Uočen je sigurnosni propust u radu programskog paketa RPM. Zlonamjerni ga korisnik može iskoristiti za izvođenje DoS napada ili pokretanje proizvoljnog programskog koda.
Propust je posljedica nepravilnosti u RPM biblioteci, a očituje se prilikom analize zaglavlja paketa.
Posljedica:
Napadaču nedostatak omogućuje izvođenje napada uskraćivanja usluge ili pokretanje proizvoljnog programskog koda, podmetanjem posebno oblikovanog RPM paketa.
Rješenje:
Korisnicima se savjetuje instalacija odgovarajuće nadogradnje.
CentOS Errata and Security Advisory 2011:1349 Important
Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1349.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( md5sum Filename )
i386:
4d585e8b12ce27b13ffb5e0d45f9569b popt-1.10.2.3-22.el5_7.2.i386.rpm
82008752811345bd48c567d238545cde rpm-4.4.2.3-22.el5_7.2.i386.rpm
4cf07794cbd47cd8571b8e9874fd0e80 rpm-apidocs-4.4.2.3-22.el5_7.2.i386.rpm
85b67b4e8e65eb788b66f3c6948ea855 rpm-build-4.4.2.3-22.el5_7.2.i386.rpm
9519d6cb24377a322153fdeef3f5999a rpm-devel-4.4.2.3-22.el5_7.2.i386.rpm
90e0e70797846e33bdf987a5fe0b5e9e rpm-libs-4.4.2.3-22.el5_7.2.i386.rpm
5879391ce7c0d718981425375e21522f rpm-python-4.4.2.3-22.el5_7.2.i386.rpm
Source:
688cb231c484ea974b4513723f30e273 rpm-4.4.2.3-22.el5_7.2.src.rpm
--
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
_______________________________________________
CentOS-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
http://lists.centos.org/mailman/listinfo/centos-announce
CentOS Errata and Security Advisory 2011:1349 Important
Upstream details at : https://rhn.redhat.com/errata/RHSA-2011-1349.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( md5sum Filename )
x86_64:
4d585e8b12ce27b13ffb5e0d45f9569b popt-1.10.2.3-22.el5_7.2.i386.rpm
641c57febb29ba8b5e392c321c2e6e81 popt-1.10.2.3-22.el5_7.2.x86_64.rpm
9f9374ac2507e34bf32333ff0f746109 rpm-4.4.2.3-22.el5_7.2.x86_64.rpm
6ae381a435da30c8d6a58957eee28d71 rpm-apidocs-4.4.2.3-22.el5_7.2.x86_64.rpm
3bfd537e4171e4da4edce6a902ed9a3b rpm-build-4.4.2.3-22.el5_7.2.x86_64.rpm
9519d6cb24377a322153fdeef3f5999a rpm-devel-4.4.2.3-22.el5_7.2.i386.rpm
8d32b2dfc3674f69e436c938dbb90f25 rpm-devel-4.4.2.3-22.el5_7.2.x86_64.rpm
90e0e70797846e33bdf987a5fe0b5e9e rpm-libs-4.4.2.3-22.el5_7.2.i386.rpm
dea6f90e1b8fcd0749e6a0721e2fb4c6 rpm-libs-4.4.2.3-22.el5_7.2.x86_64.rpm
0ca72c28170c938d5684ecddbf46d47c rpm-python-4.4.2.3-22.el5_7.2.x86_64.rpm
Source:
688cb231c484ea974b4513723f30e273 rpm-4.4.2.3-22.el5_7.2.src.rpm
--
Karanbir Singh
CentOS Project { http://www.centos.org/ }
irc: z00dax, #Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
_______________________________________________
CentOS-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
http://lists.centos.org/mailman/listinfo/centos-announce
Posljednje sigurnosne preporuke