RHSA-2005:299 - Security Advisory

Topic

Updated realplayer packages that fix a number of security issues are now
available for Red Hat Enterprise Linux 3 Extras.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

The realplayer package contains RealPlayer, a media format player.

A number of security issues have been discovered in RealPlayer 8 of which a
subset are believed to affect the Linux version as shipped with Red Hat
Enterprise Linux 3 Extras. RealPlayer 8 is no longer supported by
RealNetworks.

Users of RealPlayer are advised to upgrade to this erratum package which
contains RealPlayer 10.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

Affected Products

• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Desktop 3 i386

Fixes

• BZ - 150341 - RHEL3 requires update to RealPlayer 10 for security reasons

CVEs

• CVE-2005-0455
• CVE-2005-0611
• CVE-2004-0387
• CVE-2004-0550
• CVE-2005-0189
• CVE-2005-0191

References

(none)