Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 526
Alerts This Week
Warning Icon 1 526

Red Hat GDM Security Advisory: RHSA-2003:258 Critical DoS Issue

red hat
Calendar Grey August 21, 2003
Dist Redhat Esm H88
Latest GDM flaws in Red Hat Enterprise Linux could enable unpermitted file retrieval and possible Denial of Service (DoS) incidents. Security update provided under advisory RHSA-2003:258.
Updated GDM packages are available which correct a bug allowing local usersto read any text files on the system, and a denial of service issue ifXDMCP is enabled.

Solution

Before applying this update, make sure all previously released errata relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs.

Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.

5. RPMs required:

Red Hat Linux 7.1:

SRPMS:


i386:


Red Hat Linux 7.1 for iSeries (64 bit):

SRPMS:


ppc:


Red Hat Linux 7.1 for pSeries (64 bit):

SRPMS:


ppc:


Red Hat Linux 7.2:

SRPMS:


i386:


ia64:


Red Hat Linux 7.3:

SRPMS:


i386:


Red Hat Linux 8.0:

SRPMS:


i386:


Red Hat Linux 9:

SRPMS:


i386:




6. Verification:

MD5 sum Package Name 9704d602c1d7101b95ca80f09d115cf4 7.1/en/os/SRPMS/gdm-2.0beta2-46.src.rpm 1badaf70349be1f21e4b4a990835a247 7.1/en/os/i386/gdm-2.0beta2-46.i386.rpm 9704d602c1d7101b95ca80f09d115cf4 7.1/en/os/iSeries/SRPMS/gdm-2.0beta2-46.src.rpm c4d56f8b41f1a006c575dd7c5fdbad03 7.1/en/os/iSeries/ppc/gdm-2.0beta2-46.ppc.rpm 9704d602c1d7101b95ca80f09d115cf4 7.1/en/os/pSeries/SRPMS/gdm-2.0beta2-46.src.rpm c4d56f8b41f1a006c575dd7c5fdbad03 7.1/en/os/pSeries/ppc/gdm-2.0beta2-46.ppc.rpm 380aa52d404a7e1a5ad64e94ced8a938 7.2/en/os/SRPMS/gdm-2.2.3.1-21.src.rpm abeb24df46ba93d175819a9222f86071 7.2/en/os/i386/gdm-2.2.3.1-21.i386.rpm 987175704054c3852c3275d4ce8155c2 7.2/en/os/ia64/gdm-2.2.3.1-21.ia64.rpm 9c6defce518879748d5e335e5ff54d4f 7.3/en/os/SRPMS/gdm-2.2.3.1-23.src.rpm a8b30c05951f1d88f0f374b84772be16 7.3/en/os/i386/gdm-2.2.3.1-23.i386.rpm 3085c2df6e5215d23f2f0458cccaa578 8.0/en/os/SRPMS/gdm-2.4.0.7-14.src.rpm 22311861baaec59b7c32b3258f6f40b1 8.0/en/os/i386/gdm-2.4.0.7-14.i386.rpm 8df8308fc16b3a2c8fbaf1fd99142274 9/en/os/SRPMS/gdm-2.4.1.3-5.1.src.rpm 64eea2519454422dba6f451573e0c3e3 9/en/os/i386/gdm-2.4.1.3-5.1.i386.rpm


These packages are GPG signed by Red Hat for security. Our key is available from Product Signing Keys - Red Hat Customer Portal

You can verify each package with the following command:

rpm --checksig -v

If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command:

md5sum


Summary

Package List


Severity
critical
Lowest
Low
Medium
High
Critical

Advisory ID: RHSA-2003:258-01
Issue date: 2003-08-21
Updated on: 2003-08-21
Product: Red Hat Linux
Keywords: DoS
Cross references:
Obsoletes:

Topic

Relevant Releases Architectures

Red Hat Linux 7.1 - i386

Red Hat Linux 7.1 for iSeries (64 bit) - ppc

Red Hat Linux 7.1 for pSeries (64 bit) - ppc

Red Hat Linux 7.2 - i386, ia64

Red Hat Linux 7.3 - i386

Red Hat Linux 8.0 - i386

Red Hat Linux 9 - i386

Bugs Fixed

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.