Published:
03 June 1998
Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE----- =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-98.083 -- Red Hat Linux Bulletin SECURITY: minicom fix now available 04 June 1998 =========================================================================== RedHat Software, Inc. has released the following advisory concerning buffer overflows found in the minicom package shipped with Red Hat 4.2 and 5.0. The following security bulletin is provided as a service to AusCERT's members. As AusCERT did not write this document, AusCERT has had no control over its content. As such, the decision to use any or all of this information is the responsibility of each user or organisation, and should be done so in accordance with site policies and procedures. NOTE: This is only the original release of the security bulletin. It will not be updated when the original bulletin is. If downloading at a later date, it is recommended that the bulletin is retrieved from the original authors to ensure that the information is still current. If you have any questions or need further information, please contact Red Hat Software directly. Previous advisories and external security bulletins can be retrieved from: http://www.auscert.org.au/Information/advisories.html If you believe that your system has been compromised, contact AusCERT or your representative in FIRST (Forum of Incident Response and Security Teams). Internet Email: auscert@auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for emergencies. - --------------------------BEGIN INCLUDED TEXT-------------------- - -----BEGIN PGP SIGNED MESSAGE----- Buffer overflows have been found in the minicom package shipped with Red Hat 4.2 and 5.0 (Red Hat 5.1 is *not* vulnerable). Red Hat suggests all users of Red Hat 4.2 and 5.0 upgrade to a new minicom version immediately. Red Hat 5.0 - - ------------- i386: rpm -Uvh ftp://ftp.redhat.com/updates/5.0/i386/minicom-1.81-3.1.i386.rpm alpha: rpm -Uvh ftp://ftp.redhat.com/updates/5.0/alpha/minicom-1.81-3.1.alpha.rpm Red Hat 4.2 - - ------------- i386: rpm -Uvh ftp://ftp.redhat.com/updates/4.2/i386/minicom-1.81-0.i386.rpm alpha: rpm -Uvh ftp://ftp.redhat.com/updates/4.2/alpha/minicom-1.81-0.alpha.rpm SPARC: rpm -Uvh ftp://ftp.redhat.com/updates/4.2/sparc/minicom-1.81-0.sparc.rpm - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCUAwUBNXQ7sqUg6PHLopv5AQFGMgP0Chcn2+OAU1X7fbkyGsZ73uaGdZbFdNgx agQE1yhx1vW3GSAWhrGV5AqI8ZdpPFirALUteRvJxbJrOp3wV3SgwyZAWGxfAdOW Eif3e6BT6D/5njIHwdL+jrNa6XGHh8e6FH/DW29hlnBCiVp0mh5dNQbfEefJNEVp bOU0SmAFWg== =6Csg - -----END PGP SIGNATURE----- - ---------------------------END INCLUDED TEXT--------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv Comment: ftp://ftp.auscert.org.au/pub/auscert/AUSCERT_PGP.key iQCVAwUBNX5tryh9+71yA2DNAQE+ggP/cC3NyLMTr6Wzb5MufiCW9hFqvqh8PJul C8gcTVJAo46hsGGJLywLk41ZAfmIcLTnZ+uErBCj5BGYlTgz2dv1QYIBIUcBSTsC I1X0h2tmeKI4SW5rHRmHCqmF/r9Py+7r3r7BxICEMDJ+RDoKdPlmZTF6DgBg/x9d YBsNBkNy82M= =fwBN -----END PGP SIGNATURE-----