Updated man package fixing GID security problems.

Updated man packages fixing a local GID man exploit and a
potential GID man to root exploit, as well as a problem with the
man paths of Red Hat Linux 5.x and 6.x.

Users could gain access to the GID man by overrunning a buffer in the
ultimate_source() function.

Users with GID man could get root access by creating man pages with
filenames containing escape characters.

Furthermore, the previous errata package hardcoded Red Hat Linux 7.x man
paths even on Red Hat Linux 5.x and 6.x.

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains
the
desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

42031 - /etc/man.config's new MANPATH's incompatible with rh62
42192 - New 'man' package disagrees with 'tmpwatch'
42450 - man-1.5i-4: local->gid man-> root in update
42915 - makewhatis only works for first element in manpath
43134 - man RPM needs to depend on specific mktemp version
43213 - Man didn't drop privs when adding user PATH as MANPATH
43318 - apropos and whatis broken by update to man-1.5i-4
45646 - Cron generated errors
45827 - Troubles with data updates for 'apropos'
46405 - man-1.5i2-i has incorrect backslash escape in makewhatis awk script
47784 - man problem after an update
48762 - man does not create cat files even if told to do

https://www.redhat.com/security/data/cve/CVE-2001-1028.html
https://www.redhat.com/security/data/cve/CVE-2001-1227.html

GID, heap, makewhatis, man, overflow, path, root, setgid