Important: Red Hat Security Advisory: : : : Updated bind packages fix buffer overflow in resolver library

Updated BIND packages that fix a number of vulnerabilities are now available for Red Hat Linux on IBM iSeries and pSeries systems. ISC BIND Berkeley Internet Name Domain is an implementation of the DNS Domain Name System protocols. BIND includes a DNS server named, which resolves host names to IP...

Important: Red Hat Security Advisory: : Updated KDE packages fix security issue

Updated KDE packages that resolve a vulnerability in KDE's SSL implementation are now available. KDE is a graphical desktop environment for the X Window System. KDE versions 2.2.2 and earlier have a vulnerability in their SSL implementation that makes it possible for users of Konqueror and other...

Moderate: Red Hat Security Advisory: : Updated gnupg packages fix validation bug

Updated gnupg packages correcting a bug in the GnuPG key validation functions are now available. The GNU Privacy Guard GnuPG is a utility for encrypting data and creating digital signatures. When evaluating trust values for different UIDs assigned to a given key, GnuPG versions earlier than 1.2.2...

[RHSA-2003:169-01] Updated lv packages fix vulnerability

--------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated lv packages fix vulnerability Advisory ID: RHSA-2003:169-01 Issue date: 2003-05-16 Updated on: 2003-05-16 Product: Red Hat Linux Keywords: local root exploit Cross references:...

[RHSA-2003:172-00] Updated 2.4 kernel fixes security vulnerabilities and various bugs

--------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated 2.4 kernel fixes security vulnerabilities and various bugs Advisory ID: RHSA-2003:172-00 Issue date: 2003-05-14 Updated on: 2003-05-14 Product: Red Hat Linux Keywords: dos Cross...

Important: Red Hat Security Advisory: : Updated KDE packages fix security issues

This erratum provides updated KDE packages to resolve two security issues. KDE is a graphical desktop environment for the X Window System. KDE fails in multiple places to properly quote URLs and file names before passing them to a command shell. This could allow remote attackers to execute...

Low: Red Hat Security Advisory: : Updated man packages fix minor vulnerability

Updated man packages fix a minor security vulnerability. The man package includes tools for finding and displaying online documentation. Versions of man before 1.51 have a bug where a malformed man file can cause a program named "unsafe" to be run. To exploit this vulnerability a local attacker...

[RHSA-2003:118-01] Updated mICQ packages fix vulnerability

--------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated mICQ packages fix vulnerability Advisory ID: RHSA-2003:118-01 Issue date: 2003-04-24 Updated on: 2003-04-24 Product: Red Hat Linux Keywords: mICQ malformed ICQ message DoS 0xFE Cross...

Important: Red Hat Security Advisory: : : : Updated libpng packages fix vulnerabilities

Updated libpng packages that fix various buffer overflow vulnerabilities are available for Red Hat Linux on IBM iSeries and pSeries systems. The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a bit-mapped...

CVE-2003-0135

vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers tcpwrappers but is installed as a standalone service, which inadvertently prevents vsftpd from restricting access as intended...

[RHSA-2003:036-01] Updated mgetty packages available

--------------------------------------------------------------------- Red Hat Security Advisory Synopsis: Updated mgetty packages available Advisory ID: RHSA-2003:036-01 Issue date: 2003-04-08 Updated on: 2003-04-08 Product: Red Hat Linux Keywords: mgetty spool permission Cross references:...

Low: Red Hat Security Advisory: : : : Updated mgetty packages available

Updated mgetty packages are now available for Red Hat Linux 7.1, 7.2, 7.3, and 8.0. These updates close a possible buffer overflow and a permissions problem present in versions of mgetty prior to version 1.1.29. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries...

Critical: Red Hat Security Advisory: : New samba packages fix security vulnerability

Updated Samba packages that fix a security vulnerability are now available. Updated 9 April 2003 Fixed Samba packages for Red Hat Linux 7.1 have been added to this erratum. Samba is a suite of utilities which provide file and printer sharing services to SMB/CIFS clients. A security vulnerability...

Important: Red Hat Security Advisory: : Updated balsa and mutt packages fix vulnerabilities

New Balsa, Mutt, and libesmtp packages that fix potential buffer overflow vulnerabilities are now available. Mutt is a text-mode email client. Balsa is a GNOME email client which includes code from Mutt. A potential buffer overflow in Mutt version 1.4 exists when parsing mailbox names returned by...

CVE-2003-0135

vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers tcpwrappers but is installed as a standalone service, which inadvertently prevents vsftpd from restricting access as intended...

CVE-2003-0135

CVE-2003-0135 : The vsftpd FTP daemon on Red Hat Linux 9 is not compiled against TCP wrappers and is installed as a standalone service, which prevents it from restricting access as intended. Root cause: lack of wrapper-based access control. Impact and remediation details are not specified in the ...

CVE-2003-0135

vsftpd FTP daemon in Red Hat Linux 9 is not compiled against TCP wrappers tcpwrappers but is installed as a standalone service, which inadvertently prevents vsftpd from restricting access as intended...

Critical: Red Hat Security Advisory: : Updated kerberos packages fix various vulnerabilities

Updated Kerberos packages for Red Hat Linux 9 fix a number of vulnerabilities found in MIT Kerberos. Kerberos is a network authentication system. The MIT Kerberos team released an advisory describing a number of vulnerabilities that affect the kerberos packages shipped as part of Red Hat Linux 9...

CVE-2002-0169

The CVE-2002-0169 issue concerns the default DocBook stylesheet shipped with Red Hat Linux 6.2–7.2. The insecure option in the stylesheet allowed an untrusted DocBook document to cause file writes outside the current directory by using a full pathname as an element identifier, potentially affecti...

CVE-2002-0062

CVE-2002-0062 is a local privilege-escalation in ncurses 5.0 and the ncurses4 compatibility package, caused by a buffer overflow in routines for moving the physical cursor and scrolling. Debian and Red Hat advisories describe the issue and assign CAN-2002-0062. Affected products include ncurses 5...