Red Hat 9313 Published by Philipp Esselbach 0

Updated iptables packages are available for Red Hat Linux 7.3, 9, and Fedora Core 1

---------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated iptables packages resolve security issues
Advisory ID: FLSA:2252
Issue date: 2005-02-10
Product: Red Hat Linux, Fedora Core
Keywords: Bugfix
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=2252
CVE Names: CAN-2004-0986
---------------------------------------------------------------------


---------------------------------------------------------------------
1. Topic:

Updated iptables packages that correct a security problem are now available.

The iptables utility controls the network packet filtering code in the Linux kernel.

2. Relevant releases/architectures:

Red Hat Linux 7.3 - i386
Red Hat Linux 9 - i386
Fedora Core 1 - i386

Red Hat 9313 Published by Philipp Esselbach 0

An updated gpdf package has been released for Fedora Core 1

---------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated gpdf package fixes security issues
Advisory ID: FLSA:2353
Issue date: 2005-02-10
Product: Fedora Core
Keywords: Bugfix
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=2353
CVE Names: CAN-2004-0888 CAN-2004-1125 CAN-2005-0064
---------------------------------------------------------------------


---------------------------------------------------------------------
1. Topic:

An updated gpdf package that fixes a number of integer overflow security flaws is now available.

GPdf is a viewer for Portable Document Format (PDF) files for GNOME.

2. Relevant releases/architectures:

Fedora Core 1 - i386

Red Hat 9313 Published by Philipp Esselbach 0

Updated Squid packages are available for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated Squid package fixes security issues
Advisory ID: RHSA-2005:061-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-061.html
Issue date: 2005-02-11
Updated on: 2005-02-11
Product: Red Hat Enterprise Linux
CVE Names: CAN-2005-0094 CAN-2005-0095 CAN-2005-0096 CAN-2005-0097 CAN-2005-0173 CAN-2005-0174 CAN-2005-0175 CAN-2005-0211 CAN-2005-0241
----------------------------------------------------------------------

1. Summary:

An updated Squid package that fixes several security issues is now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9313 Published by Philipp Esselbach 0

Updated abiword packages are available for Red Hat Linux 7.3 and 9

-----------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated abiword resolves security vulnerabilities
Advisory ID: FLSA:1906
Issue date: 2005-02-08
Product: Red Hat Linux
Keywords: Security
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=1906
CVE Names: CAN-2004-0645
-----------------------------------------------------------------------


-----------------------------------------------------------------------
1. Topic:

Updated abiword packages that fix a security vulnerability are now available.

2. Relevant releases/architectures:

Red Hat Linux 7.3 - i386
Red Hat Linux 9 - i386

Red Hat 9313 Published by Philipp Esselbach 0

Updated libpng packages are available for Red Hat Linux 7.3, 9, and Fedora Core 1

-----------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated libpng resolves security vulnerabilities
Advisory ID: FLSA:1943
Issue date: 2005-02-08
Product: Red Hat Linux
Fedora Core
Keywords: Security
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=1943
https://bugzilla.fedora.us/show_bug.cgi?id=1550
CVE Names: CVE-2002-1363, CAN-2004-0597, CAN-2004-0598,

CAN-2004-0599, CAN-2004-0768
-----------------------------------------------------------------------

Red Hat 9313 Published by Philipp Esselbach 0

An updated Squirrelmail package has been released for Red Hat Enterprise Linux 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated Squirrelmail package fixes security issues
Advisory ID: RHSA-2005:135-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-135.html
Issue date: 2005-02-10
Updated on: 2005-02-10
Product: Red Hat Enterprise Linux
CVE Names: CAN-2005-0075 CAN-2005-0103 CAN-2005-0104
----------------------------------------------------------------------

1. Summary:

An updated Squirrelmail package that fixes several security issues is now available for Red Hat Enterprise Linux 3.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 3 - noarch
Red Hat Desktop version 3 - noarch
Red Hat Enterprise Linux ES version 3 - noarch
Red Hat Enterprise Linux WS version 3 - noarch

Red Hat 9313 Published by Philipp Esselbach 0

Updated xemacs packages are available for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated xemacs packages fix security issue
Advisory ID: RHSA-2005:134-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-134.html
Issue date: 2005-02-10
Updated on: 2005-02-10
Product: Red Hat Enterprise Linux
CVE Names: CAN-2005-0100
----------------------------------------------------------------------

1. Summary:

Updated XEmacs packages that fix a string format issue are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9313 Published by Philipp Esselbach 0

Updated emacs packages are available for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated emacs packages fix security issue
Advisory ID: RHSA-2005:112-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-112.html
Issue date: 2005-02-10
Updated on: 2005-02-10
Product: Red Hat Enterprise Linux
CVE Names: CAN-2005-0100
----------------------------------------------------------------------

1. Summary:

Updated Emacs packages that fix a string format issue are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9313 Published by Philipp Esselbach 0

An updated mod_python package has been released for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated mod_python package fixes security issue
Advisory ID: RHSA-2005:104-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-104.html
Issue date: 2005-02-10
Updated on: 2005-02-10
Product: Red Hat Enterprise Linux
CVE Names: CAN-2005-0088
----------------------------------------------------------------------

1. Summary:

An Updated mod_python package that fixes a security issue in the publisher handler is now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9313 Published by Philipp Esselbach 0

Updated kdelibs/kdebase packages are available for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated kdelibs and kdebase packages correct security issues
Advisory ID: RHSA-2005:009-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-009.html
Issue date: 2005-02-10
Updated on: 2005-02-10
Product: Red Hat Enterprise Linux
CVE Names: CAN-2004-1158 CAN-2004-1165 CAN-2005-0078
----------------------------------------------------------------------

1. Summary:

Updated kdelib and kdebase packages that resolve several security issues are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, ppc64, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9313 Published by Philipp Esselbach 0

Updated mailman packages are available for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated mailman packages fix security vulnerability
Advisory ID: RHSA-2005:136-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-136.html
Issue date: 2005-02-10
Updated on: 2005-02-10
Product: Red Hat Enterprise Linux
CVE Names: CAN-2005-0202
----------------------------------------------------------------------

1. Summary:

Updated mailman packages that correct a mailman security issue are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9313 Published by Philipp Esselbach 0

A Perl update is available for Red Hat Enterprise Linux 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated Perl packages fix security issues
Advisory ID: RHSA-2005:105-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-105.html
Issue date: 2005-02-07
Updated on: 2005-02-07
Product: Red Hat Enterprise Linux
CVE Names: CAN-2005-0155 CAN-2005-0156
----------------------------------------------------------------------

1. Summary:

Updated Perl packages that fix several security issues are now available for Red Hat Enterprise Linux 3.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, ppc64, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9313 Published by Philipp Esselbach 0

Updated Ethereal packages are available for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated Ethereal packages fix security issues
Advisory ID: RHSA-2005:011-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-011.html
Issue date: 2005-02-02
Updated on: 2005-02-02
Product: Red Hat Enterprise Linux
Obsoletes: RHSA-2004:378
CVE Names: CAN-2004-1139 CAN-2004-1140 CAN-2004-1141 CAN-2004-1142 CAN-2005-0007 CAN-2005-0008 CAN-2005-0009 CAN-2005-0010 CAN-2005-0084
----------------------------------------------------------------------

1. Summary:

Updated Ethereal packages that fix various security vulnerabilities are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9313 Published by Philipp Esselbach 0

Updated unarj package are available for Red Hat Linux 7.3, 9, and Fedora Core 1

---------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated unarj package fixes security issue
Advisory ID: FLSA:2272
Issue date: 2005-02-01
Product: Red Hat Linux, Fedora Core
Keywords: Bugfix
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=2272
CVE Names: CAN-2004-0947 CAN-2004-1027
---------------------------------------------------------------------


---------------------------------------------------------------------
1. Topic:

An updated unarj package that fixes a buffer overflow vulnerability and a directory traversal vulnerability is now available.

The unarj program is an archiving utility which can extract ARJ-compatible archives.

2. Relevant releases/architectures:

Red Hat Linux 7.3 - i386
Red Hat Linux 9 - i386
Fedora Core 1 - i386

Red Hat 9313 Published by Philipp Esselbach 0

Updated freeradius packages are available for Fedora Core 1

-----------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated freeradius packages fix security flaws
Advisory ID: FLSA:2187
Issue date: 2005-02-01
Product: Fedora Core
Keywords: Bugfix
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=2187
CVE Names: CAN-2004-0938 CAN-2004-0960 CAN-2004-0961
-----------------------------------------------------------------------


-----------------------------------------------------------------------
1. Topic:

Updated freeradius packages that fix a number of denial of service vulnerabilities as well as minor bugs are now available.

FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized authentication and authorization for a network.

2. Relevant releases/architectures:

Fedora Core 1 - i386

Red Hat 9313 Published by Philipp Esselbach 0

Updated zip packages are available for Red Hat Linux 7.3, 9, and Fedora Core 1

---------------------------------------------------------------------
Fedora Legacy Update Advisory

Synopsis: Updated zip package fixes security issue
Advisory ID: FLSA:2255
Issue date: 2005-02-01
Product: Red Hat Linux, Fedora Core
Keywords: Bugfix
Cross references: https://bugzilla.fedora.us/show_bug.cgi?id=2255
CVE Names: CAN-2004-1010
---------------------------------------------------------------------


---------------------------------------------------------------------
1. Topic:

An updated zip package that fixes a buffer overflow vulnerability is now available.

The zip program is an archiving utility which can create ZIP-compatible archives.

2. Relevant releases/architectures:

Red Hat Linux 7.3 - i386
Red Hat Linux 9 - i386
Fedora Core 1 - i386

Red Hat 9313 Published by Philipp Esselbach 0

An updated perl-DBI package has been released for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated perl-DBI package fixes security issue
Advisory ID: RHSA-2005:069-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-069.html
Issue date: 2005-02-01
Updated on: 2005-02-01
Product: Red Hat Enterprise Linux
CVE Names: CAN-2005-0077
----------------------------------------------------------------------

1. Summary:

An updated perl-DBI package that fixes a temporary file flaw in DBI::ProxyServer is now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9313 Published by Philipp Esselbach 0

Updated CUPS packages are available for Red Hat Enterprise Linux 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated CUPS packages fix security issue
Advisory ID: RHSA-2005:049-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-049.html
Issue date: 2005-02-01
Updated on: 2005-02-01
Product: Red Hat Enterprise Linux
CVE Names: CAN-2005-0064
----------------------------------------------------------------------

1. Summary:

Updated CUPS packages that fixes a security issue are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, ppc64, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64

Red Hat 9313 Published by Philipp Esselbach 0

An updated enscript package has been released for Red Hat Enterprise Linux 2.1 and 3

----------------------------------------------------------------------
Red Hat Security Advisory

Synopsis: Updated enscript package fixes security issues
Advisory ID: RHSA-2005:039-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-039.html
Issue date: 2005-02-01
Updated on: 2005-02-01
Product: Red Hat Enterprise Linux
CVE Names: CAN-2004-1184 CAN-2004-1185 CAN-2004-1186
----------------------------------------------------------------------

1. Summary:

An updated enscript package that fixes several security issues is now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64