Oval Definition:oval:com.redhat.rhsa:def:20060272
Revision Date:2006-04-04Version:641
Title:RHSA-2006:0272: openmotif security update (Moderate)
Description:OpenMotif provides libraries which implement the Motif industry standard graphical user interface.

  • A number of buffer overflow flaws were discovered in OpenMotif's libUil library. It is possible for an attacker to execute arbitrary code as a victim who has been tricked into executing a program linked against OpenMotif, which then loads a malicious User Interface Language (UIL) file. (CVE-2005-3964)

    Users of OpenMotif are advised to upgrade to these erratum packages, which contain a backported security patch to correct this issue.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2005-3964
    RHSA-2006:0272
    RHSA-2006:0272-01
    RHSA-2006:0272-01
    Platform(s):Red Hat Enterprise Linux 3
    Red Hat Enterprise Linux 4
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 3 is installed
  • AND
  • openmotif-devel is earlier than 0:2.2.3-5.RHEL3.3
  • AND openmotif-devel is signed with Red Hat master key
  • openmotif is earlier than 0:2.2.3-5.RHEL3.3
  • AND openmotif is signed with Red Hat master key
  • openmotif21 is earlier than 0:2.1.30-9.RHEL3.7
  • AND openmotif21 is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • openmotif21 is earlier than 0:2.1.30-11.RHEL4.5
  • AND openmotif21 is signed with Red Hat master key
  • openmotif is earlier than 0:2.2.3-10.RHEL4.1
  • AND openmotif is signed with Red Hat master key
  • openmotif-devel is earlier than 0:2.2.3-10.RHEL4.1
  • AND openmotif-devel is signed with Red Hat master key
  • Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • openmotif21 is earlier than 0:2.1.30-11.RHEL4.5
  • AND openmotif21 is signed with Red Hat redhatrelease2 key
  • openmotif is earlier than 0:2.2.3-10.RHEL4.1
  • AND openmotif is signed with Red Hat redhatrelease2 key
  • openmotif-devel is earlier than 0:2.2.3-10.RHEL4.1
  • AND openmotif-devel is signed with Red Hat redhatrelease2 key
  • BACK