Red Hat has issued an update for udev. This fixes a vulnerability, which potentially can be exploited by malicious, local users to gain access to potentially sensitive information.

The vulnerability is caused due to insecure permissions being set on "/dev/input" by udev. This may be exploited by malicious users to gain access to certain information (e.g. keyboard input) by reading from "/dev/input/event0".

Solution
Updated packages are available from Red Hat Network.
Further details available in Customer Area

Provided and/or discovered by
Richard Cunningham

Original Advisory
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175818
http://rhn.redhat.com/errata/RHSA-2005-864.html

Deep Links
Links available in Customer Area