Description of problem: Mingetty open_tty() allocates a 40 byte buffer for the name of the tty to open. The tty name passed on the command line is not checked for length. Version-Release number of selected component (if applicable): Not sure if this is a security issue as mingetty is not suid. But should still be fixed.
All Fedoras affected.
mingetty-1.08-5.fc14 has been submitted as an update for Fedora 14. https://admin.fedoraproject.org/updates/mingetty-1.08-5.fc14
mingetty-1.08-5.fc13 has been submitted as an update for Fedora 13. https://admin.fedoraproject.org/updates/mingetty-1.08-5.fc13
mingetty-1.08-5.fc12 has been submitted as an update for Fedora 12. https://admin.fedoraproject.org/updates/mingetty-1.08-5.fc12
mingetty-1.08-5.fc12 has been pushed to the Fedora 12 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update mingetty'. You can provide feedback for this update here: https://admin.fedoraproject.org/updates/mingetty-1.08-5.fc12
mingetty-1.08-5.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report.
mingetty-1.08-5.fc13 has been pushed to the Fedora 13 stable repository. If problems still persist, please make note of it in this bug report.
mingetty-1.08-5.fc14 has been pushed to the Fedora 14 stable repository. If problems still persist, please make note of it in this bug report.