Skip to navigation

Security Advisory kdelibs, kdebase security update

Advisory: RHSA-2004:412-11
Type: Security Advisory
Severity: Moderate
Issued on: 2004-10-05
Last updated on: 2004-10-05
Affected Products: Red Hat Desktop (v. 3)
Red Hat Enterprise Linux AS (v. 2.1)
Red Hat Enterprise Linux AS (v. 3)
Red Hat Enterprise Linux ES (v. 2.1)
Red Hat Enterprise Linux ES (v. 3)
Red Hat Enterprise Linux WS (v. 2.1)
Red Hat Enterprise Linux WS (v. 3)
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor
CVEs (cve.mitre.org): CVE-2004-0689
CVE-2004-0721
CVE-2004-0746

Details

Updated kdelib and kdebase packages that resolve multiple security issues
are now available.

The kdelibs packages include libraries for the K Desktop Environment.
The kdebase packages include core applications for the K Desktop Environment.

Andrew Tuitt reported that versions of KDE up to and including 3.2.3 create
temporary directories with predictable names. A local attacker could
prevent KDE applications from functioning correctly, or overwrite files
owned by other users by creating malicious symlinks. The Common
Vulnerabilities and Exposures project has assigned the name CAN-2004-0689
to this issue.

WESTPOINT internet reconnaissance services has discovered that the KDE web
browser Konqueror allows websites to set cookies for certain country
specific secondary top level domains. An attacker within one of the
affected domains could construct a cookie which would be sent to all other
websites within the domain leading to a session fixation attack. This
issue does not affect popular domains such as .co.uk, .co.in, or .com. The
Common Vulnerabilities and Exposures project has assigned the name
CAN-2004-0721 to this issue.

A frame injection spoofing vulnerability has been discovered in the
Konqueror web browser. This issue could allow a malicious website to show
arbitrary content in a named frame of a different browser window. The
Common Vulnerabilities and Exposures project has assigned the name
CAN-2004-0746 to this issue.

All users of KDE are advised to upgrade to these erratum packages,
which contain backported patches from the KDE team for these issues.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Updated packages

Red Hat Desktop (v. 3)

SRPMS:
kdebase-3.1.3-5.4.src.rpm
File outdated by:  RHSA-2007:0494
    MD5: e4d4e63c66ce9c682c85dc250e1e679d
kdelibs-3.1.3-6.6.src.rpm
File outdated by:  RHSA-2009:1128
    MD5: 135f069e313d3cbf6483e08711958ee3
kdelibs-3.1.3-6.6.src.rpm
File outdated by:  RHSA-2009:1128
    MD5: 135f069e313d3cbf6483e08711958ee3
 
IA-32:
kdebase-3.1.3-5.4.i386.rpm
File outdated by:  RHSA-2007:0494
    MD5: 6d952551a98d11f296032defd42392bc
kdebase-devel-3.1.3-5.4.i386.rpm
File outdated by:  RHSA-2007:0494
    MD5: 2693da75dd6670f631dab884775881cc
kdelibs-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: 266c7d206975aaaeddf4a611674e866e
kdelibs-devel-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: bafda78112a389994916b0b0ced83ee2
 
x86_64:
kdebase-3.1.3-5.4.x86_64.rpm
File outdated by:  RHSA-2007:0494
    MD5: 272944753852fad10e47b9aad38af42a
kdebase-devel-3.1.3-5.4.x86_64.rpm
File outdated by:  RHSA-2007:0494
    MD5: a9473976663eeecc906887e1c2dcfcb8
kdelibs-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: 266c7d206975aaaeddf4a611674e866e
kdelibs-3.1.3-6.6.x86_64.rpm
File outdated by:  RHSA-2009:1128
    MD5: 57fb61c68d0aeca7b998d36cd6597541
kdelibs-devel-3.1.3-6.6.x86_64.rpm
File outdated by:  RHSA-2009:1128
    MD5: 1b75fa2f076385cd5d9f0d977a921c03
 
Red Hat Enterprise Linux AS (v. 2.1)

SRPMS:
kdebase-2.2.2-12.src.rpm
File outdated by:  RHSA-2005:009
    MD5: 1b2d27e8c9b4fbcc6f14b8b5d8f211de
kdebase-2.2.2-12.src.rpm
File outdated by:  RHSA-2005:009
    MD5: 1b2d27e8c9b4fbcc6f14b8b5d8f211de
kdelibs-2.2.2-13.src.rpm
File outdated by:  RHSA-2006:0720
    MD5: 34cd7c8777facff45a8e5eeed312b3b4
kdelibs-2.2.2-13.src.rpm
File outdated by:  RHSA-2006:0720
    MD5: 34cd7c8777facff45a8e5eeed312b3b4
 
IA-32:
arts-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 2b9a999a24dd42549fac4e39790b8c17
kdebase-2.2.2-12.i386.rpm
File outdated by:  RHSA-2005:009
    MD5: 2e4e89ab276d4783fca6effbb86abd45
kdebase-devel-2.2.2-12.i386.rpm
File outdated by:  RHSA-2005:009
    MD5: 3b7bdc19f63b066f030b02de2fd36fe6
kdelibs-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: d6aebf57668023cb684b81236c32ce71
kdelibs-devel-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 20114a97ed08c90c3ecd41d1b462b6bf
kdelibs-sound-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 5ca2b715621e0cdec5e3cfc647739d3f
kdelibs-sound-devel-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 65522ae63db9a60ec3b021099fa267ed
 
IA-64:
arts-2.2.2-13.ia64.rpm
File outdated by:  RHSA-2006:0720
    MD5: 198791b6c87c082383e8824f744a8c41
kdebase-2.2.2-12.ia64.rpm
File outdated by:  RHSA-2005:009
    MD5: 95e7fac336a7858e13eb38f47ae5f135
kdebase-devel-2.2.2-12.ia64.rpm
File outdated by:  RHSA-2005:009
    MD5: 36592e521a13904f8c4c0f5341d39f95
kdelibs-2.2.2-13.ia64.rpm
File outdated by:  RHSA-2006:0720
    MD5: f0c10dff06590e9b3d4470a4f8b1f624
kdelibs-devel-2.2.2-13.ia64.rpm
File outdated by:  RHSA-2006:0720
    MD5: f8c9cebea143dcf5450cd8ca0105d724
kdelibs-sound-2.2.2-13.ia64.rpm
File outdated by:  RHSA-2006:0720
    MD5: e2218bf3c2da78612dcaf84775f2b940
kdelibs-sound-devel-2.2.2-13.ia64.rpm
File outdated by:  RHSA-2006:0720
    MD5: 2172bffd9baeb6ba3919c9510a8f8c61
 
Red Hat Enterprise Linux AS (v. 3)

SRPMS:
kdebase-3.1.3-5.4.src.rpm
File outdated by:  RHSA-2007:0494
    MD5: e4d4e63c66ce9c682c85dc250e1e679d
kdelibs-3.1.3-6.6.src.rpm
File outdated by:  RHSA-2009:1128
    MD5: 135f069e313d3cbf6483e08711958ee3
kdelibs-3.1.3-6.6.src.rpm
File outdated by:  RHSA-2009:1128
    MD5: 135f069e313d3cbf6483e08711958ee3
 
IA-32:
kdebase-3.1.3-5.4.i386.rpm
File outdated by:  RHSA-2007:0494
    MD5: 6d952551a98d11f296032defd42392bc
kdebase-devel-3.1.3-5.4.i386.rpm
File outdated by:  RHSA-2007:0494
    MD5: 2693da75dd6670f631dab884775881cc
kdelibs-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: 266c7d206975aaaeddf4a611674e866e
kdelibs-devel-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: bafda78112a389994916b0b0ced83ee2
 
IA-64:
kdebase-3.1.3-5.4.ia64.rpm
File outdated by:  RHSA-2007:0494
    MD5: 841744faecd1ee54f3790a123395e999
kdebase-devel-3.1.3-5.4.ia64.rpm
File outdated by:  RHSA-2007:0494
    MD5: ad4280e59a322ebda1801b5624a6bd2a
kdelibs-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: 266c7d206975aaaeddf4a611674e866e
kdelibs-3.1.3-6.6.ia64.rpm
File outdated by:  RHSA-2009:1128
    MD5: f939dede59e2b87af5f8d32fb41bd7f2
kdelibs-devel-3.1.3-6.6.ia64.rpm
File outdated by:  RHSA-2009:1128
    MD5: 0ea7d0872f7b9aaec7343fab3214791e
 
PPC:
kdebase-3.1.3-5.4.ppc.rpm
File outdated by:  RHSA-2007:0494
    MD5: e658798e8a2b5b7e1c63261f4e401a0c
kdebase-devel-3.1.3-5.4.ppc.rpm
File outdated by:  RHSA-2007:0494
    MD5: 9fe876d61e6cbee4450eb1790d666b88
kdelibs-3.1.3-6.6.ppc.rpm
File outdated by:  RHSA-2009:1128
    MD5: 478bbcde19aa9dfd6047d775b9b3fd97
kdelibs-devel-3.1.3-6.6.ppc.rpm
File outdated by:  RHSA-2009:1128
    MD5: d74c96bbdc599a943a0d73015487f1de
 
s390:
kdebase-3.1.3-5.4.s390.rpm
File outdated by:  RHSA-2007:0494
    MD5: 62c50a1e7fa5950240cb2df7821a2cc1
kdebase-devel-3.1.3-5.4.s390.rpm
File outdated by:  RHSA-2007:0494
    MD5: 6c19f7ec956aa49f2f5a2d425bd93da1
kdelibs-3.1.3-6.6.s390.rpm
File outdated by:  RHSA-2009:1128
    MD5: c41cb46b8353ab23344901df9eb7d813
kdelibs-devel-3.1.3-6.6.s390.rpm
File outdated by:  RHSA-2009:1128
    MD5: e0fd226e4c616aa6f661184f837cbf26
 
s390x:
kdebase-3.1.3-5.4.s390x.rpm
File outdated by:  RHSA-2007:0494
    MD5: 59899ed9813ae1b6f23756f600322a86
kdebase-devel-3.1.3-5.4.s390x.rpm
File outdated by:  RHSA-2007:0494
    MD5: 075a689d597dc89b3afea95cb16c7c69
kdelibs-3.1.3-6.6.s390.rpm
File outdated by:  RHSA-2009:1128
    MD5: c41cb46b8353ab23344901df9eb7d813
kdelibs-3.1.3-6.6.s390x.rpm
File outdated by:  RHSA-2009:1128
    MD5: 759d0d56fb3837b3bbca0bf74c6edd9a
kdelibs-devel-3.1.3-6.6.s390x.rpm
File outdated by:  RHSA-2009:1128
    MD5: 8b26c56fcaa2bfa353a23ed80cf0de87
 
x86_64:
kdebase-3.1.3-5.4.x86_64.rpm
File outdated by:  RHSA-2007:0494
    MD5: 272944753852fad10e47b9aad38af42a
kdebase-devel-3.1.3-5.4.x86_64.rpm
File outdated by:  RHSA-2007:0494
    MD5: a9473976663eeecc906887e1c2dcfcb8
kdelibs-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: 266c7d206975aaaeddf4a611674e866e
kdelibs-3.1.3-6.6.x86_64.rpm
File outdated by:  RHSA-2009:1128
    MD5: 57fb61c68d0aeca7b998d36cd6597541
kdelibs-devel-3.1.3-6.6.x86_64.rpm
File outdated by:  RHSA-2009:1128
    MD5: 1b75fa2f076385cd5d9f0d977a921c03
 
Red Hat Enterprise Linux ES (v. 2.1)

SRPMS:
kdebase-2.2.2-12.src.rpm
File outdated by:  RHSA-2005:009
    MD5: 1b2d27e8c9b4fbcc6f14b8b5d8f211de
kdebase-2.2.2-12.src.rpm
File outdated by:  RHSA-2005:009
    MD5: 1b2d27e8c9b4fbcc6f14b8b5d8f211de
kdelibs-2.2.2-13.src.rpm
File outdated by:  RHSA-2006:0720
    MD5: 34cd7c8777facff45a8e5eeed312b3b4
kdelibs-2.2.2-13.src.rpm
File outdated by:  RHSA-2006:0720
    MD5: 34cd7c8777facff45a8e5eeed312b3b4
 
IA-32:
arts-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 2b9a999a24dd42549fac4e39790b8c17
kdebase-2.2.2-12.i386.rpm
File outdated by:  RHSA-2005:009
    MD5: 2e4e89ab276d4783fca6effbb86abd45
kdebase-devel-2.2.2-12.i386.rpm
File outdated by:  RHSA-2005:009
    MD5: 3b7bdc19f63b066f030b02de2fd36fe6
kdelibs-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: d6aebf57668023cb684b81236c32ce71
kdelibs-devel-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 20114a97ed08c90c3ecd41d1b462b6bf
kdelibs-sound-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 5ca2b715621e0cdec5e3cfc647739d3f
kdelibs-sound-devel-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 65522ae63db9a60ec3b021099fa267ed
 
Red Hat Enterprise Linux ES (v. 3)

SRPMS:
kdebase-3.1.3-5.4.src.rpm
File outdated by:  RHSA-2007:0494
    MD5: e4d4e63c66ce9c682c85dc250e1e679d
kdelibs-3.1.3-6.6.src.rpm
File outdated by:  RHSA-2009:1128
    MD5: 135f069e313d3cbf6483e08711958ee3
kdelibs-3.1.3-6.6.src.rpm
File outdated by:  RHSA-2009:1128
    MD5: 135f069e313d3cbf6483e08711958ee3
 
IA-32:
kdebase-3.1.3-5.4.i386.rpm
File outdated by:  RHSA-2007:0494
    MD5: 6d952551a98d11f296032defd42392bc
kdebase-devel-3.1.3-5.4.i386.rpm
File outdated by:  RHSA-2007:0494
    MD5: 2693da75dd6670f631dab884775881cc
kdelibs-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: 266c7d206975aaaeddf4a611674e866e
kdelibs-devel-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: bafda78112a389994916b0b0ced83ee2
 
IA-64:
kdebase-3.1.3-5.4.ia64.rpm
File outdated by:  RHSA-2007:0494
    MD5: 841744faecd1ee54f3790a123395e999
kdebase-devel-3.1.3-5.4.ia64.rpm
File outdated by:  RHSA-2007:0494
    MD5: ad4280e59a322ebda1801b5624a6bd2a
kdelibs-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: 266c7d206975aaaeddf4a611674e866e
kdelibs-3.1.3-6.6.ia64.rpm
File outdated by:  RHSA-2009:1128
    MD5: f939dede59e2b87af5f8d32fb41bd7f2
kdelibs-devel-3.1.3-6.6.ia64.rpm
File outdated by:  RHSA-2009:1128
    MD5: 0ea7d0872f7b9aaec7343fab3214791e
 
x86_64:
kdebase-3.1.3-5.4.x86_64.rpm
File outdated by:  RHSA-2007:0494
    MD5: 272944753852fad10e47b9aad38af42a
kdebase-devel-3.1.3-5.4.x86_64.rpm
File outdated by:  RHSA-2007:0494
    MD5: a9473976663eeecc906887e1c2dcfcb8
kdelibs-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: 266c7d206975aaaeddf4a611674e866e
kdelibs-3.1.3-6.6.x86_64.rpm
File outdated by:  RHSA-2009:1128
    MD5: 57fb61c68d0aeca7b998d36cd6597541
kdelibs-devel-3.1.3-6.6.x86_64.rpm
File outdated by:  RHSA-2009:1128
    MD5: 1b75fa2f076385cd5d9f0d977a921c03
 
Red Hat Enterprise Linux WS (v. 2.1)

SRPMS:
kdebase-2.2.2-12.src.rpm
File outdated by:  RHSA-2005:009
    MD5: 1b2d27e8c9b4fbcc6f14b8b5d8f211de
kdebase-2.2.2-12.src.rpm
File outdated by:  RHSA-2005:009
    MD5: 1b2d27e8c9b4fbcc6f14b8b5d8f211de
kdelibs-2.2.2-13.src.rpm
File outdated by:  RHSA-2006:0720
    MD5: 34cd7c8777facff45a8e5eeed312b3b4
kdelibs-2.2.2-13.src.rpm
File outdated by:  RHSA-2006:0720
    MD5: 34cd7c8777facff45a8e5eeed312b3b4
 
IA-32:
arts-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 2b9a999a24dd42549fac4e39790b8c17
kdebase-2.2.2-12.i386.rpm
File outdated by:  RHSA-2005:009
    MD5: 2e4e89ab276d4783fca6effbb86abd45
kdebase-devel-2.2.2-12.i386.rpm
File outdated by:  RHSA-2005:009
    MD5: 3b7bdc19f63b066f030b02de2fd36fe6
kdelibs-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: d6aebf57668023cb684b81236c32ce71
kdelibs-devel-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 20114a97ed08c90c3ecd41d1b462b6bf
kdelibs-sound-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 5ca2b715621e0cdec5e3cfc647739d3f
kdelibs-sound-devel-2.2.2-13.i386.rpm
File outdated by:  RHSA-2006:0720
    MD5: 65522ae63db9a60ec3b021099fa267ed
 
Red Hat Enterprise Linux WS (v. 3)

SRPMS:
kdebase-3.1.3-5.4.src.rpm
File outdated by:  RHSA-2007:0494
    MD5: e4d4e63c66ce9c682c85dc250e1e679d
kdelibs-3.1.3-6.6.src.rpm
File outdated by:  RHSA-2009:1128
    MD5: 135f069e313d3cbf6483e08711958ee3
kdelibs-3.1.3-6.6.src.rpm
File outdated by:  RHSA-2009:1128
    MD5: 135f069e313d3cbf6483e08711958ee3
 
IA-32:
kdebase-3.1.3-5.4.i386.rpm
File outdated by:  RHSA-2007:0494
    MD5: 6d952551a98d11f296032defd42392bc
kdebase-devel-3.1.3-5.4.i386.rpm
File outdated by:  RHSA-2007:0494
    MD5: 2693da75dd6670f631dab884775881cc
kdelibs-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: 266c7d206975aaaeddf4a611674e866e
kdelibs-devel-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: bafda78112a389994916b0b0ced83ee2
 
IA-64:
kdebase-3.1.3-5.4.ia64.rpm
File outdated by:  RHSA-2007:0494
    MD5: 841744faecd1ee54f3790a123395e999
kdebase-devel-3.1.3-5.4.ia64.rpm
File outdated by:  RHSA-2007:0494
    MD5: ad4280e59a322ebda1801b5624a6bd2a
kdelibs-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: 266c7d206975aaaeddf4a611674e866e
kdelibs-3.1.3-6.6.ia64.rpm
File outdated by:  RHSA-2009:1128
    MD5: f939dede59e2b87af5f8d32fb41bd7f2
kdelibs-devel-3.1.3-6.6.ia64.rpm
File outdated by:  RHSA-2009:1128
    MD5: 0ea7d0872f7b9aaec7343fab3214791e
 
x86_64:
kdebase-3.1.3-5.4.x86_64.rpm
File outdated by:  RHSA-2007:0494
    MD5: 272944753852fad10e47b9aad38af42a
kdebase-devel-3.1.3-5.4.x86_64.rpm
File outdated by:  RHSA-2007:0494
    MD5: a9473976663eeecc906887e1c2dcfcb8
kdelibs-3.1.3-6.6.i386.rpm
File outdated by:  RHSA-2009:1128
    MD5: 266c7d206975aaaeddf4a611674e866e
kdelibs-3.1.3-6.6.x86_64.rpm
File outdated by:  RHSA-2009:1128
    MD5: 57fb61c68d0aeca7b998d36cd6597541
kdelibs-devel-3.1.3-6.6.x86_64.rpm
File outdated by:  RHSA-2009:1128
    MD5: 1b75fa2f076385cd5d9f0d977a921c03
 
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor

SRPMS:
kdebase-2.2.2-12.src.rpm
File outdated by:  RHSA-2005:009
    MD5: 1b2d27e8c9b4fbcc6f14b8b5d8f211de
kdebase-2.2.2-12.src.rpm
File outdated by:  RHSA-2005:009
    MD5: 1b2d27e8c9b4fbcc6f14b8b5d8f211de
kdelibs-2.2.2-13.src.rpm
File outdated by:  RHSA-2006:0720
    MD5: 34cd7c8777facff45a8e5eeed312b3b4
kdelibs-2.2.2-13.src.rpm
File outdated by:  RHSA-2006:0720
    MD5: 34cd7c8777facff45a8e5eeed312b3b4
 
IA-64:
arts-2.2.2-13.ia64.rpm
File outdated by:  RHSA-2006:0720
    MD5: 198791b6c87c082383e8824f744a8c41
kdebase-2.2.2-12.ia64.rpm
File outdated by:  RHSA-2005:009
    MD5: 95e7fac336a7858e13eb38f47ae5f135
kdebase-devel-2.2.2-12.ia64.rpm
File outdated by:  RHSA-2005:009
    MD5: 36592e521a13904f8c4c0f5341d39f95
kdelibs-2.2.2-13.ia64.rpm
File outdated by:  RHSA-2006:0720
    MD5: f0c10dff06590e9b3d4470a4f8b1f624
kdelibs-devel-2.2.2-13.ia64.rpm
File outdated by:  RHSA-2006:0720
    MD5: f8c9cebea143dcf5450cd8ca0105d724
kdelibs-sound-2.2.2-13.ia64.rpm
File outdated by:  RHSA-2006:0720
    MD5: e2218bf3c2da78612dcaf84775f2b940
kdelibs-sound-devel-2.2.2-13.ia64.rpm
File outdated by:  RHSA-2006:0720
    MD5: 2172bffd9baeb6ba3919c9510a8f8c61
 

Bugs fixed (see bugzilla for more information)

128462 - CAN-2004-0721 Konqueror frame injection spoofing
128693 - CAN-2004-0689 Predictable temporary filenames


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/