Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Stay Secure with the Latest Linux Advisories

Fedora Large Esm H800
Fedora

Fedora 43 Kernel Important Security Fix for net/can 2026-f1fc7772c3

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Nuclei Important Cross-site Scripting DoS Threat 2026-d36ca2dd19

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 perl-Crypt-OpenSSL-X509 Important Fix CVE-2026-58101

Calendar White Jul 21, 2026
Critical
Fedora Large Esm H800
Fedora

Fedora 43 rust-syslog Critical Path Traversal DoS Vuln 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Rust RPKI Critical Path Traversal Issues Fix 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 43 Routinator Important Security Fixes CVE-2026-49232 to 49235

Calendar White Jul 21, 2026
Important
Fedora Large Esm H800
Fedora

Fedora 43 rust-fern Important Path Traversal Fix Advisory 2026-659cb50390

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 Kernel Important Net CAN Issue Fix Advisory 2026-2dd8b600bb

Calendar White Jul 21, 2026
Important
Fedora Large Esm H900
Fedora

Fedora 44 btrbk Critical Update Snapshot Tool Fix CVE-2026-62943

Calendar White Jul 21, 2026
Important
Filter%20icon Refine advisories
X Clear Filters
X Clear Filters
View More

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200
Loading...

Explore Latest Linux Security advisories

We found -5 articles for you...
89
Ls Advisories Fedora Esm H240
Price Tag%201security advisorymoderatefedora

Fedora 11: 2009-9961 Moderate: Buffer Overflow in Newt Library

Fixes a buffer overflow in textbox, which could be exploited to execute arbitrary code.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2009-9961 2009-09-25 19:43:22 -------------------------------------------------------------------------------- Name : newt Product : Fedora 11 Version : 0.52.10 Release : 4.fc11 URL : https://pagure.io/newt Summary : A library for text mode user interfaces Description : Newt is a programming library for color text mode, widget based user interfaces. Newt can be used to add stacked windows, entry widgets, checkboxes, radio buttons, labels, plain text fields, scrollbars, etc., to text mode user interfaces. This package also contains the shared library needed by programs built with newt, as well as a /usr/bin/dialog replacement called whiptail. Newt is based on the slang library. -------------------------------------------------------------------------------- Update Information: Fixes a buffer overflow in textbox, which could be exploited to execute arbitrary code. -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 24 2009 Miroslav Lichvar - 0.52.10-4 - fix buffer overflow in textbox when reflowing (#523955, CVE-2009-2905) -------------------------------------------------------------------------------- References: [ 1 ] Bug #523955 - CVE-2009-2905 newt: heap-overflow in textbox when text reflowing https://bugzilla.redhat.com/show_bug.cgi?id=523955 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update newt' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ . This release fixes a critical security flaw in the openbox framework for Ubuntu 20.04, reducing the possibility of exploitation.. Fedora Update, Newt Library, Buffer Overflow Fix, Security Advisory. . LinuxSecurity.com Team

Calendar%202 Sep 25, 2009 Fedora
200
Ls Advisories Scientific Esm H240
Price Tag%201security advisorydenial of servicebuffer overflow

Scientific Linux: CVE-2009-2905 Moderate: Newt Application Crash

Moderate: newt security update. Date: Fri, 25 Sep 2009 11:52:57 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA Moderate: newt on SL3.x, SL4.x, SL5.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Moderate: newt security update Issue date: 2009-09-24 CVE Names: CVE-2009-2905 CVE-2009-2905 newt: heap-overflow in textbox when text reflowing A heap-based buffer overflow flaw was found in the way newt processes content that is to be displayed in a text dialog box. A local attacker could issue a specially-crafted text dialog box display request (direct or via a custom application), leading to a denial of service (application crash) or, potentially, arbitrary code execution with the privileges of the user running the application using the newt library. (CVE-2009-2905) After installing the updated packages, all applications using the newt library must be restarted for the update to take effect. SL 3.0.x SRPMS: newt-0.51.5-2.el3.src.rpm i386: newt-0.51.5-2.el3.i386.rpm newt-devel-0.51.5-2.el3.i386.rpm x86_64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.x86_64.rpm newt-devel-0.51.5-2.el3.x86_64.rpm SL 4.x SRPMS: newt-0.51.6-10.el4_8.1.src.rpm i386: newt-0.51.6-10.el4_8.1.i386.rpm newt-devel-0.51.6-10.el4_8.1.i386.rpm x86_64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.x86_64.rpm newt-devel-0.51.6-10.el4_8.1.x86_64.rpm SL 5.x SRPMS: newt-0.52.2-12.el5_4.1.src.rpm i386: newt-0.52.2-12.el5_4.1.i386.rpm newt-devel-0.52.2-12.el5_4.1.i386.rpm x86_64: newt-0.52.2-12.el5_4.1.i386.rpm newt-0.52.2-12.el5_4.1.x86_64.rpm newt-devel-0.52.2-12.el5_4.1.i386.rpm newt-devel-0.52.2-12.el5_4.1.x86_64.rpm -Connie Sieh -Troy Dawson . Timely newt safety patch tackling buffer overflow vulnerability in Scientific Linux systems.. Scientific Linux Update, Buffer Overflow Fix, Security Patch. .LinuxSecurity.com Team

Calendar%202 Sep 25, 2009 Scientific Linux
Banner 1 1028x280 1708121660 1771599717
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderatesecurity update

Red Hat: RHSA-2009-1463-01 Moderate: Newt Buffer Overflow Threat

Updated newt packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: newt security update Advisory ID: RHSA-2009:1463-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:1463.html Issue date: 2009-09-24 CVE Names: CVE-2009-2905 ==================================================================== 1. Summary: Updated newt packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Description: Newt is a programming library for color text mode, widget-based user interfaces. Newt can be used to add stacked windows, entry widgets, checkboxes, radio buttons, labels, plain text fields, scrollbars, and so on, to text mode user interfaces. A heap-based buffer overflow flaw was found in the way newt processes content that is to be displayed in a text dialog box. A localattacker could issue a specially-crafted text dialog box display request (direct or via a custom application), leading to a denial of service (application crash) or, potentially, arbitrary code execution with the privileges of the user running the application using the newt library. (CVE-2009-2905) Users of newt should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the updated packages, all applications using the newt library must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 523955 - CVE-2009-2905 newt: heap-overflow in textbox when text reflowing 6. Package List: Red Hat Enterprise Linux AS version 3: Source: i386: newt-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-devel-0.51.5-2.el3.i386.rpm ia64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.ia64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.ia64.rpm newt-devel-0.51.5-2.el3.ia64.rpm ppc: newt-0.51.5-2.el3.ppc.rpm newt-0.51.5-2.el3.ppc64.rpm newt-debuginfo-0.51.5-2.el3.ppc.rpm newt-debuginfo-0.51.5-2.el3.ppc64.rpm newt-devel-0.51.5-2.el3.ppc.rpm s390: newt-0.51.5-2.el3.s390.rpm newt-debuginfo-0.51.5-2.el3.s390.rpm newt-devel-0.51.5-2.el3.s390.rpm s390x: newt-0.51.5-2.el3.s390.rpm newt-0.51.5-2.el3.s390x.rpm newt-debuginfo-0.51.5-2.el3.s390.rpm newt-debuginfo-0.51.5-2.el3.s390x.rpm newt-devel-0.51.5-2.el3.s390x.rpm x86_64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.x86_64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.x86_64.rpm newt-devel-0.51.5-2.el3.x86_64.rpm Red Hat Desktop version3: Source: i386: newt-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-devel-0.51.5-2.el3.i386.rpm x86_64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.x86_64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.x86_64.rpm newt-devel-0.51.5-2.el3.x86_64.rpm Red Hat Enterprise Linux ES version 3: Source: i386: newt-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-devel-0.51.5-2.el3.i386.rpm ia64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.ia64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.ia64.rpm newt-devel-0.51.5-2.el3.ia64.rpm x86_64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.x86_64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.x86_64.rpm newt-devel-0.51.5-2.el3.x86_64.rpm Red Hat Enterprise Linux WS version 3: Source: i386: newt-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-devel-0.51.5-2.el3.i386.rpm ia64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.ia64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.ia64.rpm newt-devel-0.51.5-2.el3.ia64.rpm x86_64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.x86_64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.x86_64.rpm newt-devel-0.51.5-2.el3.x86_64.rpm Red Hat Enterprise Linux AS version4: Source: i386: newt-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-devel-0.51.6-10.el4_8.1.i386.rpm ia64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.ia64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.ia64.rpm newt-devel-0.51.6-10.el4_8.1.ia64.rpm ppc: newt-0.51.6-10.el4_8.1.ppc.rpm newt-0.51.6-10.el4_8.1.ppc64.rpm newt-debuginfo-0.51.6-10.el4_8.1.ppc.rpm newt-debuginfo-0.51.6-10.el4_8.1.ppc64.rpm newt-devel-0.51.6-10.el4_8.1.ppc.rpm s390: newt-0.51.6-10.el4_8.1.s390.rpm newt-debuginfo-0.51.6-10.el4_8.1.s390.rpm newt-devel-0.51.6-10.el4_8.1.s390.rpm s390x: newt-0.51.6-10.el4_8.1.s390.rpm newt-0.51.6-10.el4_8.1.s390x.rpm newt-debuginfo-0.51.6-10.el4_8.1.s390.rpm newt-debuginfo-0.51.6-10.el4_8.1.s390x.rpm newt-devel-0.51.6-10.el4_8.1.s390x.rpm x86_64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.x86_64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.x86_64.rpm newt-devel-0.51.6-10.el4_8.1.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: Source: i386: newt-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-devel-0.51.6-10.el4_8.1.i386.rpm x86_64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.x86_64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.x86_64.rpm newt-devel-0.51.6-10.el4_8.1.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: newt-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-devel-0.51.6-10.el4_8.1.i386.rpm ia64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.ia64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.ia64.rpm newt-devel-0.51.6-10.el4_8.1.ia64.rpm x86_64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.x86_64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.x86_64.rpm newt-devel-0.51.6-10.el4_8.1.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: newt-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-devel-0.51.6-10.el4_8.1.i386.rpm ia64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.ia64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.ia64.rpm newt-devel-0.51.6-10.el4_8.1.ia64.rpm x86_64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.x86_64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.x86_64.rpm newt-devel-0.51.6-10.el4_8.1.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: newt-0.52.2-12.el5_4.1.i386.rpm newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm x86_64: newt-0.52.2-12.el5_4.1.i386.rpm newt-0.52.2-12.el5_4.1.x86_64.rpm newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm newt-debuginfo-0.52.2-12.el5_4.1.x86_64.rpm RHEL Desktop Workstation (v. 5 client): Source: i386: newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm newt-devel-0.52.2-12.el5_4.1.i386.rpm x86_64: newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm newt-debuginfo-0.52.2-12.el5_4.1.x86_64.rpm newt-devel-0.52.2-12.el5_4.1.i386.rpm newt-devel-0.52.2-12.el5_4.1.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: newt-0.52.2-12.el5_4.1.i386.rpm newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm newt-devel-0.52.2-12.el5_4.1.i386.rpm ia64: newt-0.52.2-12.el5_4.1.ia64.rpm newt-debuginfo-0.52.2-12.el5_4.1.ia64.rpm newt-devel-0.52.2-12.el5_4.1.ia64.rpm ppc: newt-0.52.2-12.el5_4.1.ppc.rpm newt-0.52.2-12.el5_4.1.ppc64.rpm newt-debuginfo-0.52.2-12.el5_4.1.ppc.rpm newt-debuginfo-0.52.2-12.el5_4.1.ppc64.rpm newt-devel-0.52.2-12.el5_4.1.ppc.rpm newt-devel-0.52.2-12.el5_4.1.ppc64.rpm s390x: newt-0.52.2-12.el5_4.1.s390.rpm newt-0.52.2-12.el5_4.1.s390x.rpm newt-debuginfo-0.52.2-12.el5_4.1.s390.rpm newt-debuginfo-0.52.2-12.el5_4.1.s390x.rpm newt-devel-0.52.2-12.el5_4.1.s390.rpm newt-devel-0.52.2-12.el5_4.1.s390x.rpm x86_64: newt-0.52.2-12.el5_4.1.i386.rpm newt-0.52.2-12.el5_4.1.x86_64.rpm newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm newt-debuginfo-0.52.2-12.el5_4.1.x86_64.rpm newt-devel-0.52.2-12.el5_4.1.i386.rpm newt-devel-0.52.2-12.el5_4.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://www.cve.org/CVERecord?id=CVE-2009-2905 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2009 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.4 (GNU/Linux) iD8DBQFKu8cqXlSAg2UNWIIRAj5rAJ93NojFMID2+HqRFyZ+LIdAKpXa5wCeLZhS 8OoeiLToCoMt/vAvwDtSfbU=0947 -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. . Ubuntu released a critical update for bcrypt addressing a severe vulnerability that may result in unauthorized access to sensitive data.. Red Hat, Newt Security Patch, Application Security, Linux Security, Buffer Overflow. . LinuxSecurity.com Team

Calendar%202 Sep 24, 2009 Red Hat
98
Ls Advisories Redhat Esm H240
Price Tag%201security advisorymoderatedenial of service

Red Hat: RHSA-2021:1134-01 Critical: libjpeg-turbo Memory Leak Issue

Updated newt packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team.. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: newt security update Advisory ID: RHSA-2009:1463-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2009:1463.html Issue date: 2009-09-24 CVE Names: CVE-2009-2905 ==================================================================== 1. Summary: Updated newt packages that fix one security issue are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. 2. Relevant releases/architectures: RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Desktop version 3 - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64 3. Description: Newt is a programming library for color text mode, widget-based user interfaces. Newt can be used to add stacked windows, entry widgets, checkboxes, radio buttons, labels, plain text fields, scrollbars, and so on, to text mode user interfaces. A heap-based buffer overflow flaw was found in the way newt processes content that is to be displayed in a text dialog box. A local attacker could issue a specially-crafted textdialog box display request (direct or via a custom application), leading to a denial of service (application crash) or, potentially, arbitrary code execution with the privileges of the user running the application using the newt library. (CVE-2009-2905) Users of newt should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the updated packages, all applications using the newt library must be restarted for the update to take effect. 4. Solution: Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at 5. Bugs fixed (http://bugzilla.redhat.com/): 523955 - CVE-2009-2905 newt: heap-overflow in textbox when text reflowing 6. Package List: Red Hat Enterprise Linux AS version 3: Source: i386: newt-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-devel-0.51.5-2.el3.i386.rpm ia64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.ia64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.ia64.rpm newt-devel-0.51.5-2.el3.ia64.rpm ppc: newt-0.51.5-2.el3.ppc.rpm newt-0.51.5-2.el3.ppc64.rpm newt-debuginfo-0.51.5-2.el3.ppc.rpm newt-debuginfo-0.51.5-2.el3.ppc64.rpm newt-devel-0.51.5-2.el3.ppc.rpm s390: newt-0.51.5-2.el3.s390.rpm newt-debuginfo-0.51.5-2.el3.s390.rpm newt-devel-0.51.5-2.el3.s390.rpm s390x: newt-0.51.5-2.el3.s390.rpm newt-0.51.5-2.el3.s390x.rpm newt-debuginfo-0.51.5-2.el3.s390.rpm newt-debuginfo-0.51.5-2.el3.s390x.rpm newt-devel-0.51.5-2.el3.s390x.rpm x86_64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.x86_64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.x86_64.rpm newt-devel-0.51.5-2.el3.x86_64.rpm Red Hat Desktop version3: Source: i386: newt-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-devel-0.51.5-2.el3.i386.rpm x86_64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.x86_64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.x86_64.rpm newt-devel-0.51.5-2.el3.x86_64.rpm Red Hat Enterprise Linux ES version 3: Source: i386: newt-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-devel-0.51.5-2.el3.i386.rpm ia64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.ia64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.ia64.rpm newt-devel-0.51.5-2.el3.ia64.rpm x86_64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.x86_64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.x86_64.rpm newt-devel-0.51.5-2.el3.x86_64.rpm Red Hat Enterprise Linux WS version 3: Source: i386: newt-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-devel-0.51.5-2.el3.i386.rpm ia64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.ia64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.ia64.rpm newt-devel-0.51.5-2.el3.ia64.rpm x86_64: newt-0.51.5-2.el3.i386.rpm newt-0.51.5-2.el3.x86_64.rpm newt-debuginfo-0.51.5-2.el3.i386.rpm newt-debuginfo-0.51.5-2.el3.x86_64.rpm newt-devel-0.51.5-2.el3.x86_64.rpm Red Hat Enterprise Linux AS version4: Source: i386: newt-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-devel-0.51.6-10.el4_8.1.i386.rpm ia64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.ia64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.ia64.rpm newt-devel-0.51.6-10.el4_8.1.ia64.rpm ppc: newt-0.51.6-10.el4_8.1.ppc.rpm newt-0.51.6-10.el4_8.1.ppc64.rpm newt-debuginfo-0.51.6-10.el4_8.1.ppc.rpm newt-debuginfo-0.51.6-10.el4_8.1.ppc64.rpm newt-devel-0.51.6-10.el4_8.1.ppc.rpm s390: newt-0.51.6-10.el4_8.1.s390.rpm newt-debuginfo-0.51.6-10.el4_8.1.s390.rpm newt-devel-0.51.6-10.el4_8.1.s390.rpm s390x: newt-0.51.6-10.el4_8.1.s390.rpm newt-0.51.6-10.el4_8.1.s390x.rpm newt-debuginfo-0.51.6-10.el4_8.1.s390.rpm newt-debuginfo-0.51.6-10.el4_8.1.s390x.rpm newt-devel-0.51.6-10.el4_8.1.s390x.rpm x86_64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.x86_64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.x86_64.rpm newt-devel-0.51.6-10.el4_8.1.x86_64.rpm Red Hat Enterprise Linux Desktop version 4: Source: i386: newt-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-devel-0.51.6-10.el4_8.1.i386.rpm x86_64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.x86_64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.x86_64.rpm newt-devel-0.51.6-10.el4_8.1.x86_64.rpm Red Hat Enterprise Linux ES version 4: Source: i386: newt-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-devel-0.51.6-10.el4_8.1.i386.rpm ia64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.ia64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.ia64.rpm newt-devel-0.51.6-10.el4_8.1.ia64.rpm x86_64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.x86_64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.x86_64.rpm newt-devel-0.51.6-10.el4_8.1.x86_64.rpm Red Hat Enterprise Linux WS version4: Source: i386: newt-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-devel-0.51.6-10.el4_8.1.i386.rpm ia64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.ia64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.ia64.rpm newt-devel-0.51.6-10.el4_8.1.ia64.rpm x86_64: newt-0.51.6-10.el4_8.1.i386.rpm newt-0.51.6-10.el4_8.1.x86_64.rpm newt-debuginfo-0.51.6-10.el4_8.1.i386.rpm newt-debuginfo-0.51.6-10.el4_8.1.x86_64.rpm newt-devel-0.51.6-10.el4_8.1.x86_64.rpm Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: newt-0.52.2-12.el5_4.1.i386.rpm newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm x86_64: newt-0.52.2-12.el5_4.1.i386.rpm newt-0.52.2-12.el5_4.1.x86_64.rpm newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm newt-debuginfo-0.52.2-12.el5_4.1.x86_64.rpm RHEL Desktop Workstation (v. 5 client): Source: i386: newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm newt-devel-0.52.2-12.el5_4.1.i386.rpm x86_64: newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm newt-debuginfo-0.52.2-12.el5_4.1.x86_64.rpm newt-devel-0.52.2-12.el5_4.1.i386.rpm newt-devel-0.52.2-12.el5_4.1.x86_64.rpm Red Hat Enterprise Linux (v. 5server): Source: i386: newt-0.52.2-12.el5_4.1.i386.rpm newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm newt-devel-0.52.2-12.el5_4.1.i386.rpm ia64: newt-0.52.2-12.el5_4.1.ia64.rpm newt-debuginfo-0.52.2-12.el5_4.1.ia64.rpm newt-devel-0.52.2-12.el5_4.1.ia64.rpm ppc: newt-0.52.2-12.el5_4.1.ppc.rpm newt-0.52.2-12.el5_4.1.ppc64.rpm newt-debuginfo-0.52.2-12.el5_4.1.ppc.rpm newt-debuginfo-0.52.2-12.el5_4.1.ppc64.rpm newt-devel-0.52.2-12.el5_4.1.ppc.rpm newt-devel-0.52.2-12.el5_4.1.ppc64.rpm s390x: newt-0.52.2-12.el5_4.1.s390.rpm newt-0.52.2-12.el5_4.1.s390x.rpm newt-debuginfo-0.52.2-12.el5_4.1.s390.rpm newt-debuginfo-0.52.2-12.el5_4.1.s390x.rpm newt-devel-0.52.2-12.el5_4.1.s390.rpm newt-devel-0.52.2-12.el5_4.1.s390x.rpm x86_64: newt-0.52.2-12.el5_4.1.i386.rpm newt-0.52.2-12.el5_4.1.x86_64.rpm newt-debuginfo-0.52.2-12.el5_4.1.i386.rpm newt-debuginfo-0.52.2-12.el5_4.1.x86_64.rpm newt-devel-0.52.2-12.el5_4.1.i386.rpm newt-devel-0.52.2-12.el5_4.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://www.cve.org/CVERecord?id=CVE-2009-2905 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2009 Red Hat, Inc. . A recent security patch for Red Hat tackles a heap buffer overflow vulnerability that poses a moderate risk. It is essential to implement the update to safeguard your systems.. Newt Exploit, Heap Overflow Impact, Red Hat Security Fix. . LinuxSecurity.com Team

Calendar%202 Sep 24, 2009 Red Hat
Banner 1 1028x280 1708121660 1771599717
News Add Esm H240

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Community Poll

More Polls

Should Linux servers automatically install security updates?

No answer selected. Please try again.
Please select either existing option or enter your own, however not both.
Please select minimum {0} answer(s).
Please select maximum {0} answer(s).
/main-polls/157-should-linux-servers-automatically-install-security-updates?task=poll.vote&format=json
157
radio
0
[{"id":506,"title":"Yes \u2014 critical security patches should install automatically.","votes":0,"type":"x","order":1,"pct":0,"resources":[]},{"id":507,"title":"No \u2014 every update should be tested before deployment.","votes":0,"type":"x","order":2,"pct":0,"resources":[]},{"id":508,"title":"Only critical vulnerabilities should auto-install.","votes":0,"type":"x","order":3,"pct":0,"resources":[]},{"id":509,"title":"I patch when Reddit starts panicking.","votes":1,"type":"x","order":4,"pct":100,"resources":[]}] ["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"] ["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"] 350
bottom 200

Search Topics