openmotif, openmotif21 security update

2006-04-0412:53:15

CentOS Project

lists.centos.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.7%

JSON

CentOS Errata and Security Advisory CESA-2006:0272

OpenMotif provides libraries which implement the Motif industry standard
graphical user interface.

A number of buffer overflow flaws were discovered in OpenMotif’s libUil
library. It is possible for an attacker to execute arbitrary code as a
victim who has been tricked into executing a program linked against
OpenMotif, which then loads a malicious User Interface Language (UIL) file.
(CVE-2005-3964)

Users of OpenMotif are advised to upgrade to these erratum packages, which
contain a backported security patch to correct this issue.

Affected packages:
openmotif
openmotif-devel
openmotif21

Upstream details at:
https://access.redhat.com/errata/RHSA-2006:0272

OSVersionArchitecturePackageVersionFilename
CentOS3i386openmotif< 2.2.3-5.RHEL3.3openmotif-2.2.3-5.RHEL3.3.i386.rpm
CentOS3i386openmotif-devel< 2.2.3-5.RHEL3.3openmotif-devel-2.2.3-5.RHEL3.3.i386.rpm
CentOS3i386openmotif21< 2.1.30-9.RHEL3.7openmotif21-2.1.30-9.RHEL3.7.i386.rpm
CentOS3i386openmotif< 2.2.3-5.RHEL3.3openmotif-2.2.3-5.RHEL3.3.i386.rpm
CentOS3x86_64openmotif< 2.2.3-5.RHEL3.3openmotif-2.2.3-5.RHEL3.3.x86_64.rpm
CentOS3x86_64openmotif-devel< 2.2.3-5.RHEL3.3openmotif-devel-2.2.3-5.RHEL3.3.x86_64.rpm
CentOS3i386openmotif21< 2.1.30-9.RHEL3.7openmotif21-2.1.30-9.RHEL3.7.i386.rpm
CentOS4i386openmotif21< 2.1.30-11.RHEL4.5openmotif21-2.1.30-11.RHEL4.5.i386.rpm
CentOS4i386openmotif< 2.2.3-10.RHEL4.1openmotif-2.2.3-10.RHEL4.1.i386.rpm
CentOS4x86_64openmotif< 2.2.3-10.RHEL4.1openmotif-2.2.3-10.RHEL4.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	3	i386	openmotif	< 2.2.3-5.RHEL3.3	openmotif-2.2.3-5.RHEL3.3.i386.rpm
CentOS	3	i386	openmotif-devel	< 2.2.3-5.RHEL3.3	openmotif-devel-2.2.3-5.RHEL3.3.i386.rpm
CentOS	3	i386	openmotif21	< 2.1.30-9.RHEL3.7	openmotif21-2.1.30-9.RHEL3.7.i386.rpm
CentOS	3	i386	openmotif	< 2.2.3-5.RHEL3.3	openmotif-2.2.3-5.RHEL3.3.i386.rpm
CentOS	3	x86_64	openmotif	< 2.2.3-5.RHEL3.3	openmotif-2.2.3-5.RHEL3.3.x86_64.rpm
CentOS	3	x86_64	openmotif-devel	< 2.2.3-5.RHEL3.3	openmotif-devel-2.2.3-5.RHEL3.3.x86_64.rpm
CentOS	3	i386	openmotif21	< 2.1.30-9.RHEL3.7	openmotif21-2.1.30-9.RHEL3.7.i386.rpm
CentOS	4	i386	openmotif21	< 2.1.30-11.RHEL4.5	openmotif21-2.1.30-11.RHEL4.5.i386.rpm
CentOS	4	i386	openmotif	< 2.2.3-10.RHEL4.1	openmotif-2.2.3-10.RHEL4.1.i386.rpm
CentOS	4	x86_64	openmotif	< 2.2.3-10.RHEL4.1	openmotif-2.2.3-10.RHEL4.1.x86_64.rpm