Red Hat 5.2 & 6.x RHSA-2000:045-01 Moderate: gpm Denial Of Service

For each RPM for your particular architecture, run:

rpm -Fvh [filename]

where filename is the name of the RPM.

For 6.x systems, you must upgrade your pam to the version discussed in RHSA-2000:044 to achieve protection from the denial of service attack.

For Red Hat Linux 5.2, if you use gpm's "repeater" functionality for X Windows, you will need to reenable access to group/other users of /dev/gpmctl with the chown command. Red Hat Linux does not make use of this functionality by default, and we do not recommend taking this action for the reasons explained above.

5. Bug IDs fixed ( for more info):

11607 - Newest gpm RPM package will not install

6. RPMs required:

Red Hat Linux 5.2:

sparc:

alpha:

i386:

sources:

Red Hat Linux 6.2:

sparc:

i386:

alpha:

sources:

7. Verification:

MD5 sum Package Name 668c1dd35c9e28cd54c34aed0126afe9 5.2/alpha/gpm-1.19.3-0.5.x.alpha.rpm 6e5ae7e9d4f552978d4821fe5e06e27b 5.2/i386/gpm-1.19.3-0.5.x.i386.rpm 13be2dda7373cbb90567b11dca1e8a76 5.2/sparc/gpm-1.19.3-0.5.x.sparc.rpm 8205248615a5e249e3612753ec7d7c08 6.2/SRPMS/gpm-1.19.3-0.6.x.src.rpm 1750a3ba1ff2094e9e77bcaac8ece826 6.2/alpha/gpm-1.19.3-0.6.x.alpha.rpm 0dd38c9d324a9e82ab8aceb75394a94e 6.2/i386/gpm-1.19.3-0.6.x.i386.rpm 274dfea2fffb8dc6785686409ba3f37a 6.2/sparc/gpm-1.19.3-0.6.x.sparc.rpm

These packages are GPG signed by Red Hat, Inc. for security. Our key is available at:

You can verify each package with the following command: rpm --checksig

If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg