It’s security day in Penguin Shell. Let’s take a look at the latest security alerts and patches in the major Linux distributions.

RedHat

Problem: zlib vulnerability

Description: This item has been reposted as an errata item. It was originally posted on March 14 and was updated on March 20. I’m not sure if the reposting indicates another update or not. For safety’s sake, I’ve re-listed the appropriate updates as they appear on the RedHat site.

Solution: Download and install the following packages:

ftp://updates.redhat.com/7.2/en/os/i386/zlib-1.1.3-25.7.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/zlib-devel-1.1.3-25.7.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/cvs-1.11.1p1-7.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/dump-0.4b25-1.72.0.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/rmt-0.4b25-1.72.0.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/vnc-3.3.3r2-18.4.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/vnc-doc-3.3.3r2-18.4.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/vnc-server-3.3.3r2-18.4.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/rsync-2.4.6-13.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/gcc3-3.0.4-1.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/gcc3-c++-3.0.4-1.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/gcc3-g77-3.0.4-1.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/gcc3-java-3.0.4-1.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/gcc3-objc-3.0.4-1.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/libgcc-3.0.4-1.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/libgcj3-3.0.4-1.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/libgcj3-devel-3.0.4-1.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/libstdc++3-3.0.4-1.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/libstdc++3-devel-3.0.4-1.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/libgcj-2.96-28.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/libgcj-devel-2.96-28.i386.rpm

ftp://updates.redhat.com/7.2/en/os/i386/binutils-2.11.90.0.8-12.i386.rpm

Mandrake

No new advisories for either Mandrake 8.1 or Mandrake 8.2.

Suse

No new advisories in the past 7 days.

Slackware

No new advisories in the past 7 days.

Debian

No new advisories in the past 7 days.

Easy enough. It’s good to see that the recent rash of security alerts has slowed a bit. Going forward, I’ll still pay attention to these alerts on Thursdays, but only when warranted. Otherwise, we’ll fill the Thursday PenguinREPORT slot with other more useful information.

Tony
Steidler-Dennison