Red Hat Linux Advisory: hanterm

Red Hat Security Advisory

1. Topic:

Updated hanterm packages fix two security issues.

2. Relevant releases/architectures:

Red Hat Linux 7.2 – i386, ia64
Red Hat Linux 7.3 – i386
Red Hat Linux 8.0 – i386

3. Problem description:

Hangul Terminal is a terminal emulator for the X Window System,
based on Xterm.

Hangul Terminal provides an escape sequence for reporting the
current window title, which essentially takes the current title and
places it directly on the command line. An attacker can craft an
escape sequence that sets the window title of a victim using Hangul
Terminal to an arbitrary command and then report it to the command
line. Since it is not possible to embed a carriage return into the
window title the attacker would then have to convince the victim to
press Enter for it to process the title as a command, although the
attacker could craft other escape sequences that might convince the
victim to do so.

In addition, it is possible to lock up Hangul Terminal before
version 2.0.5 by sending an invalid DEC UDK escape sequence.

Users are advised to upgrade to these erratum packages, which
contain Hangul Terminal version 2.0.5 with a backported security
patch.

4. Solution:

Before applying this update, make sure all previously released
errata relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade.
Only those RPMs which are currently installed will be updated.
Those RPMs which are not installed but included in the list will
not be updated. Note that you can also use wildcards (*.rpm) if
your current directory only contains the desired RPMs.

Please note that this update is also available via Red Hat
Network. Many people find this an easier way to apply updates. To
use Red Hat Network, launch the Red Hat Update Agent with the
following command:

up2date

This will start an interactive process that will result in the
appropriate RPMs being upgraded on your system.

5. RPMs required:

Red Hat Linux 7.2:

SRPMS:

ftp://updates.redhat.com/7.2/en/os/SRPMS/hanterm-xf-2.0.5-5.7.4.src.rpm

i386:

ftp://updates.redhat.com/7.2/en/os/i386/hanterm-xf-2.0.5-5.7.4.i386.rpm

ia64:

ftp://updates.redhat.com/7.2/en/os/ia64/hanterm-xf-2.0.5-5.7.4.ia64.rpm

Red Hat Linux 7.3:

SRPMS:

ftp://updates.redhat.com/7.3/en/os/SRPMS/hanterm-xf-2.0.5-5.7.4.src.rpm

i386:

ftp://updates.redhat.com/7.3/en/os/i386/hanterm-xf-2.0.5-5.7.4.i386.rpm

Red Hat Linux 8.0:

SRPMS:

ftp://updates.redhat.com/8.0/en/os/SRPMS/hanterm-xf-2.0.5-5.8.0.src.rpm

i386:

ftp://updates.redhat.com/8.0/en/os/i386/hanterm-xf-2.0.5-5.8.0.i386.rpm

6. Verification:

MD5 sum Package Name

93948bca9caee929843ad3729d1c726b
7.2/en/os/SRPMS/hanterm-xf-2.0.5-5.7.4.src.rpm
010b0dc4aca9c77531fe26d663e18e38
7.2/en/os/i386/hanterm-xf-2.0.5-5.7.4.i386.rpm
8e124ec2a41077e48f1bd5f473fc2932
7.2/en/os/ia64/hanterm-xf-2.0.5-5.7.4.ia64.rpm
93948bca9caee929843ad3729d1c726b
7.3/en/os/SRPMS/hanterm-xf-2.0.5-5.7.4.src.rpm
010b0dc4aca9c77531fe26d663e18e38
7.3/en/os/i386/hanterm-xf-2.0.5-5.7.4.i386.rpm
65da5780ca5de4bfa58e0df58761ae90
8.0/en/os/SRPMS/hanterm-xf-2.0.5-5.8.0.src.rpm
5d89e20f0e7f6a649152bbf622a9881c
8.0/en/os/i386/hanterm-xf-2.0.5-5.8.0.i386.rpm

These packages are GPG signed by Red Hat for security. Our key
is available at http://www.redhat.com/solutions/security/news/publickey/

You can verify each package with the following command:

rpm –checksig -v <filename>

If you only wish to verify that each package has not been
corrupted or tampered with, examine only the md5sum with the
following command:

md5sum <filename>

7. References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0077

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0079

8. Contact:

The Red Hat security contact is <security@redhat.com>. More
contact details at http://www.redhat.com/solutions/security/news/contact/

Copyright 2003 Red Hat, Inc.