Synopsis

Critical: gnomemeeting security update

Type/Severity

Security Advisory: Critical

Topic

Updated gnomemeeting packages that fix a security issue are now available
for Red Hat Enterprise Linux.

This update has been rated as having critical security impact by the Red
Hat Security Response Team.

Description

GnomeMeeting is a tool to communicate with video and audio over the Internet.

A format string flaw was found in the way GnomeMeeting processes certain
messages. If a user is running GnomeMeeting, a remote attacker who can
connect to GnomeMeeting could trigger this flaw and potentially execute
arbitrary code with the privileges of the user. (CVE-2007-1007)

Users of GnomeMeeting should upgrade to these updated packages which
contain a backported patch to correct this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

• BZ - 229266 - CVE-2007-1007 gnomemeeting format string flaw

CVEs

• CVE-2007-1007

References

• http://www.redhat.com/security/updates/classification/#critical

Red Hat Enterprise Linux Server 4

SRPM
gnomemeeting-1.0.2-9.src.rpm	SHA-256: 76b101aebcf50ac8f8872c615c60d200159f1645991f7ebfc2a5712ab4b3e9c0
x86_64
gnomemeeting-1.0.2-9.x86_64.rpm	SHA-256: 451f017b904ab50bd5f6df224bffa2e6b6d682330e6d197cfbce00b3b3eb2c87
gnomemeeting-1.0.2-9.x86_64.rpm	SHA-256: 451f017b904ab50bd5f6df224bffa2e6b6d682330e6d197cfbce00b3b3eb2c87
ia64
gnomemeeting-1.0.2-9.ia64.rpm	SHA-256: 3411985932ed9bbe7bf0680a4cb686e3deed6f2b030f6d623cc02411c1bf5864
gnomemeeting-1.0.2-9.ia64.rpm	SHA-256: 3411985932ed9bbe7bf0680a4cb686e3deed6f2b030f6d623cc02411c1bf5864
i386
gnomemeeting-1.0.2-9.i386.rpm	SHA-256: c04be344e70956964d50f7f3196982dc13212e14b24b92cf16ab5dab5bea3abe
gnomemeeting-1.0.2-9.i386.rpm	SHA-256: c04be344e70956964d50f7f3196982dc13212e14b24b92cf16ab5dab5bea3abe

Red Hat Enterprise Linux Workstation 4

SRPM
gnomemeeting-1.0.2-9.src.rpm	SHA-256: 76b101aebcf50ac8f8872c615c60d200159f1645991f7ebfc2a5712ab4b3e9c0
x86_64
gnomemeeting-1.0.2-9.x86_64.rpm	SHA-256: 451f017b904ab50bd5f6df224bffa2e6b6d682330e6d197cfbce00b3b3eb2c87
ia64
gnomemeeting-1.0.2-9.ia64.rpm	SHA-256: 3411985932ed9bbe7bf0680a4cb686e3deed6f2b030f6d623cc02411c1bf5864
i386
gnomemeeting-1.0.2-9.i386.rpm	SHA-256: c04be344e70956964d50f7f3196982dc13212e14b24b92cf16ab5dab5bea3abe

Red Hat Enterprise Linux Desktop 4

SRPM
gnomemeeting-1.0.2-9.src.rpm	SHA-256: 76b101aebcf50ac8f8872c615c60d200159f1645991f7ebfc2a5712ab4b3e9c0
x86_64
gnomemeeting-1.0.2-9.x86_64.rpm	SHA-256: 451f017b904ab50bd5f6df224bffa2e6b6d682330e6d197cfbce00b3b3eb2c87
i386
gnomemeeting-1.0.2-9.i386.rpm	SHA-256: c04be344e70956964d50f7f3196982dc13212e14b24b92cf16ab5dab5bea3abe

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
gnomemeeting-1.0.2-9.src.rpm	SHA-256: 76b101aebcf50ac8f8872c615c60d200159f1645991f7ebfc2a5712ab4b3e9c0
s390x
gnomemeeting-1.0.2-9.s390x.rpm	SHA-256: cccc883d62bfcdf3303846565e54e48dcd68a6aa986315376432c50275beee22
s390
gnomemeeting-1.0.2-9.s390.rpm	SHA-256: 6c9030554239bb22c17cbffd4c4a76b07c8d92fd96cc795002d20bcf198409c8

Red Hat Enterprise Linux for Power, big endian 4

SRPM
gnomemeeting-1.0.2-9.src.rpm	SHA-256: 76b101aebcf50ac8f8872c615c60d200159f1645991f7ebfc2a5712ab4b3e9c0
ppc
gnomemeeting-1.0.2-9.ppc.rpm	SHA-256: 7eac9d9723e7463d1f57b9bbc1f7031cb1b94c3e6830263d2784ba7dc88f7f51