Is CAN-2005-2335 being looked at by Fedora Legacy? (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2335) There is a RedHat Security Advisory RHSA-2005:640-08 http://rhn.redhat.com/errata/RHSA-2005-640.html For RH7.3 it appears to be a case of rebuilding the RHEL ES (v. 2.1) SRPM Ian