=2D----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

=2D -----------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated utempter resolves security vulnerability
Advisory ID: FLSA:1546
Issue date: 2004-05-18
Product: Red Hat Linux
Keywords: Security
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=3D1546
CVE Names: CAN-2004-0233
=2D -----------------------------------------------------------------------


=2D ---------------------------------------------------------------------
1. Topic:

An updated utempter package that fixes a potential symlink vulnerability is
now available.

2. Relevent releases/architectures:

Red Hat Linux 7.2 - i386
Red Hat Linux 7.3 - i386
Red Hat Linux 8.0 - i386

3. Problem description:

Utempter is a utility that allows terminal applications such as xterm and=20
screen to update utmp and wtmp without requiring root privileges.

Steve Grubb discovered a flaw in Utempter which allowed device names=20
containing directory traversal sequences such as '/../'. In combination=20
with an application that trusts the utmp or wtmp files, this could allow a=
=20
local attacker the ability to overwrite privileged files using a symlink.

Users should upgrade to this new version of utempter, which fixes this=20
vulnerability.

=46edora Legacy would like to thank Barry K. Nathan for notification of thi=
s=20
issue.

4. Solution:

Before applying this update, make sure all previously released errata=20
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those=20
RPMs which are currently installed will be updated. Those RPMs which are=20
not installed but included in the list will not be updated. Note that you=
=20
can also use wildcards (*.rpm) if your current directory *only* contains=20
the desired RPMs.

Please note that this update is also available via yum and apt. Many=20
people find this an easier way to apply updates. To use yum issue:

yum update

or to use apt:

apt-get update; apt-get upgrade

This will start an interactive process that will result in the appropriate=
=20
RPMs being upgraded on your system. This assumes that you have yum or=20
apt-get configured for obtaining Fedora Legacy content. Please visit=20
http://www.fedoralegacy.org/docs for directions on how to configure yum=20
and apt-get.

5. Bug IDs fixed:

http://bugzilla.fedora.us - 1546 - utempter symlink vulnerability

6. RPMs required:

Red Hat Linux 7.2:

SRPM:
http://download.fedoralegacy.org/red...pter-0.5.2-6.=
7.x.1.legacy.src.rpm

i386:
http://download.fedoralegacy.org/red...ter-0.5.2-6.7=
=2Ex.1.legacy.i386.rpm

Red Hat Linux 7.3:

SRPM:
http://download.fedoralegacy.org/red...pter-0.5.2-6.=
7.x.1.legacy.src.rpm

i386:
http://download.fedoralegacy.org/red...ter-0.5.2-6.7=
=2Ex.1.legacy.i386.rpm

Red Hat Linux 8.0:

SRPM:
http://download.fedoralegacy.org/red...pter-0.5.2-10=
=2E8.0.1.legacy.src.rpm

i386:
http://download.fedoralegacy.org/red...ter-0.5.2-10.=
8.0.1.legacy.i386.rpm

7. Verification:

SHA1 sum Package Name
=2D -----------------------------------------------------------------------=
=2D---

739587d500bf401d83a5f2b01195ca8b5c81bed7=20
7.2/updates/SRPMS/utempter-0.5.2-6.7.x.1.legacy.src.rpm
021ec30fe6404f2eb74eee160a339fbd003c1b97=20
7.2/updates/i386/utempter-0.5.2-6.7.x.1.legacy.i386.rpm

739587d500bf401d83a5f2b01195ca8b5c81bed7=20
7.3/updates/SRPMS/utempter-0.5.2-6.7.x.1.legacy.src.rpm
021ec30fe6404f2eb74eee160a339fbd003c1b97=20
7.3/updates/i386/utempter-0.5.2-6.7.x.1.legacy.i386.rpm

afc6bf313598d51e6a1ab9f83a8c1a0b244d167b =20
8.0/updates/SRPMS/utempter-0.5.2-10.8.0.1.legacy.src.rpm
de4579faebfb0a5981be4ed2d1cf4b4ade396f41 =20
8.0/updates/i386/utempter-0.5.2-10.8.0.1.legacy.i386.rpm


These packages are GPG signed by Fedora Legacy for security. Our key is=20
available from http://www.fedoralegacy.org/about/security.php

You can verify each package with the following command:

rpm --checksig -v <filename>

If you only wish to verify that each package has not been corrupted or=20
tampered with, examine only the sha1sum with the following command:

sha1sum <filename>

8. References:
http://cve.mitre.org/cgi-bin/cvename...DCAN-2004-0233
https://rhn.redhat.com/errata/RHSA-2004-175.html
https://bugzilla.fedora.us/show_bug.cgi?id=3D1546


9. Contact:

The Fedora Legacy security contact is <secnotice@fedoralegacy.org>. More=20
project details at http://www.fedoralegacy.org

=2D ---------------------------------------------------------------------
=2D --=20
Jesse Keating RHCE (http://geek.j2solutions.net)
=46edora Legacy Team (http://www.fedoralegacy.org)
=2D----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQFAq3VI4v2HLvE71NURAt7zAKCugdWczF79uzQXoHrIov +L2om4ZQCcCKZ+
28f4UchcWnUiy6NAWyZsgv8=3D
=3DIERI
=2D----END PGP SIGNATURE-----