Redhat Cygwin vulnerabilities

• redhat cygwin setup.exe before 2.573.2.3 in Cygwin does not properly verify the authenticity of packages, which... CVE-2008-3323 7.6 HighJuly 28, 2008
• redhat cygwin Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent... CVE-2007-6181 8.5 HighNovember 30, 2007