[RedHat-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: PatchesforRedHatEnterpriseLinux

[redhat-announcements at bigmail.bigfix.com]

Fixlet Site - PatchesforRedHatEnterpriseLinux
Current Version: 113	Published: Wed, 22 Mar 2006 01:18:52 GMT


***************************************************************
Title: RHSA-2006:0015 - Initscripts Security Update - Red Hat Enterprise 3.0
Severity: Moderate
Fixlet ID: 200601501
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0015.html

Fixlet Description:  Updated initscripts packages that fix a privilege escalation issue and several bugs are now available. Please see the errata page for detailed information about each of these issues. All users of initscripts should upgrade to these updated packages, which contain backported patches to resolve these issues.  

***************************************************************
Title: RHSA-2006:0045 - Squid Security Update - Red Hat Enterprise 3.0
Severity: Moderate
Fixlet ID: 200604501
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0045.html

Fixlet Description:  Updated squid packages that fix a security vulnerability as well as several bugs are now available. Please see the errata page for detailed information about each of these issues.All users of squid should upgrade to these updated packages, which contain backported patches to resolve these issues.  

***************************************************************
Title: RHSA-2006:0117 - Vixie-Cron Security Update - Red Hat Enterprise 3.0
Severity: Low
Fixlet ID: 200611701
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0117.html

Fixlet Description:  An updated vixie-cron package that fixes a bug and security issue is now available.A bug was found in the way vixie-cron installs new crontab files. It is possible for a local attacker to execute the crontab command in such a way that they can view the contents of another user's crontab file. This update also fixes an issue where cron jobs could start before their scheduled time.All users of vixie-cron should upgrade to this updated package, which contains backported patches and is not vulnerable to these issues.  

***************************************************************
Title: RHSA-2006:0117 - Dependencies Needed - Red Hat Enterprise 3.0
Severity: Low
Fixlet ID: 200611703
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0117.html

Fixlet Description:  An updated vixie-cron package that fixes a bug and security issue is now available.  However, the listed computers do not have the package "laus-libs" installed.  You must install this package in order for this security update to become relevant.

***************************************************************
Title: RHSA-2006:0144 - Updated Kernel Packages - Update 7 - Red Hat Enterprise 3.0 (i686)
Severity: Moderate
Fixlet ID: 200614401
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0144.html

Fixlet Description:  Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. There were many feature enhancements, bug fixes, and driver updates in various parts of the kernel. Please see the errata page for detailed information about each of these issues. All Red Hat Enterprise Linux 3 users are advised to upgrade their kernels to the packages associated with their machine architectures and configurations as listed in this erratum.  

***************************************************************
Title: RHSA-2006:0144 - Updated Kernel Packages - Update 7 - Red Hat Enterprise 3.0 (Athlon)
Severity: Moderate
Fixlet ID: 200614402
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0144.html

Fixlet Description:   Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 3. There were many feature enhancements, bug fixes, and driver updates in various parts of the kernel. Please see the errata page for detailed information about each of these issues. All Red Hat Enterprise Linux 3 users are advised to upgrade their kernels to the packages associated with their machine architectures and configurations as listed in this erratum.  

***************************************************************
Title: RHSA-2006:0266 - Gnupg Security Update - Red Hat Enterprise 3.0
Severity: Important
Fixlet ID: 200626601
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0266.html

Fixlet Description:  An updated GnuPG package that fixes signature verification flaws as well as minor bugs is now available. Please see the errata page for detailed information about each of these issues.All users of GnuPG are advised to upgrade to this updated package, which contains backported patches to correct these issues.  

***************************************************************
Title: RHSA-2006:0268 - Flash-Plugin Security Update - Red Hat Enterprise 3.0
Severity: Critical
Fixlet ID: 200626801
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0268.html

Fixlet Description:  Security issues were discovered in the Macromedia Flash Player. It may be possible to execute arbitrary code on a victim's machine if the victim opens a malicious Macromedia Flash file. Users of Macromedia Flash Player should upgrade to this updated package, which contains version 7.0.63 and is not vulnerable to this issue.  

***************************************************************
Title: RHSA-2006:0266 - Gnupg Security Update - Red Hat Enterprise 4.0
Severity: Important
Fixlet ID: 200626603
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0266.html

Fixlet Description:  An updated GnuPG package that fixes signature verification flaws as well as minor bugs is now available.All users of GnuPG are advised to upgrade to this updated package, which contains backported patches to correct these issues.  

***************************************************************
Title: RHSA-2006:0268 - Flash-Plugin Security Update - Red Hat Enterprise 4.0
Severity: Critical
Fixlet ID: 200626802
Fixlet Link: https://rhn.redhat.com/errata/RHSA-2006-0268.html

Fixlet Description:  An updated Macromedia Flash Player package that fixes a security issue is now available.Users of Macromedia Flash Player should upgrade to this updated package, which contains version 7.0.63 and is not vulnerable to this issue.