Red Hat ENTERPRISE LINUX 5.5 - S 2010, Руководство пользователя

Страница: 28 / 470

Chapter 1. Package Updates
18
to run an application using brltty in an attacker-controlled directory, could run arbitrary code with the
privileges of the victim. (
CVE-2008-3279
96
)
These updated packages also provide fixes for the following bugs:
* the brltty configuration file is documented in the brltty manual page, but there is no separate manual
page for the /etc/brltty.conf configuration file: running "man brltty.conf" returned "No manual entry for
brltty.conf" rather than opening the brltty manual entry. This update adds brltty.conf.5 as an alias to the
brltty manual page. Consequently, running "man brltty.conf" now opens the manual entry documenting
the brltty.conf specification. (
BZ#530554
98 97
)
* previously, the brltty-pm.conf configuration file was installed in the /etc/brltty/ directory. This file,
which configures Papenmeier Braille Terminals for use with Red Hat Enterprise Linux, is optional. As
well, it did not come with a corresponding manual page. With this update, the file has been moved
to /usr/share/doc/brltty-3.7.2/BrailleDrivers/Papenmeier/. This directory also includes a README
document that explains the file's purpose and format. (
BZ#530554
100 99
)
* during the brltty packages installation, the message
Creating screen inspection device /dev/vcsa...done.
was presented at the console. This was inadequate, especially during the initial install of the system.
These updated packages do not send any message to the console during installation. (
BZ#529163
101
)
* although brltty contains ELF objects, the brltty-debuginfo package was empty. With this update, the -
debuginfo package contains valid debugging information as expected. (
BZ#500545
102
)
* the MAX_NR_CONSOLES definition was acquired by brltty by #including linux/tty.h in Programs/
api_client.c. MAX_NR_CONSOLES has since moved to linux/vt.h but the #include in api_client.c
was not updated. Consequently, brltty could not be built from the source RPM against the Red Hat
Enterprise Linux 5 kernel. This update corrects the #include in api_client.c to linux/vt.h and brltty now
builds from source as expected. (
BZ#456247
103
)
All brltty users are advised to upgrade to these updated packages, which resolve these issues.
1.17. checkpolicy
1.17.1. RHBA-2010:0184: bug fix update
An updated checkpolicy package that makes a man page correction, fixes help message and man
page omissions and allows the unknown access flag to be specified is now available.
checkpolicy is the policy compiler for Security-Enhanced Linux (SELinux). The checkpolicy utility is
required for building SELinux policies.
This updated checkpolicy package addresses the following issues:
96
https://www.redhat.com/security/data/cve/CVE-2008-3279.html
98
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=530554
97
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=530554
100
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=530554
99
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=530554
101
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=529163
102
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=500545
103
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=456247