* bsc#1235438 Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 . # Security update for brltty Announcement ID: SUSE-SU-2025:01582-1 Release Date: 2025-05-29T13:34:22Z Rating: moderate References: * bsc#1235438 Affected Products: * Basesystem Module 15-SP7 * Desktop Applications Module 15-SP7 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 An update that has one security fix can now be installed. ## Description: This update for brltty fixes the following issues: * Avoid having brlapi.key temporarily world-readable during creation (bsc#1235438). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-1582=1 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2025-1582=1 ## Package List: * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * libbrlapi0_8-debuginfo-6.6-150600.3.3.1 * brlapi-devel-6.6-150600.3.3.1 * brltty-debuginfo-6.6-150600.3.3.1 * python3-brlapi-debuginfo-6.6-150600.3.3.1 * brltty-debugsource-6.6-150600.3.3.1 * libbrlapi0_8-6.6-150600.3.3.1 * python3-brlapi-6.6-150600.3.3.1 * Basesystem Module 15-SP7 (noarch) * system-user-brltty-6.6-150600.3.3.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * brltty-driver-brlapi-6.6-150600.3.3.1 * brltty-driver-at-spi2-6.6-150600.3.3.1 * brltty-driver-brlapi-debuginfo-6.6-150600.3.3.1 * brltty-debuginfo-6.6-150600.3.3.1 * brltty-debugsource-6.6-150600.3.3.1 * brltty-6.6-150600.3.3.1 * brltty-driver-speech-dispatcher-6.6-150600.3.3.1 *brltty-driver-at-spi2-debuginfo-6.6-150600.3.3.1 * brltty-driver-speech-dispatcher-debuginfo-6.6-150600.3.3.1 * Desktop Applications Module 15-SP7 (noarch) * brltty-lang-6.6-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1235438 . SUSE release 2025:01582-1 provides a moderate security fix for brltty, aimed at enhancing security and stability.. SUSE security update, brltty patch, Linux security maintenance. . LinuxSecurity.com Team
* bsc#1235438 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 . # Security update for brltty Announcement ID: SUSE-SU-2025:1579-1 Release Date: 2025-05-19T12:40:43Z Rating: moderate References: * bsc#1235438 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that has one security fix can now be installed. ## Description: This update for brltty fixes the following issues: * Avoid having brlapi.key temporarily world-readable during creation (bsc#1235438). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1579=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1579=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1579=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1579=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1579=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * brltty-debuginfo-6.4-150400.4.8.1 * brltty-driver-espeak-debuginfo-6.4-150400.4.8.1 * brltty-driver-at-spi2-debuginfo-6.4-150400.4.8.1 * brltty-utils-debuginfo-6.4-150400.4.8.1 * brltty-driver-speech-dispatcher-6.4-150400.4.8.1 * brltty-driver-libbraille-6.4-150400.4.8.1 * brltty-driver-xwindow-6.4-150400.4.8.1 * brltty-driver-brlapi-debuginfo-6.4-150400.4.8.1 * brltty-debugsource-6.4-150400.4.8.1 * python3-brlapi-debuginfo-6.4-150400.4.8.1 * ocaml-brlapi-debuginfo-6.4-150400.4.8.1 * brltty-driver-brlapi-6.4-150400.4.8.1 *brltty-utils-6.4-150400.4.8.1 * brltty-driver-at-spi2-6.4-150400.4.8.1 * xbrlapi-debuginfo-6.4-150400.4.8.1 * libbrlapi0_8-debuginfo-6.4-150400.4.8.1 * python3-brlapi-6.4-150400.4.8.1 * brltty-6.4-150400.4.8.1 * brltty-driver-espeak-6.4-150400.4.8.1 * brlapi-devel-6.4-150400.4.8.1 * brltty-driver-libbraille-debuginfo-6.4-150400.4.8.1 * tcl-brlapi-debuginfo-6.4-150400.4.8.1 * brlapi-java-debuginfo-6.4-150400.4.8.1 * brlapi-java-6.4-150400.4.8.1 * tcl-brlapi-6.4-150400.4.8.1 * xbrlapi-6.4-150400.4.8.1 * ocaml-brlapi-6.4-150400.4.8.1 * libbrlapi0_8-6.4-150400.4.8.1 * brltty-driver-speech-dispatcher-debuginfo-6.4-150400.4.8.1 * brltty-driver-xwindow-debuginfo-6.4-150400.4.8.1 * openSUSE Leap 15.4 (noarch) * brltty-lang-6.4-150400.4.8.1 * system-user-brltty-6.4-150400.4.8.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * system-user-brltty-6.4-150400.4.8.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * system-user-brltty-6.4-150400.4.8.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * system-user-brltty-6.4-150400.4.8.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * system-user-brltty-6.4-150400.4.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1235438 . An urgent security notice has been issued for openSUSE and SUSE Micro due to vulnerabilities found in the brltty package, requiring immediate updates to protect systems. openSUSE Updates, SUSE Security Patches, brltty Security, Linux Security Advisory. . LinuxSecurity.com Team
An update that has one security fix can now be installed.. # Security update for brltty Announcement ID: SUSE-SU-2025:1579-1 Release Date: 2025-05-19T12:40:43Z Rating: moderate References: * bsc#1235438 Affected Products: * openSUSE Leap 15.4 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro for Rancher 5.3 * SUSE Linux Enterprise Micro for Rancher 5.4 An update that has one security fix can now be installed. ## Description: This update for brltty fixes the following issues: * Avoid having brlapi.key temporarily world-readable during creation (bsc#1235438). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.4 zypper in -t patch SUSE-2025-1579=1 * SUSE Linux Enterprise Micro for Rancher 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1579=1 * SUSE Linux Enterprise Micro 5.3 zypper in -t patch SUSE-SLE-Micro-5.3-2025-1579=1 * SUSE Linux Enterprise Micro for Rancher 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1579=1 * SUSE Linux Enterprise Micro 5.4 zypper in -t patch SUSE-SLE-Micro-5.4-2025-1579=1 ## Package List: * openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64 i586) * brltty-debuginfo-6.4-150400.4.8.1 * brltty-driver-espeak-debuginfo-6.4-150400.4.8.1 * brltty-driver-at-spi2-debuginfo-6.4-150400.4.8.1 * brltty-utils-debuginfo-6.4-150400.4.8.1 * brltty-driver-speech-dispatcher-6.4-150400.4.8.1 * brltty-driver-libbraille-6.4-150400.4.8.1 * brltty-driver-xwindow-6.4-150400.4.8.1 * brltty-driver-brlapi-debuginfo-6.4-150400.4.8.1 * brltty-debugsource-6.4-150400.4.8.1 * python3-brlapi-debuginfo-6.4-150400.4.8.1 * ocaml-brlapi-debuginfo-6.4-150400.4.8.1 * brltty-driver-brlapi-6.4-150400.4.8.1 * brltty-utils-6.4-150400.4.8.1 *brltty-driver-at-spi2-6.4-150400.4.8.1 * xbrlapi-debuginfo-6.4-150400.4.8.1 * libbrlapi0_8-debuginfo-6.4-150400.4.8.1 * python3-brlapi-6.4-150400.4.8.1 * brltty-6.4-150400.4.8.1 * brltty-driver-espeak-6.4-150400.4.8.1 * brlapi-devel-6.4-150400.4.8.1 * brltty-driver-libbraille-debuginfo-6.4-150400.4.8.1 * tcl-brlapi-debuginfo-6.4-150400.4.8.1 * brlapi-java-debuginfo-6.4-150400.4.8.1 * brlapi-java-6.4-150400.4.8.1 * tcl-brlapi-6.4-150400.4.8.1 * xbrlapi-6.4-150400.4.8.1 * ocaml-brlapi-6.4-150400.4.8.1 * libbrlapi0_8-6.4-150400.4.8.1 * brltty-driver-speech-dispatcher-debuginfo-6.4-150400.4.8.1 * brltty-driver-xwindow-debuginfo-6.4-150400.4.8.1 * openSUSE Leap 15.4 (noarch) * brltty-lang-6.4-150400.4.8.1 * system-user-brltty-6.4-150400.4.8.1 * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch) * system-user-brltty-6.4-150400.4.8.1 * SUSE Linux Enterprise Micro 5.3 (noarch) * system-user-brltty-6.4-150400.4.8.1 * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch) * system-user-brltty-6.4-150400.4.8.1 * SUSE Linux Enterprise Micro 5.4 (noarch) * system-user-brltty-6.4-150400.4.8.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1235438 . SUSE has released a vital security patch for brltty that rectifies vulnerabilities related to unauthorized file access. Important measures for implementation are outlined.. Brltty Update, Security Fix, OpenSUSE Patches. . LinuxSecurity.com Team
An update that has one security fix can now be installed.. # Security update for brltty Announcement ID: SUSE-SU-2025:1582-1 Release Date: 2025-05-19T14:23:17Z Rating: moderate References: * bsc#1235438 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one security fix can now be installed. ## Description: This update for brltty fixes the following issues: * Avoid having brlapi.key temporarily world-readable during creation (bsc#1235438). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1582=1 openSUSE-SLE-15.6-2025-1582=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1582=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-1582=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * brltty-driver-speech-dispatcher-6.6-150600.3.3.1 * brlapi-java-6.6-150600.3.3.1 * brltty-driver-libbraille-6.6-150600.3.3.1 * brltty-driver-brlapi-debuginfo-6.6-150600.3.3.1 * libbrlapi0_8-debuginfo-6.6-150600.3.3.1 * python3-brlapi-debuginfo-6.6-150600.3.3.1 * brltty-6.6-150600.3.3.1 * ocaml-brlapi-debuginfo-6.6-150600.3.3.1 * brltty-driver-espeak-debuginfo-6.6-150600.3.3.1 * brltty-driver-libbraille-debuginfo-6.6-150600.3.3.1 * brlapi-devel-6.6-150600.3.3.1 * tcl-brlapi-debuginfo-6.6-150600.3.3.1 * brltty-driver-speech-dispatcher-debuginfo-6.6-150600.3.3.1 * brltty-driver-xwindow-debuginfo-6.6-150600.3.3.1 *python3-brlapi-6.6-150600.3.3.1 * libbrlapi0_8-6.6-150600.3.3.1 * brltty-udev-generic-6.6-150600.3.3.1 * brltty-driver-at-spi2-6.6-150600.3.3.1 * brltty-utils-6.6-150600.3.3.1 * ocaml-brlapi-6.6-150600.3.3.1 * brltty-driver-espeak-6.6-150600.3.3.1 * brlapi-java-debuginfo-6.6-150600.3.3.1 * brltty-driver-xwindow-6.6-150600.3.3.1 * brltty-driver-at-spi2-debuginfo-6.6-150600.3.3.1 * brltty-driver-brlapi-6.6-150600.3.3.1 * brltty-debugsource-6.6-150600.3.3.1 * xbrlapi-debuginfo-6.6-150600.3.3.1 * tcl-brlapi-6.6-150600.3.3.1 * brltty-debuginfo-6.6-150600.3.3.1 * brltty-utils-debuginfo-6.6-150600.3.3.1 * xbrlapi-6.6-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * brltty-lang-6.6-150600.3.3.1 * system-user-brltty-6.6-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libbrlapi0_8-6.6-150600.3.3.1 * brlapi-devel-6.6-150600.3.3.1 * brltty-debugsource-6.6-150600.3.3.1 * brltty-debuginfo-6.6-150600.3.3.1 * libbrlapi0_8-debuginfo-6.6-150600.3.3.1 * python3-brlapi-debuginfo-6.6-150600.3.3.1 * python3-brlapi-6.6-150600.3.3.1 * Basesystem Module 15-SP6 (noarch) * system-user-brltty-6.6-150600.3.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * brltty-driver-speech-dispatcher-6.6-150600.3.3.1 * brltty-driver-at-spi2-debuginfo-6.6-150600.3.3.1 * brltty-driver-brlapi-6.6-150600.3.3.1 * brltty-driver-speech-dispatcher-debuginfo-6.6-150600.3.3.1 * brltty-debugsource-6.6-150600.3.3.1 * brltty-driver-at-spi2-6.6-150600.3.3.1 * brltty-debuginfo-6.6-150600.3.3.1 * brltty-driver-brlapi-debuginfo-6.6-150600.3.3.1 * brltty-6.6-150600.3.3.1 * Desktop Applications Module 15-SP6 (noarch) * brltty-lang-6.6-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1235438 . This patch addresses a security flaw in brltty for openSUSE Leap 15.6 and its associated products, bolstering protection.. openSUSE Security, brltty Patch,Software Updates, Linux Threat Management. . Severity: Important. LinuxSecurity.com Team
* bsc#1235438 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 . # Security update for brltty Announcement ID: SUSE-SU-2025:1582-1 Release Date: 2025-05-19T14:23:17Z Rating: moderate References: * bsc#1235438 Affected Products: * Basesystem Module 15-SP6 * Desktop Applications Module 15-SP6 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 An update that has one security fix can now be installed. ## Description: This update for brltty fixes the following issues: * Avoid having brlapi.key temporarily world-readable during creation (bsc#1235438). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-1582=1 openSUSE-SLE-15.6-2025-1582=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-1582=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-1582=1 ## Package List: * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * brltty-driver-speech-dispatcher-6.6-150600.3.3.1 * brlapi-java-6.6-150600.3.3.1 * brltty-driver-libbraille-6.6-150600.3.3.1 * brltty-driver-brlapi-debuginfo-6.6-150600.3.3.1 * libbrlapi0_8-debuginfo-6.6-150600.3.3.1 * python3-brlapi-debuginfo-6.6-150600.3.3.1 * brltty-6.6-150600.3.3.1 * ocaml-brlapi-debuginfo-6.6-150600.3.3.1 * brltty-driver-espeak-debuginfo-6.6-150600.3.3.1 * brltty-driver-libbraille-debuginfo-6.6-150600.3.3.1 * brlapi-devel-6.6-150600.3.3.1 * tcl-brlapi-debuginfo-6.6-150600.3.3.1 * brltty-driver-speech-dispatcher-debuginfo-6.6-150600.3.3.1 *brltty-driver-xwindow-debuginfo-6.6-150600.3.3.1 * python3-brlapi-6.6-150600.3.3.1 * libbrlapi0_8-6.6-150600.3.3.1 * brltty-udev-generic-6.6-150600.3.3.1 * brltty-driver-at-spi2-6.6-150600.3.3.1 * brltty-utils-6.6-150600.3.3.1 * ocaml-brlapi-6.6-150600.3.3.1 * brltty-driver-espeak-6.6-150600.3.3.1 * brlapi-java-debuginfo-6.6-150600.3.3.1 * brltty-driver-xwindow-6.6-150600.3.3.1 * brltty-driver-at-spi2-debuginfo-6.6-150600.3.3.1 * brltty-driver-brlapi-6.6-150600.3.3.1 * brltty-debugsource-6.6-150600.3.3.1 * xbrlapi-debuginfo-6.6-150600.3.3.1 * tcl-brlapi-6.6-150600.3.3.1 * brltty-debuginfo-6.6-150600.3.3.1 * brltty-utils-debuginfo-6.6-150600.3.3.1 * xbrlapi-6.6-150600.3.3.1 * openSUSE Leap 15.6 (noarch) * brltty-lang-6.6-150600.3.3.1 * system-user-brltty-6.6-150600.3.3.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * libbrlapi0_8-6.6-150600.3.3.1 * brlapi-devel-6.6-150600.3.3.1 * brltty-debugsource-6.6-150600.3.3.1 * brltty-debuginfo-6.6-150600.3.3.1 * libbrlapi0_8-debuginfo-6.6-150600.3.3.1 * python3-brlapi-debuginfo-6.6-150600.3.3.1 * python3-brlapi-6.6-150600.3.3.1 * Basesystem Module 15-SP6 (noarch) * system-user-brltty-6.6-150600.3.3.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * brltty-driver-speech-dispatcher-6.6-150600.3.3.1 * brltty-driver-at-spi2-debuginfo-6.6-150600.3.3.1 * brltty-driver-brlapi-6.6-150600.3.3.1 * brltty-driver-speech-dispatcher-debuginfo-6.6-150600.3.3.1 * brltty-debugsource-6.6-150600.3.3.1 * brltty-driver-at-spi2-6.6-150600.3.3.1 * brltty-debuginfo-6.6-150600.3.3.1 * brltty-driver-brlapi-debuginfo-6.6-150600.3.3.1 * brltty-6.6-150600.3.3.1 * Desktop Applications Module 15-SP6 (noarch) * brltty-lang-6.6-150600.3.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1235438 . Important notice for SUSE addresses brltty's globally visible key vulnerability. Implement requiredupdates for ongoing security compliance.. SUSE update, brltty patch, access control, Linux security, system update. . LinuxSecurity.com Team
* bsc#1235438 Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security . # Security update for brltty Announcement ID: SUSE-SU-2025:1583-1 Release Date: 2025-05-19T14:23:42Z Rating: moderate References: * bsc#1235438 Affected Products: * SUSE Linux Enterprise Server 12 SP5 * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security * SUSE Linux Enterprise Server for SAP Applications 12 SP5 An update that has one security fix can now be installed. ## Description: This update for brltty fixes the following issues: * Avoid having brlapi.key temporarily world-readable during creation (bsc#1235438). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security zypper in -t patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2025-1583=1 ## Package List: * SUSE Linux Enterprise Server 12 SP5 LTSS Extended Security (x86_64) * python3-brlapi-debuginfo-5.3.1-11.3.1 * python3-brlapi-5.3.1-11.3.1 * brlapi-devel-5.3.1-11.3.1 * brltty-debuginfo-5.3.1-11.3.1 * libbrlapi0_6-debuginfo-5.3.1-11.3.1 * brltty-debugsource-5.3.1-11.3.1 * libbrlapi0_6-5.3.1-11.3.1 * brltty-5.3.1-11.3.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1235438 . A patch for brltty addresses a vulnerability affecting SUSE offerings launched on June 15, 2025.. SUSE Linux Security, brltty Update, server security patch. . LinuxSecurity.com Team
Low: brltty security and bug fix update. Date: Tue, 27 Apr 2010 10:57:01 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Low: brltty on SL5.x i386/x86_64 Comments: To: "
Updated brltty packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Low: brltty security and bug fix update Advisory ID: RHSA-2010:0181-05 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2010:0181.html Issue date: 2010-03-30 CVE Names: CVE-2008-3279 ==================================================================== 1. Summary: Updated brltty packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 3. Description: brltty (Braille TTY) is a background process (daemon) which provides access to the Linux console (when in text mode) for a blind person using a refreshable braille display. It drives the braille display, and provides complete screen review functionality. It was discovered that a brltty library had an insecure relative RPATH (runtime library search path) set in the ELF (Executable and Linking Format) header. A local user able to convince another user to run an application using brltty in an attacker-controlled directory, could run arbitrary code with the privileges of the victim. (CVE-2008-3279) These updated packages also provide fixes for the following bugs: * the brltty configuration file is documented in the brltty manual page, but there is noseparate manual page for the /etc/brltty.conf configuration file: running "man brltty.conf" returned "No manual entry for brltty.conf" rather than opening the brltty manual entry. This update adds brltty.conf.5 as an alias to the brltty manual page. Consequently, running "man brltty.conf" now opens the manual entry documenting the brltty.conf specification. (BZ#530554) * previously, the brltty-pm.conf configuration file was installed in the /etc/brltty/ directory. This file, which configures Papenmeier Braille Terminals for use with Red Hat Enterprise Linux, is optional. As well, it did not come with a corresponding manual page. With this update, the file has been moved to /usr/share/doc/brltty-3.7.2/BrailleDrivers/Papenmeier/. This directory also includes a README document that explains the file's purpose and format. (BZ#530554) * during the brltty packages installation, the message Creating screen inspection device /dev/vcsa...done. was presented at the console. This was inadequate, especially during the initial install of the system. These updated packages do not send any message to the console during installation. (BZ#529163) * although brltty contains ELF objects, the brltty-debuginfo package was empty. With this update, the -debuginfo package contains valid debugging information as expected. (BZ#500545) * the MAX_NR_CONSOLES definition was acquired by brltty by #including linux/tty.h in Programs/api_client.c. MAX_NR_CONSOLES has since moved to linux/vt.h but the #include in api_client.c was not updated. Consequently, brltty could not be built from the source RPM against the Red Hat Enterprise Linux 5 kernel. This update corrects the #include in api_client.c to linux/vt.h and brltty now builds from source as expected. (BZ#456247) All brltty users are advised to upgrade to these updated packages, which resolve these issues. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network.Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 456247 - brltty doesn't build with kernel 2.6.18-92.1.1 457942 - CVE-2008-3279 brltty: insecure relative RPATH 500545 - brltty-debuginfo is empty 529163 - Creating screen inspection device /dev/vcsa...done. 530554 - Missing man-pages 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: brlapi-0.4.1-4.el5.i386.rpm brltty-3.7.2-4.el5.i386.rpm brltty-debuginfo-3.7.2-4.el5.i386.rpm x86_64: brlapi-0.4.1-4.el5.i386.rpm brlapi-0.4.1-4.el5.x86_64.rpm brltty-3.7.2-4.el5.x86_64.rpm brltty-debuginfo-3.7.2-4.el5.i386.rpm brltty-debuginfo-3.7.2-4.el5.x86_64.rpm RHEL Desktop Workstation (v. 5 client): Source: i386: brlapi-devel-0.4.1-4.el5.i386.rpm brltty-debuginfo-3.7.2-4.el5.i386.rpm x86_64: brlapi-devel-0.4.1-4.el5.i386.rpm brlapi-devel-0.4.1-4.el5.x86_64.rpm brltty-debuginfo-3.7.2-4.el5.i386.rpm brltty-debuginfo-3.7.2-4.el5.x86_64.rpm Red Hat Enterprise Linux (v. 5 server): Source: i386: brlapi-0.4.1-4.el5.i386.rpm brlapi-devel-0.4.1-4.el5.i386.rpm brltty-3.7.2-4.el5.i386.rpm brltty-debuginfo-3.7.2-4.el5.i386.rpm ia64: brlapi-0.4.1-4.el5.ia64.rpm brlapi-devel-0.4.1-4.el5.ia64.rpm brltty-3.7.2-4.el5.ia64.rpm brltty-debuginfo-3.7.2-4.el5.ia64.rpm ppc: brlapi-0.4.1-4.el5.ppc.rpm brlapi-0.4.1-4.el5.ppc64.rpm brlapi-devel-0.4.1-4.el5.ppc.rpm brlapi-devel-0.4.1-4.el5.ppc64.rpm brltty-3.7.2-4.el5.ppc.rpm brltty-debuginfo-3.7.2-4.el5.ppc.rpm brltty-debuginfo-3.7.2-4.el5.ppc64.rpm s390x: brlapi-0.4.1-4.el5.s390.rpm brlapi-0.4.1-4.el5.s390x.rpm brlapi-devel-0.4.1-4.el5.s390.rpm brlapi-devel-0.4.1-4.el5.s390x.rpm brltty-3.7.2-4.el5.s390x.rpm brltty-debuginfo-3.7.2-4.el5.s390.rpm brltty-debuginfo-3.7.2-4.el5.s390x.rpm x86_64: brlapi-0.4.1-4.el5.i386.rpm brlapi-0.4.1-4.el5.x86_64.rpm brlapi-devel-0.4.1-4.el5.i386.rpm brlapi-devel-0.4.1-4.el5.x86_64.rpm brltty-3.7.2-4.el5.x86_64.rpm brltty-debuginfo-3.7.2-4.el5.i386.rpm brltty-debuginfo-3.7.2-4.el5.x86_64.rpm Thesepackages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2008-3279 https://access.redhat.com/security/updates/classification#low 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2010 Red Hat, Inc. . This bulletin outlines information regarding the minor-severity libxml2 security patch and issue resolution for CentOS Stream.. Brltty Updates, Red Hat Advisory, Security Impact, Bug Resolutions, Linux Packages. . Severity: Low. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.