RedHat: RHN multiple vulnerabilities
Summary
Summary
The Red Hat Network (RHN) Notification Tool is a desktop panel applet thatprovides a convenient way to update your system with current errata and bugfixes from Red Hat.A memory leak in the RHN Notification Tool that occurred when scanning theRPM database has been addressed. Additionally, some versions of the RHNNotification Tool handled network disconnection incorrectly. Other smallenhancements to the applet behavior are also included in this update.It is recommended that users upgrade to the errata packages which correctthese issues.
Solution
Before applying this update, make sure all previously released errata
relevant to your system have been applied.
To update all RPMs for your particular architecture, run:
rpm -Fvh [filenames]
where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains
the desired RPMs.
Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:
up2date
This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.
Once this update is applied, right-click on the notification applet (blue
circled checkmark or red exclamation point) on the panel and select 'Exit.'
You can then restart the applet by clicking 'Main Menu' on the panel and
selecting 'System Tools' => 'Red Hat Network Alert Icon.'
5. Bug IDs fixed ( for more info):
85522 - Memory leak when can't connect to network?
83158 - rhn-applet-gui requires network to be up before it's started
82090 - rhn-applet fails to detect when all needed updates are applied
77416 - rhn-applet-gui occationally greys out
6. RPMs required:
Red Hat Linux 8.0:
SRPMS:
i386:
Red Hat Linux 9:
SRPMS:
i386:
7. Verification:
MD5 sum Package Name
426bb3806585e525ce86f71ef3e8ee82 8.0/en/os/SRPMS/rhn-applet-2.0.9-0.8.0.1.src.rpm
a1525e9e15c173926f17ad79b4a0a787 8.0/en/os/i386/rhn-applet-2.0.9-0.8.0.1.i386.rpm
2a2b2fd3c708d2d9bc1cf1a055bad422 9/en/os/SRPMS/rhn-applet-2.0.9-0.9.0.1.src.rpm
966dd1a632a6cdfbba2d84bf1809447b 9/en/os/i386/rhn-applet-2.0.9-0.9.0.1.i386.rpm
These packages are GPG signed by Red Hat for security. Our key is
available at All Red Hat products
You can verify each package with the following command:
rpm --checksig -v
If you only wish to verify that each package has not been corrupted or
tampered with, examine only the md5sum with the following command:
md5sum
References
Package List
Topic
Topic
An updated version of the RHN Notification Tool is now available to fix
several UI and behavior bugs, as well as a memory leak.
Relevant Releases Architectures
Red Hat Linux 8.0 - i386
Red Hat Linux 9 - i386
Bugs Fixed
