Red Hat Product Errata RHSA-2007:0086 - Security Advisory
Issued:
2007-02-20
Updated:
2007-02-20

RHSA-2007:0086 - Security Advisory

Synopsis

Critical: gnomemeeting security update

Type/Severity

Security Advisory: Critical

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

Updated gnomemeeting packages that fix a security issue are now available
for Red Hat Enterprise Linux.

This update has been rated as having critical security impact by the Red
Hat Security Response Team.

Description

GnomeMeeting is a tool to communicate with video and audio over the Internet.

A format string flaw was found in the way GnomeMeeting processes certain
messages. If a user is running GnomeMeeting, a remote attacker who can
connect to GnomeMeeting could trigger this flaw and potentially execute
arbitrary code with the privileges of the user. (CVE-2007-1007)

Users of GnomeMeeting should upgrade to these updated packages which
contain a backported patch to correct this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux Server 3 x86_64
  • Red Hat Enterprise Linux Server 3 ia64
  • Red Hat Enterprise Linux Server 3 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Workstation 3 x86_64
  • Red Hat Enterprise Linux Workstation 3 ia64
  • Red Hat Enterprise Linux Workstation 3 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux Desktop 3 x86_64
  • Red Hat Enterprise Linux Desktop 3 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems 3 s390x
  • Red Hat Enterprise Linux for IBM z Systems 3 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

  • BZ - 229266 - CVE-2007-1007 gnomemeeting format string flaw

Red Hat Enterprise Linux Server 4

SRPM
gnomemeeting-1.0.2-9.src.rpm SHA-256: 76b101aebcf50ac8f8872c615c60d200159f1645991f7ebfc2a5712ab4b3e9c0
x86_64
gnomemeeting-1.0.2-9.x86_64.rpm SHA-256: 451f017b904ab50bd5f6df224bffa2e6b6d682330e6d197cfbce00b3b3eb2c87
gnomemeeting-1.0.2-9.x86_64.rpm SHA-256: 451f017b904ab50bd5f6df224bffa2e6b6d682330e6d197cfbce00b3b3eb2c87
ia64
gnomemeeting-1.0.2-9.ia64.rpm SHA-256: 3411985932ed9bbe7bf0680a4cb686e3deed6f2b030f6d623cc02411c1bf5864
gnomemeeting-1.0.2-9.ia64.rpm SHA-256: 3411985932ed9bbe7bf0680a4cb686e3deed6f2b030f6d623cc02411c1bf5864
i386
gnomemeeting-1.0.2-9.i386.rpm SHA-256: c04be344e70956964d50f7f3196982dc13212e14b24b92cf16ab5dab5bea3abe
gnomemeeting-1.0.2-9.i386.rpm SHA-256: c04be344e70956964d50f7f3196982dc13212e14b24b92cf16ab5dab5bea3abe

Red Hat Enterprise Linux Server 3

SRPM
x86_64
ia64
i386

Red Hat Enterprise Linux Workstation 4

SRPM
gnomemeeting-1.0.2-9.src.rpm SHA-256: 76b101aebcf50ac8f8872c615c60d200159f1645991f7ebfc2a5712ab4b3e9c0
x86_64
gnomemeeting-1.0.2-9.x86_64.rpm SHA-256: 451f017b904ab50bd5f6df224bffa2e6b6d682330e6d197cfbce00b3b3eb2c87
ia64
gnomemeeting-1.0.2-9.ia64.rpm SHA-256: 3411985932ed9bbe7bf0680a4cb686e3deed6f2b030f6d623cc02411c1bf5864
i386
gnomemeeting-1.0.2-9.i386.rpm SHA-256: c04be344e70956964d50f7f3196982dc13212e14b24b92cf16ab5dab5bea3abe

Red Hat Enterprise Linux Workstation 3

SRPM
x86_64
ia64
i386

Red Hat Enterprise Linux Desktop 4

SRPM
gnomemeeting-1.0.2-9.src.rpm SHA-256: 76b101aebcf50ac8f8872c615c60d200159f1645991f7ebfc2a5712ab4b3e9c0
x86_64
gnomemeeting-1.0.2-9.x86_64.rpm SHA-256: 451f017b904ab50bd5f6df224bffa2e6b6d682330e6d197cfbce00b3b3eb2c87
i386
gnomemeeting-1.0.2-9.i386.rpm SHA-256: c04be344e70956964d50f7f3196982dc13212e14b24b92cf16ab5dab5bea3abe

Red Hat Enterprise Linux Desktop 3

SRPM
x86_64
i386

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
gnomemeeting-1.0.2-9.src.rpm SHA-256: 76b101aebcf50ac8f8872c615c60d200159f1645991f7ebfc2a5712ab4b3e9c0
s390x
gnomemeeting-1.0.2-9.s390x.rpm SHA-256: cccc883d62bfcdf3303846565e54e48dcd68a6aa986315376432c50275beee22
s390
gnomemeeting-1.0.2-9.s390.rpm SHA-256: 6c9030554239bb22c17cbffd4c4a76b07c8d92fd96cc795002d20bcf198409c8

Red Hat Enterprise Linux for IBM z Systems 3

SRPM
s390x
s390

Red Hat Enterprise Linux for Power, big endian 4

SRPM
gnomemeeting-1.0.2-9.src.rpm SHA-256: 76b101aebcf50ac8f8872c615c60d200159f1645991f7ebfc2a5712ab4b3e9c0
ppc
gnomemeeting-1.0.2-9.ppc.rpm SHA-256: 7eac9d9723e7463d1f57b9bbc1f7031cb1b94c3e6830263d2784ba7dc88f7f51

Red Hat Enterprise Linux for Power, big endian 3

SRPM
ppc

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.