6728290 2001-07-09 19:40 -0400 /150 rader/ <bugzilla@redhat.com>
Sänt av: joel@lysator.liu.se
Importerad: 2001-07-10 10:25 av Brevbäraren
Extern mottagare: redhat-watch-list@redhat.com
Extern kopiemottagare: bugtraq@securityfocus.com
Extern kopiemottagare: linux-security@redhat.com
Mottagare: Bugtraq (import) <17883>
Ärende: [RHSA-2001:088-04] New xloadimage packages available
------------------------------------------------------------
From: bugzilla@redhat.com
To: redhat-watch-list@redhat.com
Cc: bugtraq@securityfocus.com, linux-security@redhat.com
Message-ID: <200107092340.f69Ne9J27600@porkchop.redhat.com>
---------------------------------------------------------------------
Red Hat, Inc. Red Hat Security Advisory
Synopsis: New xloadimage packages available
Advisory ID: RHSA-2001:088-04
Issue date: 2001-06-28
Updated on: 2001-07-09
Product: Red Hat Linux
Keywords: xloadimage tif faces plugger Netscape buffer overflow
Cross references:
Obsoletes:
---------------------------------------------------------------------
1. Topic:
These updated packages fix a buffer overflow in the faces
reader. This is normally not a security problem; however, xloadimage
is called by the 'plugger' program from inside Netscape to handle
some image types. Hence, a remote site could cause arbitrary code to
be executed as the user running Netscape. It is recommended that
users of Netscape and plugger update to the fixed xloadimage packages.
Plugger was shipped in Red Hat Powertools 6.2; if you have
only installed packages from Red Hat Linux 6.2, you are not vulnerable
to this exploit.
2. Relevant releases/architectures:
Red Hat Linux 6.2 - alpha, i386, sparc
Red Hat Linux 7.0 - alpha, i386
Red Hat Linux 7.1 - alpha, i386
3. Problem description:
A buffer overflow existed in the faces reader for xloadimage. By
making a specially constructed invalid faces file, and then having
the server serve this file as a .tif file, arbitrary code could be
executed on the client computer running Netscape.
Thanks go to empathy@feelings.com for bringing this problem to our
attention.
4. Solution:
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
To update all RPMs for your particular architecture, run:
rpm -Fvh [filenames]
where [filenames] is a list of the RPMs you wish to upgrade. Only
those RPMs which are currently installed will be updated. Those RPMs
which are not installed but included in the list will not be updated.
Note that you can also use wildcards (*.rpm) if your current
directory *only* contains the desired RPMs.
Please note that this update is also available via Red Hat Network.
Many people find this an easier way to apply updates. To use Red Hat
Network, launch the Red Hat Update Agent with the following command:
up2date
This will start an interactive process that will result in the
appropriate RPMs being upgraded on your system.
5. Bug IDs fixed (http://bugzilla.redhat.com/bugzilla for more info):
46186 - remotely exploitable overflow via Netscape
6. RPMs required:
Red Hat Linux 6.2:
SRPMS:
ftp://updates.redhat.com/6.2/en/os/SRPMS/xloadimage-4.1-19.6.src.rpm
alpha:
ftp://updates.redhat.com/6.2/en/os/alpha/xloadimage-4.1-19.6.alpha.rpm
i386:
ftp://updates.redhat.com/6.2/en/os/i386/xloadimage-4.1-19.6.i386.rpm
sparc:
ftp://updates.redhat.com/6.2/en/os/sparc/xloadimage-4.1-19.6.sparc.rpm
Red Hat Linux 7.0:
SRPMS:
ftp://updates.redhat.com/7.0/en/os/SRPMS/xloadimage-4.1-20.src.rpm
alpha:
ftp://updates.redhat.com/7.0/en/os/alpha/xloadimage-4.1-20.alpha.rpm
i386:
ftp://updates.redhat.com/7.0/en/os/i386/xloadimage-4.1-20.i386.rpm
Red Hat Linux 7.1:
SRPMS:
ftp://updates.redhat.com/7.1/en/os/SRPMS/xloadimage-4.1-20.src.rpm
alpha:
ftp://updates.redhat.com/7.1/en/os/alpha/xloadimage-4.1-20.alpha.rpm
i386:
ftp://updates.redhat.com/7.1/en/os/i386/xloadimage-4.1-20.i386.rpm
7. Verification:
MD5 sum Package Name
--------------------------------------------------------------------------
cf8017adef28a21213637b0669185d77 6.2/en/os/SRPMS/xloadimage-4.1-19.6.src.rpm
19ee47e639e5700ef95ea65e7da5386f 6.2/en/os/alpha/xloadimage-4.1-19.6.alpha.rpm
273aa84fcf61212c7a0c5e315369d693 6.2/en/os/i386/xloadimage-4.1-19.6.i386.rpm
0af56addcbb55f7f4561b9c6730cb6f3 6.2/en/os/sparc/xloadimage-4.1-19.6.sparc.rpm
84c61a51cdc981baf712b871955542dd 7.0/en/os/SRPMS/xloadimage-4.1-20.src.rpm
13e59cef27ac728d1954e1d7829b5320 7.0/en/os/alpha/xloadimage-4.1-20.alpha.rpm
39cdfa020253bcd3388b5aebf94adbb3 7.0/en/os/i386/xloadimage-4.1-20.i386.rpm
84c61a51cdc981baf712b871955542dd 7.1/en/os/SRPMS/xloadimage-4.1-20.src.rpm
13e59cef27ac728d1954e1d7829b5320 7.1/en/os/alpha/xloadimage-4.1-20.alpha.rpm
39cdfa020253bcd3388b5aebf94adbb3 7.1/en/os/i386/xloadimage-4.1-20.i386.rpm
These packages are GPG signed by Red Hat, Inc. for security. Our key
is available at:
http://www.redhat.com/corp/contact.html
You can verify each package with the following command:
rpm --checksig <filename>
If you only wish to verify that each package has not been corrupted or
tampered with, examine only the md5sum with the following command:
rpm --checksig --nogpg <filename>
8. References:
Copyright(c) 2000, 2001 Red Hat, Inc.
(6728290) / <bugzilla@redhat.com>/--------(Ombruten)