MESSAGE
DATE | 2003-04-07 |
FROM | Ruben I Safir
|
SUBJECT | Subject: [hangout] Fwd: RHN Errata Alert: Updated NetPBM packages fix multiple vulnerabilities [rhn-admin@rhn.redhat.com]
|
On 2003.04.06 17:51 Red Hat Network Alert wrote: Red Hat Network has determined that the following advisory is applicable to one or more of the systems you have registered:
Complete information about this errata can be found at the following location: https://rhn.redhat.com/network/errata/errata_details.pxt?eid=1571
Security Advisory - RHSA-2003:060-09 ------------------------------------------------------------------------------ Summary: Updated NetPBM packages fix multiple vulnerabilities
Updated NetPBM packages are available that fix a number of vulnerabilities in the netpbm libraries.
Description: The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm (portable bitmaps), .pgm (portable graymaps), .pnm (portable anymaps), .ppm (portable pixmaps), and others.
During an audit of the NetPBM library, Al Viro, Alan Cox, and Sebastian Krahmer found a number of bugs that are potentially exploitable. These bugs could be exploited by creating a carefully crafted image in such a way that it executes arbitrary code when it is processed by either an application from the netpbm-progs package or an application that uses the vulnerable netpbm library.
One way that an attacker could exploit these vulnerabilities would be to submit a carefully crafted image to be printed, as the LPRng print spooler used by default in Red Hat Linux releases uses netpbm utilities to parse various types of image files.
Users are advised to upgrade to the erratum packages, which contain patches that correct these vulnerabilities. ------------------------------------------------------------------------------
------------- Taking Action ------------- You may address the issues outlined in this advisory in two ways:
- select your server name by clicking on its name from the list available at the following location, and then schedule an errata update for it: https://rhn.redhat.com/network/systemlist/system_list.pxt
- run the Update Agent on each affected server.
--------------------------------- Changing Notification Preferences --------------------------------- To enable/disable your Errata Alert preferences globally please log in to RHN and navigate from "Your RHN" / "Your Account" to the "Preferences" tab.
URL: https://rhn.redhat.com/network/my_account/my_prefs.pxt
You can also enable/disable notification on a per system basis by selecting an individual system from the "Systems List". From the individual system view click the "Details" tab.
---------------- Affected Systems ---------------- According to our records, this errata may apply to one or more of the systems that you've profiled with Red Hat Network. To see precisely which systems are affected, please go to: https://rhn.redhat.com/network/errata/systems_affected.pxt?eid=1571
The Red Hat Network Team
This message is being sent by Red Hat Network Alert to: RHN user login: rubensafir Email address on file:
If you lost your RHN password, you can use the information above to retrieve it by email from the following address: https://rhn.redhat.com/forgot_password.pxt
To cancel these notices, go to: https://rhn.redhat.com/oo.pxt?uid=1726851&oid=2286000
-- __________________________ Brooklyn Linux Solutions __________________________ DRM is THEFT - We are the STAKEHOLDERS http://fairuse.nylxs.com
http://www.mrbrklyn.com - Consulting http://www.inns.net <-- Happy Clients http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive or stories and articles from around the net http://www2.mrbrklyn.com/downtown.html - See the New Downtown Brooklyn....
1-718-382-0585 ____________________________ NYLXS: New Yorker Free Software Users Scene Fair Use - because it's either fair use or useless.... NYLXS is a trademark of NYLXS, Inc
|
|