[ILUG] Fwd: RedHat: Buffer Overflow in "ls" and "mkdir"

[Rick Moen]

Quoting Marek (m.mcgann at sussex.ac.uk):

> Thought you might be interested to see the below - it's the first time
> I've seen anything like this for Linux (apologies for the html mail,
> but that's how it arrived) . 
> 
> I presume it's this Joeio in Stanford (or whoever) trying to spam his
> way into Red Hat boxes?

Real security advisories get posted to the appropriate Red Hat security
advisory mailing list (http://www.redhat.com/security/team/advisories.html),
and are-GPG signed with one of these keys:
https://www.redhat.com/security/team/key.html

As for that matter are the software updates themselves, which are in
GPG-signed RPM format from an approrpriate redhat.com server, not in
unsigned tarballs from some whacked individual's account at Stanford U.
(which is obviously not the "Stanford RedHat [sic] mirror", for that
matter).