(RHSA-2006:0272) openmotif security update

2006-04-0400:00:00

access.redhat.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

85.3%

JSON

OpenMotif provides libraries which implement the Motif industry standard
graphical user interface.

A number of buffer overflow flaws were discovered in OpenMotif’s libUil
library. It is possible for an attacker to execute arbitrary code as a
victim who has been tricked into executing a program linked against
OpenMotif, which then loads a malicious User Interface Language (UIL) file.
(CVE-2005-3964)

Users of OpenMotif are advised to upgrade to these erratum packages, which
contain a backported security patch to correct this issue.

OSVersionArchitecturePackageVersionFilename
RedHatanyia64openmotif< 2.2.3-5.RHEL3.3openmotif-2.2.3-5.RHEL3.3.ia64.rpm
RedHatanyi386openmotif21< 2.1.30-11.RHEL4.5openmotif21-2.1.30-11.RHEL4.5.i386.rpm
RedHatanyppc64openmotif< 2.2.3-10.RHEL4.1openmotif-2.2.3-10.RHEL4.1.ppc64.rpm
RedHatanyia64openmotif-devel< 2.2.3-10.RHEL4.1openmotif-devel-2.2.3-10.RHEL4.1.ia64.rpm
RedHatanys390xopenmotif< 2.2.3-5.RHEL3.3openmotif-2.2.3-5.RHEL3.3.s390x.rpm
RedHatanyia64openmotif-devel< 2.2.3-5.RHEL3.3openmotif-devel-2.2.3-5.RHEL3.3.ia64.rpm
RedHatanyppcopenmotif-devel< 2.2.3-10.RHEL4.1openmotif-devel-2.2.3-10.RHEL4.1.ppc.rpm
RedHatanyi386openmotif< 2.1.30-13.21AS.6openmotif-2.1.30-13.21AS.6.i386.rpm
RedHatanyx86_64openmotif-devel< 2.2.3-5.RHEL3.3openmotif-devel-2.2.3-5.RHEL3.3.x86_64.rpm
RedHatanyppc64openmotif< 2.2.3-5.RHEL3.3openmotif-2.2.3-5.RHEL3.3.ppc64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ia64	openmotif	< 2.2.3-5.RHEL3.3	openmotif-2.2.3-5.RHEL3.3.ia64.rpm
RedHat	any	i386	openmotif21	< 2.1.30-11.RHEL4.5	openmotif21-2.1.30-11.RHEL4.5.i386.rpm
RedHat	any	ppc64	openmotif	< 2.2.3-10.RHEL4.1	openmotif-2.2.3-10.RHEL4.1.ppc64.rpm
RedHat	any	ia64	openmotif-devel	< 2.2.3-10.RHEL4.1	openmotif-devel-2.2.3-10.RHEL4.1.ia64.rpm
RedHat	any	s390x	openmotif	< 2.2.3-5.RHEL3.3	openmotif-2.2.3-5.RHEL3.3.s390x.rpm
RedHat	any	ia64	openmotif-devel	< 2.2.3-5.RHEL3.3	openmotif-devel-2.2.3-5.RHEL3.3.ia64.rpm
RedHat	any	ppc	openmotif-devel	< 2.2.3-10.RHEL4.1	openmotif-devel-2.2.3-10.RHEL4.1.ppc.rpm
RedHat	any	i386	openmotif	< 2.1.30-13.21AS.6	openmotif-2.1.30-13.21AS.6.i386.rpm
RedHat	any	x86_64	openmotif-devel	< 2.2.3-5.RHEL3.3	openmotif-devel-2.2.3-5.RHEL3.3.x86_64.rpm
RedHat	any	ppc64	openmotif	< 2.2.3-5.RHEL3.3	openmotif-2.2.3-5.RHEL3.3.ppc64.rpm