Red Hat 9441 Published by Philipp Esselbach 0

An updated xpdf package is available for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated xpdf package fixes security flaws
Advisory ID: RHSA-2004:592-01
Issue date: 2004-10-27
Updated on: 2004-10-27
Product: Red Hat Enterprise Linux
Obsoletes: RHSA-2004:197
CVE Names: CAN-2004-0888
----------------------------------------------------------------------

1. Summary:

An updated xpdf package that fixes a number of integer overflow security flaws is now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9441 Published by Philipp Esselbach 0

An updated xchat package is available for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated xchat package fixes SOCKSv5 proxy security issue
Advisory ID: RHSA-2004:585-01
Issue date: 2004-10-27
Updated on: 2004-10-27
Product: Red Hat Enterprise Linux
Keywords: X-Chat
CVE Names: CAN-2004-0409
----------------------------------------------------------------------

1. Summary:

An updated xchat package that fixes a stack buffer overflow in the SOCKSv5 proxy code.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9441 Published by Philipp Esselbach 0

An updated mysql-server package is available for Red Hat Enterprise Linux 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated mysql-server package
Advisory ID: RHSA-2004:611-01
Issue date: 2004-10-27
Updated on: 2004-10-27
Product: Red Hat Enterprise Linux LACD
Cross references: RHSA-2004:569
CVE Names: CAN-2004-0835 CAN-2004-0836 CAN-2004-0837 CAN-2004-0957
----------------------------------------------------------------------

1. Summary:

An updated mysql-server package that fixes various security issues is now available in the Red Hat Enterprise Linux 3 Extras channel of Red Hat Network.

2. Relevant releases/architectures:

Red Hat Enterprise Linux LACD 3AS - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux LACD 3Desktop - i386, x86_64
Red Hat Enterprise Linux LACD 3ES - i386, ia64, x86_64
Red Hat Enterprise Linux LACD 3WS - i386, ia64, x86_64

Red Hat 9441 Published by Philipp Esselbach 0

Updated glibc packages are available for Red Hat Linux 7.3

-----------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated glibc packages fix flaws
Advisory ID: FLSA:1947
Issue date: 2004-10-23
Product: Red Hat Linux
Keywords: Bugfix
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=1947
CVE Names: CAN-2002-0029
-----------------------------------------------------------------------


-----------------------------------------------------------------------
1. Topic:

Updated glibc packages that fix a security flaw in the resolver as well as dlclose handling are now available.

The GNU libc packages (known as glibc) contain the standard C libraries used by applications.

2. Relevant releases/architectures:

Red Hat Linux 7.3 - i386

Red Hat 9441 Published by Philipp Esselbach 0

Updated Tripware packages are available for Red Hat Linux 7.3 and 9

-----------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated Tripwire packages fix security flaw
Advisory ID: FLSA:1719
Issue date: 2004-10-23
Product: Red Hat Linux
Keywords: Security
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=1719
CVE Names: CAN-2004-0536
-----------------------------------------------------------------------


-----------------------------------------------------------------------
1. Topic:

Updated Tripwire packages that fix a format string security vulnerability are now available.

2. Relevant releases/architectures:

Red Hat Linux 7.3 - i386
Red Hat Linux 9 - i386

Red Hat 9441 Published by Philipp Esselbach 0

Updated libtiff packages are available for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated libtiff packages
Advisory ID: RHSA-2004:577-01
Issue date: 2004-10-22
Updated on: 2004-10-22
Product: Red Hat Enterprise Linux
CVE Names: CAN-2004-0803 CAN-2004-0886 CAN-2004-0804
----------------------------------------------------------------------

1. Summary:

Updated libtiff packages that fix various buffer and integer overflows are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9441 Published by Philipp Esselbach 0

Updated cups packages are available for Red Hat Enterprise Linux 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated CUPS packages fix security issues
Advisory ID: RHSA-2004:543-01
Issue date: 2004-10-22
Updated on: 2004-10-22
Product: Red Hat Enterprise Linux
Obsoletes: RHSA-2004:449
CVE Names: CAN-2004-0888 CAN-2004-0923
----------------------------------------------------------------------

1. Summary:

Updated cups packages that fix denial of service issues, a security information leak, as well as other various bugs are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, ppc64, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9441 Published by Philipp Esselbach 0

Updated gaim packages are available for Red Hat Enterprise Linux 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated gaim package fixes security issues and bugs
Advisory ID: RHSA-2004:604-01
Issue date: 2004-10-20
Updated on: 2004-10-20
Product: Red Hat Enterprise Linux
CVE Names: CAN-2004-0891
----------------------------------------------------------------------

1. Summary:

An updated gaim package that fixes security issues, fixes various bugs, and includes various enhancements for Red Hat Enterprise Linux 3 is now avaliable.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9441 Published by Philipp Esselbach 0

Updated mysql packages are available for Red Hat Enterprise Linux 2.1

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated mysql packages fix security issues and bugs
Advisory ID: RHSA-2004:597-01
Issue date: 2004-10-20
Updated on: 2004-10-20
Product: Red Hat Enterprise Linux
Obsoletes: RHSA-2003:282
CVE Names: CAN-2004-0381 CAN-2004-0388 CAN-2004-0457 CAN-2004-0835 CAN-2004-0836 CAN-2004-0837 CAN-2004-0957
----------------------------------------------------------------------

1. Summary:

Updated mysql packages that fix various security issues, as well as a number of bugs, are now available for Red Hat Enterprise Linux 2.1.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386

Red Hat 9441 Published by Philipp Esselbach 0

Updated squid packages are available for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated squid package fixes vulnerability
Advisory ID: RHSA-2004:591-01
Issue date: 2004-10-20
Updated on: 2004-10-20
Product: Red Hat Enterprise Linux
Obsoletes: RHSA-2004:462
CVE Names: CAN-2004-0918
----------------------------------------------------------------------

1. Summary:

An updated squid package that fixes a remote denial of service vulnerability is now avaliable.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9441 Published by Philipp Esselbach 0

Updated mysql packages are available for Red Hat Enterprise Linux 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated mysql packages fix minor security issues and bugs
Advisory ID: RHSA-2004:569-01
Issue date: 2004-10-20
Updated on: 2004-10-20
Product: Red Hat Enterprise Linux
CVE Names: CAN-2004-0381 CAN-2004-0388 CAN-2004-0457
----------------------------------------------------------------------

1. Summary:

Updated mysql packages that fix various temporary file security issues, as well as a number of bugs, are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, ppc64, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9441 Published by Philipp Esselbach 0

Updated ImageMagick packages are available for Red Hat Enterprise Linux 2.1

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated ImageMagick packages fix security vulnerabilities
Advisory ID: RHSA-2004:494-01
Issue date: 2004-10-20
Updated on: 2004-10-20
Product: Red Hat Enterprise Linux
CVE Names: CAN-2003-0455 CAN-2004-0827
----------------------------------------------------------------------

1. Summary:

Updated ImageMagick packages that fix various security vulnerabilities are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386

Red Hat 9441 Published by Philipp Esselbach 0

Updated ImageMagick packages are available for Red Hat Enterprise Linux 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated ImageMagick packages fix security vulnerability
Advisory ID: RHSA-2004:480-01
Issue date: 2004-10-20
Updated on: 2004-10-20
Product: Red Hat Enterprise Linux
CVE Names: CAN-2004-0827
- ---------------------------------------------------------------------

1. Summary:

Updated ImageMagick packages that fix a BMP loader vulnerability are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9441 Published by Philipp Esselbach 0

An updated kernel has been released for Red Hat Linux 7.3 and 9

-----------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated kernel resolves security vulnerabilities
Advisory ID: FLSA:1804
Issue date: 2004-10-18
Product: Red Hat Linux
Keywords: Security
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=1804
CVE Names: CAN-2004-0619, CAN-2004-0497, CAN-2004-0587,
CAN-2004-0658, CAN-2004-0415, CAN-2004-0427,
CAN-2004-0495, CAN-2004-0535, CAN-2004-0554,
CAN-2004-0228, CAN-2004-0178, CAN-2004-0181,
CAN-2004-0394, CAN-2004-0003, CAN-2004-0109,
CAN-2004-0133
-----------------------------------------------------------------------


---------------------------------------------------------------------
1. Topic:

Updated kernel packages that fix security vulnerabilities which may allow local users to gain root privileges are now available. These packages also resolve other minor issues.

2. Relevent releases/architectures:

Red Hat Linux 7.3 - i386, i586, i686, athlon
Red Hat Linux 9 - i386, i586, i686, athlon

Red Hat 9441 Published by Philipp Esselbach 0

Updated gaim packages are available for Red Hat Linux 7.3 and 9

-----------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated gaim package resolves security issues
Advisory ID: FLSA:1237
Issue date: 2004-10-16
Product: Red Hat Linux
Keywords: Bugfix
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=1237
CVE Names: CAN-2004-0006 CAN-2004-0007 CAN-2004-0008
CAN-2004-0500 CAN-2004-0754 CAN-2004-0784
CAN-2004-0785
-----------------------------------------------------------------------


-----------------------------------------------------------------------
1. Topic:

An updated gaim package that fixes several security issues is now available.

2. Relevant releases/architectures:

Red Hat Linux 7.3 - i386
Red Hat Linux 9 - i386

Red Hat 9441 Published by Philipp Esselbach 0

Updated CUPS packages are available for Red Hat Linux 9 and Fedora Core 1

-----------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated CUPS packages fix security vulnerability
Advisory ID: FLSA:2072
Issue date: 2004-10-16
Product: Red Hat Linux, Fedora Core
Keywords: Bugfix
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=2072
CVE Names: CAN-2004-0558
-----------------------------------------------------------------------


-----------------------------------------------------------------------
1. Topic:

Updated cups packages that fix a denial of service vulnerability are now available.

The Common UNIX Printing System (CUPS) is a print spooler.

2. Relevant releases/architectures:

Red Hat Linux 9 - i386
Fedora Core 1 - i386

Red Hat 9441 Published by Philipp Esselbach 0

An updated Samba package has been released for Red Hat Linux 7.3 and 9

-----------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated samba resolves security vulnerabilities
Advisory ID: FLSA:2102
Issue date: 2004-10-14
Product: Red Hat Linux
Keywords: Security
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=2102
CVE Names: CAN-2004-0686, CAN-2004-0815
-----------------------------------------------------------------------


-----------------------------------------------------------------------
1. Topic:

[Updated 14th October to correct broken packages and document further fixes]

Updated samba packages that fix an input validation vulnerability are now available.

Samba provides file and printer sharing services to SMB/CIFS clients.

2. Relevant releases/architectures:

Red Hat Linux 7.3 - i386
Red Hat Linux 9 - i386