Bugtraq mailing list archives

SECURITY: new ncurses packages

From: twiztah () ANARCHY MAXHO COM (twiztah)
Date: Fri, 24 Jul 1998 16:40:41 -0400


Potential security problems have been identified in all versions of ncurses
packages shipped with Red Hat Linux.

Users of Red Hat Linux are recommended to upgrade to the new packages
available under updates directory on our ftp site:


* Red Hat Linux 5.1:
====================

alpha:
- ------
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.1/alpha/ncurses-4.2-8.alpha.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.1/alpha/ncurses-devel-4.2-8.alpha.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.1/alpha/ncurses3-1.9.9e-6.alpha.rpm

i386:
- -----
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.1/i386/ncurses-4.2-8.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.1/i386/ncurses-devel-4.2-8.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.1/i386/ncurses3-1.9.9e-6.i386.rpm

sparc:
- ------
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.1/sparc/ncurses-4.2-8.sparc.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.1/sparc/ncurses-devel-4.2-8.sparc.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.1/sparc/ncurses3-1.9.9e-6.sparc.rpm

Source RPM:
- -----------
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.1/SRPMS/ncurses-4.2-8.src.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.1/SRPMS/ncurses3-1.9.9e-6.src.rpm


* Red Hat Linux 5.0:
====================

alpha:
- ------
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.0/alpha/ncurses-1.9.9e-9.alpha.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.0/alpha/ncurses-devel-1.9.9e-9.alpha.rpm

i386:
- -----
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.0/i386/ncurses-1.9.9e-9.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/5.0/i386/ncurses-devel-1.9.9e-9.i386.rpm

Source RPM:
- -----------
ftp://ftp.redhat.com/pub/redhat/updates/5.0/SRPMS/ncurses-1.9.9e-9.src.rpm

* Red Hat Linux 4.2:
====================

alpha:
- ------
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/4.2/alpha/ncurses-1.9.9e-4.1.alpha.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/4.2/alpha/ncurses-devel-1.9.9e-4.1.alpha.rpm

i386:
- -----
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/4.2/i386/ncurses-1.9.9e-4.1.i386.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/4.2/i386/ncurses-devel-1.9.9e-4.1.i386.rpm

sparc:
- ------
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/4.2/sparc/ncurses-1.9.9e-4.1.sparc.rpm
rpm -Uvh ftp://ftp.redhat.com/pub/redhat/updates/4.2/sparc/ncurses-devel-1.9.9e-4.1.sparc.rpm

Source RPM:
- ----------
ftp://ftp.redhat.com/pub/redhat/updates/4.2/SRPMS/ncurses-1.9.9e-4.1.src.rpm

Current thread:

Backdoor in ircN, popular mIRC script. Nick Koscianski (Jul 23)
- Re: Backdoor in ircN, popular mIRC script. Benoit Lefebvre (Jul 23)
  - espernet irc services McClain Looney (Jul 24)
  - smal bug in icmpinfo Adrian Dabrowski (Jul 26)
    - Re: smal bug in icmpinfo Rich Lafferty (Jul 26)
- CFINGERD root security hole John Goerzen (Jul 23)
  - Re: CFINGERD root security hole Roscinante (Jul 24)
  - Microsoft Security Bulletin (MS98-006) Aleph One (Jul 24)
  - SECURITY: new ncurses packages twiztah (Jul 24)
  - FW: Microsoft Security Bulletin (MS98-007) MacGyver (Jul 24)
  - Microsoft Security Bulletin (MS98-007) Aleph One (Jul 25)
  - Alert: New Source Bug Affect Sun JWS Aleph One (Jul 25)
  - Annex DoS Albert Nubdy (Jul 25)
    - Re: Annex DoS Matt Carter (Jul 26)
    - Security warning: Netscape https & proxies Henrik Nordstrom (Jul 26)
- Another NEW mIRC bug and ALL mIRC Exploit patches Derek Reynolds (Jul 24)
  - Re: Another NEW mIRC bug and ALL mIRC Exploit patches Mike Zimmerman (Jul 25)
- small bug in 5/98 distribution Sun 4070627 Lloyd Vancil (Jul 24)
  - Re: small bug in 5/98 distribution Sun 4070627 Eugene Bradley (Jul 24)

(Thread continues...)