Red Hat Essential and Critical Security Patch Updates

Red Hat 6.2: 'XEmacs' vulnerability

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

The XEmacs package as shipped with Red Hat PowerTools 6.2 has a securityproblem with gnuserv and gnuclient, due to a buffer overflow and weaksecurity.

LinuxSecurity.com Team
Feb 06, 2001

Red Hat: 'inetd' vulnerability

The inetd server as shipped with Red Hat Linux 6.2 fails to close socketsfor internal services properly.

LinuxSecurity.com Team
Jan 30, 2001

Red Hat: 'bind' vulnerabilities

Several security problems have been found in the bind 8.2.2 series.

LinuxSecurity.com Team
Jan 29, 2001

Red Hat: 'micq' buffer overflow

New micq packages are available which fix a buffer overflow vulnerability.

LinuxSecurity.com Team
Jan 25, 2001

Red Hat: 'php' updates

This update fixes several general problems with php3 and 4, along with some security holes in versions 4.0 through 4.0.4 of php.

LinuxSecurity.com Team
Jan 24, 2001

Red Hat: 'icecast' format string vulnerability

There is a format string vulnerability in icecast that can allow a remote user to execute arbitrary code.

LinuxSecurity.com Team
Jan 24, 2001

Red Hat: 'mysql' vulnerabilities

The MySQL database that shipped with Red Hat Linux 7 and the updates for ithave been reported by the MySQL authors to have security problems.

LinuxSecurity.com Team
Jan 23, 2001

Red Hat: 'glibc' vulnerability

Because of a typo in glibc source RESOLV_HOST_CONF and RES_OPTIONS variables were not removed from environment for SUID/SGID programs.

LinuxSecurity.com Team
Jan 11, 2001

RedHat: 'stunnel' vulnerabilities

This errata changes the default directory used forPID files to /var/run.

LinuxSecurity.com Team
Dec 21, 2000

RedHat: UPDATE: 'mysql' vulnerabilities

The MySQL packages shipped in Red Hat Linux 7 and as updates had bugs whichcaused the DB engine to return bad results or crash.

LinuxSecurity.com Team
Dec 20, 2000

RedHat: UPDATE: 'Zope' vulnerability

An issue involves incorrect protection of a data updating method on Imageand File objects has been fixed.

LinuxSecurity.com Team
Dec 20, 2000

Red Hat: 'rp-pppoe' DoS

Bad TCP packets (e.g. a SYN packet with kind=3, len=0) over aPPP-over-Ethernet link could lock up rp-pppoe.

LinuxSecurity.com Team
Dec 20, 2000

Red Hat: two 'gnupg' vulnerabilities

Updated gnupg packages are now available for Red Hat Linux 6.x and 7.

LinuxSecurity.com Team
Dec 20, 2000

Red Hat: 'slocate' heap overflow

By using a carefully crafted database, a local user could overwrite some of slocate's internal structures, leading to a local group slocate compromise.