[RedHat-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: PatchesforRedHatEnterpriseLinux

[redhat-announcements at bigmail.bigfix.com]

Fixlet Site - PatchesforRedHatEnterpriseLinux
Current Version: 121	Published: Tue, 04 Apr 2006 21:20:32 GMT


***************************************************************
Title: RHSA-2006:0271 - Freeradius Security Update - Red Hat Enterprise 3.0 (AS/ES)
Severity: Important
Fixlet ID: 200627101
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0271.html

Fixlet Description:  Updated freeradius packages that fix an authentication weakness are now available.  A bug was found in the way FreeRADIUS authenticates users via the MSCHAP V2 protocol. A bug was also found in the way FreeRADIUS logs SQL errors from the sql_unixodbc module, possibly resulting in arbitrary code execution.Users of FreeRADIUS should update to these erratum packages, which contain backported patches and are not vulnerable to these issues.  

***************************************************************
Title: RHSA-2006:0272 - Openmotif Security Update - Red Hat Enterprise 3.0
Severity: Moderate
Fixlet ID: 200627201
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0272.html

Fixlet Description:  Updated OpenMotif packages are now available.  These updates fix a number of buffer overflow flaws that were discovered in OpenMotif's libUil library. Users of OpenMotif are advised to upgrade to these erratum packages, which contain a backported security patch to correct this issue. 

***************************************************************
Title: RHSA-2006:0271 - Freeradius Security Update - Red Hat Enterprise 4.0 (AS/ES)
Severity: Important
Fixlet ID: 200627103
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0271.html

Fixlet Description:  Updated freeradius packages that fix an authentication weakness are now available.  A bug was found in the way FreeRADIUS authenticates users via the MSCHAP V2 protocol. A bug was also found in the way FreeRADIUS logs SQL errors from the sql_unixodbc module, possibly resulting in arbitrary code execution.Users of FreeRADIUS should update to these erratum packages, which contain backported patches and are not vulnerable to these issues.   

***************************************************************
Title: RHSA-2006:0272 - Openmotif Security Update - Red Hat Enterprise 4.0
Severity: Moderate
Fixlet ID: 200627203
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0272.html

Fixlet Description:    Updated OpenMotif packages are now available.  These updates fix a number of buffer overflow flaws that were discovered in OpenMotif's libUil library. Users of OpenMotif are advised to upgrade to these erratum packages, which contain a backported security patch to correct this issue.