RE: [cobalt-security] Possible problem?

[Tony Chesser-Evans <tchesser@xxxxxxxxx>]

> I'm running a RaQ2, and I've installed all
> the updates.
> 
> Should the commands behave the same
> (i.e. yield no output from these rpm commands)
> on all Cobalt machines?
> 
> I'm getting the following output:
> 
> # rpm -V procps
> Unsatisfied dependencies for procps-1.2.2-2: libncurses.so.3.0
> #
> 
> Yeow!!!  Does this mean I've been hacked???

I also have a Raq2.  When I run 'rpm -v procps' I get the same results as
you.  When I check the version of ncurses on my system, it tells me that I
have libncurses.so.4 instead of libncurses.so.3.   Consequently, I think
they just need to release a new "procps" package for Raq2 which depends on
ncurses4 instead of ncurses3.

I've run the other steps they've suggested, and all other indications are
that our box is NOT compromised.  Consequently, I don't think this one item
should indicate a compromise.

Tony Chesser-Evans
Interactive Business Solutions, Inc.
http://www.n2biz.com