Issued:
2006-04-04
Updated:
2006-04-04

RHSA-2006:0272 - Security Advisory

Synopsis

openmotif security update

Type/Severity

Security Advisory: Moderate

Topic

Updated openmotif packages that fix a security issue are now available.

This update has been rated as having moderate security impact by the Red Hat
Security Response Team.

Description

OpenMotif provides libraries which implement the Motif industry standard
graphical user interface.

A number of buffer overflow flaws were discovered in OpenMotif's libUil
library. It is possible for an attacker to execute arbitrary code as a
victim who has been tricked into executing a program linked against
OpenMotif, which then loads a malicious User Interface Language (UIL) file.
(CVE-2005-3964)

Users of OpenMotif are advised to upgrade to these erratum packages, which
contain a backported security patch to correct this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Server 2 ia64
  • Red Hat Enterprise Linux Server 2 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Workstation 2 ia64
  • Red Hat Enterprise Linux Workstation 2 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

  • BZ - 174815 - CVE-2005-3964 openmotif libUil buffer overflows

CVEs

References

Red Hat Enterprise Linux Server 4

SRPM
x86_64
openmotif-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 535e4f16d0b3e1cc24dcf7112c21bfd0e9c14792b19f021d11928defe93c8751
openmotif-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 535e4f16d0b3e1cc24dcf7112c21bfd0e9c14792b19f021d11928defe93c8751
openmotif-2.2.3-10.RHEL4.1.x86_64.rpm SHA-256: 2fe4cd4303d5e1c3a7b3150050a9ab748de89899cb23c5cb51069c3481a03021
openmotif-2.2.3-10.RHEL4.1.x86_64.rpm SHA-256: 2fe4cd4303d5e1c3a7b3150050a9ab748de89899cb23c5cb51069c3481a03021
openmotif-devel-2.2.3-10.RHEL4.1.x86_64.rpm SHA-256: 93b9a45bdc38dace830abfa4a9947bfbc72714faf08be46857b3a4fcb0ef5acf
openmotif-devel-2.2.3-10.RHEL4.1.x86_64.rpm SHA-256: 93b9a45bdc38dace830abfa4a9947bfbc72714faf08be46857b3a4fcb0ef5acf
openmotif21-2.1.30-11.RHEL4.5.i386.rpm SHA-256: 4151d43ef9502a95d70cb1e15331498d82d4613474e78eff593943961f938e08
openmotif21-2.1.30-11.RHEL4.5.i386.rpm SHA-256: 4151d43ef9502a95d70cb1e15331498d82d4613474e78eff593943961f938e08
ia64
openmotif-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 535e4f16d0b3e1cc24dcf7112c21bfd0e9c14792b19f021d11928defe93c8751
openmotif-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 535e4f16d0b3e1cc24dcf7112c21bfd0e9c14792b19f021d11928defe93c8751
openmotif-2.2.3-10.RHEL4.1.ia64.rpm SHA-256: ce766da1dbc95d6a71d952f2d5d719dfece6aed967f449e44583994d94a35b71
openmotif-2.2.3-10.RHEL4.1.ia64.rpm SHA-256: ce766da1dbc95d6a71d952f2d5d719dfece6aed967f449e44583994d94a35b71
openmotif-devel-2.2.3-10.RHEL4.1.ia64.rpm SHA-256: 0c21a784d2f31dd65f97cc74c204e35fa4cb3cc5fdd3370629610dfed1e8141f
openmotif-devel-2.2.3-10.RHEL4.1.ia64.rpm SHA-256: 0c21a784d2f31dd65f97cc74c204e35fa4cb3cc5fdd3370629610dfed1e8141f
openmotif21-2.1.30-11.RHEL4.5.i386.rpm SHA-256: 4151d43ef9502a95d70cb1e15331498d82d4613474e78eff593943961f938e08
openmotif21-2.1.30-11.RHEL4.5.i386.rpm SHA-256: 4151d43ef9502a95d70cb1e15331498d82d4613474e78eff593943961f938e08
openmotif21-2.1.30-11.RHEL4.5.ia64.rpm SHA-256: 9badbab8c17ffbf060541a435415504a94e72db053c1f87b7e5a656cd9bee625
openmotif21-2.1.30-11.RHEL4.5.ia64.rpm SHA-256: 9badbab8c17ffbf060541a435415504a94e72db053c1f87b7e5a656cd9bee625
i386
openmotif-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 535e4f16d0b3e1cc24dcf7112c21bfd0e9c14792b19f021d11928defe93c8751
openmotif-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 535e4f16d0b3e1cc24dcf7112c21bfd0e9c14792b19f021d11928defe93c8751
openmotif-devel-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 1081573521842af6c8c424f27486e5185a1228f73c35334933843a7ce01444b1
openmotif-devel-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 1081573521842af6c8c424f27486e5185a1228f73c35334933843a7ce01444b1
openmotif21-2.1.30-11.RHEL4.5.i386.rpm SHA-256: 4151d43ef9502a95d70cb1e15331498d82d4613474e78eff593943961f938e08
openmotif21-2.1.30-11.RHEL4.5.i386.rpm SHA-256: 4151d43ef9502a95d70cb1e15331498d82d4613474e78eff593943961f938e08

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
openmotif-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 535e4f16d0b3e1cc24dcf7112c21bfd0e9c14792b19f021d11928defe93c8751
openmotif-2.2.3-10.RHEL4.1.x86_64.rpm SHA-256: 2fe4cd4303d5e1c3a7b3150050a9ab748de89899cb23c5cb51069c3481a03021
openmotif-devel-2.2.3-10.RHEL4.1.x86_64.rpm SHA-256: 93b9a45bdc38dace830abfa4a9947bfbc72714faf08be46857b3a4fcb0ef5acf
openmotif21-2.1.30-11.RHEL4.5.i386.rpm SHA-256: 4151d43ef9502a95d70cb1e15331498d82d4613474e78eff593943961f938e08
ia64
openmotif-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 535e4f16d0b3e1cc24dcf7112c21bfd0e9c14792b19f021d11928defe93c8751
openmotif-2.2.3-10.RHEL4.1.ia64.rpm SHA-256: ce766da1dbc95d6a71d952f2d5d719dfece6aed967f449e44583994d94a35b71
openmotif-devel-2.2.3-10.RHEL4.1.ia64.rpm SHA-256: 0c21a784d2f31dd65f97cc74c204e35fa4cb3cc5fdd3370629610dfed1e8141f
openmotif21-2.1.30-11.RHEL4.5.i386.rpm SHA-256: 4151d43ef9502a95d70cb1e15331498d82d4613474e78eff593943961f938e08
openmotif21-2.1.30-11.RHEL4.5.ia64.rpm SHA-256: 9badbab8c17ffbf060541a435415504a94e72db053c1f87b7e5a656cd9bee625
i386
openmotif-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 535e4f16d0b3e1cc24dcf7112c21bfd0e9c14792b19f021d11928defe93c8751
openmotif-devel-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 1081573521842af6c8c424f27486e5185a1228f73c35334933843a7ce01444b1
openmotif21-2.1.30-11.RHEL4.5.i386.rpm SHA-256: 4151d43ef9502a95d70cb1e15331498d82d4613474e78eff593943961f938e08

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
openmotif-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 535e4f16d0b3e1cc24dcf7112c21bfd0e9c14792b19f021d11928defe93c8751
openmotif-2.2.3-10.RHEL4.1.x86_64.rpm SHA-256: 2fe4cd4303d5e1c3a7b3150050a9ab748de89899cb23c5cb51069c3481a03021
openmotif-devel-2.2.3-10.RHEL4.1.x86_64.rpm SHA-256: 93b9a45bdc38dace830abfa4a9947bfbc72714faf08be46857b3a4fcb0ef5acf
openmotif21-2.1.30-11.RHEL4.5.i386.rpm SHA-256: 4151d43ef9502a95d70cb1e15331498d82d4613474e78eff593943961f938e08
i386
openmotif-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 535e4f16d0b3e1cc24dcf7112c21bfd0e9c14792b19f021d11928defe93c8751
openmotif-devel-2.2.3-10.RHEL4.1.i386.rpm SHA-256: 1081573521842af6c8c424f27486e5185a1228f73c35334933843a7ce01444b1
openmotif21-2.1.30-11.RHEL4.5.i386.rpm SHA-256: 4151d43ef9502a95d70cb1e15331498d82d4613474e78eff593943961f938e08

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
openmotif-2.2.3-10.RHEL4.1.s390.rpm SHA-256: 0c4a9ef8f36908610e0d121dc13563d467e63d6285ddc07e2d6c1e01cff38767
openmotif-2.2.3-10.RHEL4.1.s390x.rpm SHA-256: 7236c419c744bd27683d2332cf8c1b34efe582bdc28ffb1c020c3914a53645c2
openmotif-devel-2.2.3-10.RHEL4.1.s390x.rpm SHA-256: dcd213cb6ea9c5c0085cfb1075e9bf96c6cfad3aaab5482addaa5df2ec14c112
s390
openmotif-2.2.3-10.RHEL4.1.s390.rpm SHA-256: 0c4a9ef8f36908610e0d121dc13563d467e63d6285ddc07e2d6c1e01cff38767
openmotif-devel-2.2.3-10.RHEL4.1.s390.rpm SHA-256: f71dfee462383be9a0835f4cb23dc1b294b968a3ab11392e7f469e65724c4c66

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
openmotif-2.2.3-10.RHEL4.1.ppc.rpm SHA-256: 924119642fa2dd4569f4e75f2216454dcccc13b1df7bc8680b3799199e65c4e6
openmotif-2.2.3-10.RHEL4.1.ppc64.rpm SHA-256: 2f7fda8c9c7404271185a3d6a66b9c147cd10167b3aa97b90f5118efdf9d5d53
openmotif-devel-2.2.3-10.RHEL4.1.ppc.rpm SHA-256: 8eed5092ce25d04af1493f29eb165e0a9bb1e6abc65e808beb3da095209b1c7b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.