SOT Linux Security Advisory
Subject: Updated grep package for SOT Linux 2003
Advisory ID: SLSA-2004:12
Date: Wednesday, April 7, 2004
Product: SOT Linux 2003
1. Problem description
The grep program is a utility for searching through text
files.
A deficiency has been identified in grep’s search algorithm. The
algorithm was found to be extremely inefficient when searching
UTF-8 encoded text. The source of the inefficiency has been
identified and fixed.
UTF-8 is a text encoding method for multibyte representations of
characters.
All users are advised to upgrade to these erratum packages,
which resolve this issue.
2. Updated packages
SOT Linux 2003 Desktop:
i386:
ftp://ftp.sot.com/updates/2003/Desktop/i386/grep-2.5.1-1.i386.rpm
SRPMS:
ftp://ftp.sot.com/updates/2003/Desktop/SRPMS/grep-2.5.1-1.src.rpm
SOT Linux 2003 Server:
i386:
ftp://ftp.sot.com/updates/2003/Server/i386/grep-2.5.1-1.i386.rpm
SRPMS:
ftp://ftp.sot.com/updates/2003/Server/SRPMS/grep-2.5.1-1.src.rpm
3. Upgrading package
Before applying this update, make sure all previously released
errata relevant to your system have been applied.
Use up2date to automatically upgrade the fixed packages.
If you want to upgrade manually, download the updated package
from the SOT Linux FTP site (use the links above) or from one of
our mirrors. The list of mirrors can be obtained at www.sot.com/en/linux
Update the package with the following command: rpm -Uvh
<filename>
4. Verification
All packages are PGP signed by SOT for security.
You can verify each package with the following command: rpm
–checksig <filename>
If you wish to verify the integrity of the downloaded package,
run “md5sum <filename>” and compare the output with data
given below.
Package Name MD5 sum
/Desktop/i386/grep-2.5.1-1.i386.rpm
3f7a08404fec79f4ca187e8eb8b64b4e
/Desktop/SRPMS/grep-2.5.1-1.src.rpm
8f4f23e788a738b3e10a75dbb5f8eaed
/Server/i386/grep-2.5.1-1.i386.rpm
3f7a08404fec79f4ca187e8eb8b64b4e
/Server/SRPMS/grep-2.5.1-1.src.rpm
8f4f23e788a738b3e10a75dbb5f8eaed
5. References
http://www.gnu.org/software/grep/grep.html
Copyright(c) 2001-2003 SOT