQC1FeUyGjDOa3gkjlphIBMkCtVzue8WB
9vFAuFmB1Sfm3DzaDvgOaSNt9pJoLCdOZXUb+Ve/5DxEM6aVyq1/hGKCtg/EySy9
gpFXa2+mBZc=
=OE1M
-----END PGP SIGNATURE-----