Ispravljen je sigurnosni nedostatak otkriven u radu programskog paketa Ganglia, za operacijske sustave Fedora 16 i 17. Napadači su ga mogli iskoristiti za pokretanje proizvoljnog PHP koda.
Paket:
ganglia 3.x
Operacijski sustavi:
Fedora 16, Fedora 17
Problem:
nepoznat
Iskorištavanje:
lokalno/udaljeno
Posljedica:
proizvoljno izvršavanje programskog koda
Rješenje:
programska zakrpa proizvođača
Izvorni ID preporuke:
FEDORA-2012-10727
Izvor:
Fedora
Problem:
Zasad nisu poznati detalji oko uzroka spomenutog nedostatka.
Posljedica:
Napadačima omogućuje izvršavanje proizvoljnog PHP koda.
Rješenje:
Svim se korisnicima savjetuje instalacija odgovarajuće nadogradnje.
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-10727
2012-07-17 17:01:55
--------------------------------------------------------------------------------
Name : ganglia
Product : Fedora 16
Version : 3.1.7
Release : 5.fc16
URL : http://ganglia.sourceforge.net/
Summary : Ganglia Distributed Monitoring System
Description :
Ganglia is a scalable, real-time monitoring and execution environment
with all execution requests and statistics expressed in an open
well-defined XML format.
--------------------------------------------------------------------------------
Update Information:
Fix for arbitrary PHP file execution
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 15 2012 Kostas Georgiou <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.1.7-5
- Backpor of security patch for gangliabz#333
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ganglia' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2012-10699
2012-07-17 17:00:11
--------------------------------------------------------------------------------
Name : ganglia
Product : Fedora 17
Version : 3.1.7
Release : 6.fc17
URL : http://ganglia.sourceforge.net/
Summary : Ganglia Distributed Monitoring System
Description :
Ganglia is a scalable, real-time monitoring and execution environment
with all execution requests and statistics expressed in an open
well-defined XML format.
--------------------------------------------------------------------------------
Update Information:
Fix for arbitrary PHP file execution
--------------------------------------------------------------------------------
ChangeLog:
* Sun Jul 15 2012 Kostas Georgiou <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.1.7-6
- Backport of security patch for gangliabz#333
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update ganglia' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Posljednje sigurnosne preporuke