copyright | disclaimer | privacy | contact  
Australia's Leading Computer Emergency Response Team
 
Search this site

 
On this site

 > HOME
 > About AusCERT
 > Membership
 > Contact Us
 > PKI Services
 > Training
 > Publications
 > Sec. Bulletins
 > Conferences
 > News & Media
 > Services
 > Web Log
 > Site Map
 > Site Help
 > Member login





 

ESB-98.107 -- Red Hat Linux Bulletin -- SECURITY: Security problems found in dosemu and libtermcap.

Date: 03 July 1998

Click here for printable version
Click here for PGP verifiable version
-----BEGIN PGP SIGNED MESSAGE-----

===========================================================================
            AUSCERT External Security Bulletin Redistribution
                                    
                                    
                    ESB-98.107 -- Red Hat Linux Bulletin
         SECURITY: Security problems found in dosemu and libtermcap.
                                 3 July 1998

===========================================================================

RedHat Software, Inc. has released the following advisory concerning
security problems found in dosemu and libtermcap.  These security
problems allow users on your local system to gain root access.

The following security bulletin is provided as a service to AusCERT's
members.  As AusCERT did not write this document, AusCERT has had no
control over its content.  As such, the decision to use any or all of this
information is the responsibility of each user or organisation, and should
be done so in accordance with site policies and procedures.

NOTE: This is only the original release of the security bulletin.  It will
not be updated when the original bulletin is.  If downloading at a later
date, it is recommended that the bulletin is retrieved from the original
authors to ensure that the information is still current.

If you have any questions or need further information, please contact 
Red Hat Software directly.

Previous advisories and external security bulletins can be retrieved from:

	http://www.auscert.org.au/Information/advisories.html

If you believe that your system has been compromised, contact AusCERT or
your representative in FIRST (Forum of Incident Response and Security
Teams).

Internet Email: auscert@auscert.org.au
Facsimile:	(07) 3365 7031
Telephone:	(07) 3365 4417 (International: +61 7 3365 4417)
		AusCERT personnel answer during Queensland business hours
		which are GMT+10:00 (AEST).
		On call after hours for emergencies.


- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----


Security problems have been found in dosemu and libtermcap. These security
problems allow users on your local system to gain root access, and should
be fixed as soon as possible.

Red Hat 5.0 and 5.1
- - -------------------

i386:
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/i386/dosemu-0.66.7-7.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/i386/libtermcap-2.0.8-9.i386.rpm

alpha:
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/alpha/libtermcap-2.0.8-9.alpha.rpm

SPARC:
rpm -Uvh ftp://ftp.redhat.com/updates/5.0/sparc/libtermcap-2.0.8-9.sparc.rpm

Red Hat 4.2
- - -------------

i386:
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/i386/dosemu-0.66.7-0.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/i386/libtermcap-2.0.8-4.1.i386.rpm

alpha:
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/alpha/libtermcap-2.0.8-4.1.alpha.rpm

SPARC:
rpm -Uvh ftp://ftp.redhat.com/updates/4.2/sparc/libtermcap-2.0.8-4.1.sparc.rpm


- -----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBNZwUO6Ug6PHLopv5AQFD0gP+Np9oqSi59aC8LTlhy7Ml5YT7szuVieRT
eVW9e3XHo4Hz3PwFiZD7SK6I2ogfmMVEFx9lTTnzakev0+yx16wd8vhjAUdHDfJj
VYx7nJwOkDdf4zFwXNBT3xj+/aNUszPAKnjbGP9pWukfSHGxvC1p4oCR5PBvDI1y
KByG6UCrisc=
=eP4t
- -----END PGP SIGNATURE-----

- ---------------------------END INCLUDED TEXT---------------------

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv
Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key

iQCVAwUBNatMXyh9+71yA2DNAQEhegP/TVoRVS1Jp1M3SCF24TREuxxlhTcfjc3e
BG1Zw/s2OuKgNFlCDGRG+6Sg6/M5ob04y9Lma7dRohJjUd874nnL51H2ZnVKYAAv
Kv4GpqT9mfPc8UfnUwWfJ+9ooeQpYrHOt5BDKyn4xSyjiWnhMBm/OOh2C5tnKTzL
K3eaU+w1VMI=
=PG5/
-----END PGP SIGNATURE-----