Red Hat: RHSA-2000:108-04 Critical Modutils Update for Local Exploit

For each RPM for your particular architecture, run:

rpm -Fvh [filename]

where filename is the name of the RPM.

2000-11-17: For Red Hat Linux 6.2, if you installed the previous modutils-2.3.20-0.6.2 packages, you will need to run:

mv /etc/modules.conf /etc/conf.modules

5. Bug IDs fixed ( for more info):

20749 - local root exploit via modutils

6. RPMs required:

Red Hat Linux 6.2:

alpha:

sparc:

i386:

sources:

Red Hat Linux 7.0:

i386:

sources:

7. Verification:

MD5 sum Package Name b21fb3e4bdef79b28c3cfbd679fa9543 6.2/SRPMS/modutils-2.3.21-0.6.2.src.rpm 73953a51d51d173b8acbf93ef387fd81 6.2/alpha/modutils-2.3.21-0.6.2.alpha.rpm 4439637a314f3bb60970795d614022b1 6.2/i386/modutils-2.3.21-0.6.2.i386.rpm c063d22e0aeeaa762e5bd9903af42cc3 6.2/sparc/modutils-2.3.21-0.6.2.sparc.rpm 3ae5ad039cb895f0599d4d52ccf61275 7.0/SRPMS/modutils-2.3.21-1.src.rpm 46b7f3331bccd927d9d7fefbec74f721 7.0/i386/modutils-2.3.21-1.i386.rpm

These packages are GPG signed by Red Hat, Inc. for security. Our key is available at:

You can verify each package with the following command: rpm --checksig

If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg