5279373 2000-07-18 01:28 /128 rader/ Postmaster Mottagare: Red Hat Announce (import) <1524> Ärende: [RHSA-2000:043-02] Updated package for nfs-utils available ------------------------------------------------------------ MBOX-Line: From redhat-announce-list-request@redhat.com Mon Jul 17 19:15:24 2000 Resent-Date: 17 Jul 2000 23:15:19 -0000 Resent-Cc: recipient list not shown: ; MBOX-Line: From redhat-watch-list-request@redhat.com Mon Jul 17 19:15:14 2000 Message-Id: <200007172315.TAA12236@lacrosse.corp.redhat.com> Content-transfer-encoding: 8bit To: redhat-watch-list@redhat.com From: bugzilla@redhat.com Cc: bugtraq@securityfocus.com Content-type: text/plain; charset="iso-8859-1" Mime-version: 1.0 Date: Mon, 17 Jul 2000 19:15 -0400 Resent-Message-ID: <"cOchn.0.aH5.2EvSv"@lists.redhat.com> Resent-From: redhat-watch-list@redhat.com Reply-To: redhat-watch-list@redhat.com X-Mailing-List: <redhat-watch-list@redhat.com> archive/latest/90 X-Loop: redhat-watch-list@redhat.com X-URL: http://www.redhat.com X-Loop: redhat-announce-list@redhat.com Precedence: list Resent-Sender: redhat-announce-list-request@redhat.com X-URL: http://www.redhat.com --------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Updated package for nfs-utils available Advisory ID: RHSA-2000:043-02 Issue date: 2000-07-17 Updated on: 2000-07-17 Product: Red Hat Linux Keywords: rpc.statd root compromise Cross references: N/A --------------------------------------------------------------------- 1. Topic: The rpc.statd daemon in the nfs-utils package shipped in Red Hat Linux 6.0, 6.1, and 6.2 contains a flaw that could lead to a remote root break-in. 2. Relevant releases/architectures: Red Hat Linux 6.0 - i386, alpha, sparc Red Hat Linux 6.1 - i386, alpha, sparc Red Hat Linux 6.2 - i386, alpha, sparc 3. Problem description: The rpc.statd daemon shipped in Red Hat Linux 6.0, 6.1, and 6.2 contains a flaw that could lead to a remote root break-in. Version 0.1.9.1 of the nfs-utils package corrects the problem. Although there is no known exploit for the flaw in rpc.statd, Red Hat urges all users running rpc.statd to upgrade to the new nfs-utils package. Users should note that in Red Hat Linux 6.0 and 6.1 the rpc.statd daemon was in the knfsd-clients package. The nfs-utils package replaces both the knfsd and knfsd-clients packages shipped in Red Hat Linux 6.0 and 6.1. On systems running a kernel older than 2.2.16-3, users should also take this opportunity to upgrade to the latest kernel release. 4. Solution: For each RPM for your particular architecture, run: rpm -Fvh [filename] where filename is the name of the RPM. 5. Bug IDs fixed (http://bugzilla.redhat.com/bugzilla for more info): N/A 6. RPMs required: Red Hat Linux 6.2: sparc: ftp://updates.redhat.com/6.2/sparc/nfs-utils-0.1.9.1-1.sparc.rpm alpha: ftp://updates.redhat.com/6.2/alpha/nfs-utils-0.1.9.1-1.alpha.rpm i386: ftp://updates.redhat.com/6.2/i386/nfs-utils-0.1.9.1-1.i386.rpm sources: ftp://updates.redhat.com/6.2/SRPMS/nfs-utils-0.1.9.1-1.src.rpm 7. Verification: MD5 sum Package Name -------------------------------------------------------------------------- fb038f83f091c8ba3c81d272b19aab0b 6.2/SRPMS/nfs-utils-0.1.9.1-1.src.rpm 9ffff59f1ac1dbe09694d70abaf356d2 6.2/alpha/nfs-utils-0.1.9.1-1.alpha.rpm c8fb4d05baca53e48e94c7759304726f 6.2/i386/nfs-utils-0.1.9.1-1.i386.rpm 0c32df4230662b6e48251fcb220364d1 6.2/sparc/nfs-utils-0.1.9.1-1.sparc.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: http://www.redhat.com/corp/contact.html You can verify each package with the following command: rpm --checksig <filename> If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg <filename> 8. References: N/A Copyright(c) 2000 Red Hat, Inc. -- To unsubscribe: mail redhat-watch-list-request@redhat.com with "unsubscribe" as the Subject. -- To unsubscribe: mail -s unsubscribe redhat-announce-list-request@redhat.com < /dev/null (5279373) ------------------------------------------(Ombruten)