Important: Red Hat Security Advisory: : : : Updated PAM packages fix bug in pam_xauth module

Updated PAM packages are now available for Red Hat Linux 7.1, 7.2, 7.3, and 8.0. These packages correct a bug in pamxauth's handling of authorization data for the root user. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. The pamxauth module is used to...

Low: Red Hat Security Advisory: : : : Updated lynx packages fix CRLF injection vulnerability

Updated lynx packages are available that fix an error in the way lynx parses its command line arguments, which can lead to faked headers being sent to a web server. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. Lynx is a character-cell Web browser,...

Important: Red Hat Security Advisory: mozilla security update

Updated Mozilla packages are now available for Red Hat Linux Advanced Server. These new packages fix vulnerabilities in previous versions of Mozilla. Mozilla is an open source Web browser. Versions of Mozilla prior to version 1.0.1 contain various security vulnerabilities. These vulnerabilities...

kernel-utils sets insecure permissions on "uml_net" utility

Overview The umlnet utility, part of the kernel-utils package in Red Hat Linux 8.0, was shipped with incorrect permissions. Description User-Mode Linux UML is a tool to provide a virtual machine in which to run another copy of Linux. In Red Hat linux 8.0, the kernel-utils package contains the UML...

[RHSA-2003:043-12] Updated WindowMaker packages fix vulnerability in theme-loading

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated WindowMaker packages fix vulnerability in theme-loading Advisory ID: RHSA-2003:043-12 Issue date: 0000-01-01 Updated on: 2003-02-05 Product: Red Hat Linux Keywords:...

Moderate: Red Hat Security Advisory: : Updated w3m packages fix cross-site scripting issues

New w3m packages are available that fix two cross-site scripting issues. w3m is a pager with Web browsing capabilities. Two cross-site scripting XSS issues have been found in w3m. An XSS vulnerability in w3m 0.3.2 allows remote attackers to insert arbitrary HTML and web script into frames. Frames...

Important: Red Hat Security Advisory: : : : Updated Xpdf packages fix security vulnerability

Updated Xpdf packages are now available that fix a vulnerability in which a maliciously-crafted pdf document could run arbitrary code. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. Xpdf is a viewer for Portable Document Format PDF files. During an audi...

Critical: Red Hat Security Advisory: : Updated openldap packages available

Updated openldap packages are available which fix a number of local and remote buffer overflows in libldap and the slapd and slurpd servers, and potential issues stemming from using user-specified LDAP configuration files. OpenLDAP is a suite of LDAP Lightweight Directory Access Protocol...

[RHSA-2003:025-20] Updated 2.4 kernel fixes various vulnerabilities

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated 2.4 kernel fixes various vulnerabilities Advisory ID: RHSA-2003:025-20 Issue date: 2003-01-24 Updated on: 2003-02-03 Product: Red Hat Linux Keywords: ethernet frame...

Moderate: Red Hat Security Advisory: glibc security update

Updated glibc packages are available to fix a buffer overflow in the resolver. The GNU C library package, glibc, contains standard libraries used by multiple programs on the system. A read buffer overflow vulnerability exists in the glibc resolver code in versions of glibc up to and including...

Important: Red Hat Security Advisory: libpng security update

Updated libpng packages are available which fix a buffer overflow vulnerability. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 The libpng package contains a library of functions for creating and manipulating PNG Portable Network Graphics image format files. PNG is a...

Moderate: Red Hat Security Advisory: krb5 security update

Updated packages fix a vulnerability found in the Kerberos FTP client distributed with the Red Hat Linux Advanced Server krb5 packages. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1. For Advanced Workstation 2.1 these packages also fix CAN-2002-1235 as described in...

Important: Red Hat Security Advisory: postgresql security update

Updated PostgreSQL packages are available which correct several minor security vulnerabilities. Updated 06 Feb 2003 Added fixed packages for Advanced Workstation 2.1 PostgreSQL is an advanced Object-Relational database management system DBMS. Red Hat Linux Advanced Server 2.1 shipped with...

Critical: Red Hat Security Advisory: : : : Updated CVS packages available

Updated cvs packages are now available for Red Hat Linux 6.2, 7, 7.1, 7.2, 7.3, and 8.0. These updates close a vulnerability which would permit arbitrary command execution on servers configured to allow anonymous read-only access. Updated 16 April 2003 Added packages for Red Hat Linux on IBM...

Important: Red Hat Security Advisory: : : : Updated vim packages fix modeline vulnerability

Updated vim packages are now available for Red Hat Linux. These updates resolve a security issue when opening a specially crafted text file. Updated 16 April 2003 Added packages for Red Hat Linux on IBM iSeries and pSeries systems. VIM Vi IMproved is a version of the vi editor. VIM allows a user ...

Important: Red Hat Security Advisory: : Updated MySQL packages fix various security issues

Updated MySQL packages are available for Red Hat Linux 7, 7.1, 7.2, 7.3, and 8.0 which fix security vulnerabilities found in the MySQL server. MySQL is a multi-user, multi-threaded SQL database server. While auditing MySQL, Stefan Esser found security vulnerabilities that can be used to crash the...

Critical: Red Hat Security Advisory: openldap security update

Updated OpenLDAP packages are available which fix a number of local and remote buffer overflows in libldap as well as the slapd and slurpd daemons. Additionally, potential issues stemming from using user-specified LDAP configuration files have been addressed. Updated 06 Feb 2003 Added fixed...

Important: Red Hat Security Advisory: : Updated PostgreSQL packages fix security issues and bugs

Updated PostgreSQL packages are available for Red Hat Linux 7.3 and 8.0. These packages correct several security and other bugs. A separate advisory deals with updated PostgreSQL packages for Red Hat Linux 6.2, 7, 7.1, and 7.2. PostgreSQL is an advanced Object-Relational database management syste...

Important: Red Hat Security Advisory: : Updated CUPS packages fix various vulnerabilities

Updated CUPS packages are available for Red Hat Linux 7.3 and 8.0 which fix various security issues. The Common UNIX Printing System CUPS provides a portable printing layer. A number of vulnerabilities have been discovered in CUPS. CUPS was distributed with Red Hat Linux 7.3 and 8.0 but is not...

Important: Red Hat Security Advisory: : : : Updated libpng packages fix buffer overflow

Updated libpng packages are available that fix a buffer overflow vulnerability. Updated 15 Jan 2003 Advisory updated to include libpng10 packages for Red Hat Linux 8.0. libpng10 contains compatibility libraries used to run binaries that were linked dynamically with libpng 1.0.x. The libpng packag...