Login
Newsletter
Werbung

Sicherheit: Preisgabe von Informationen in initscripts
Aktuelle Meldungen Distributionen
Name: Preisgabe von Informationen in initscripts
ID: MDVSA-2009:170
Distribution: Mandriva
Plattformen: Mandriva 2008.1, Mandriva 2009.0, Mandriva 2009.1, Mandriva Enterprise Server 5.0
Datum: Mi, 29. Juli 2009, 01:21
Referenzen: https://qa.mandriva.com/51606
https://qa.mandriva.com/52149
Applikationen: initscripts

Originalnachricht

This is a multi-part message in MIME format...

------------=_1248823288-13155-462


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2009:170
http://www.mandriva.com/security/
_______________________________________________________________________

Package : initscripts
Date : July 28, 2009
Affected: 2008.1, 2009.0, 2009.1, Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

Mandriva Security team has identified and fixed a vulnerability in
initscripts which could lead to partial wireless password disclosure
for WPA/WPA2 passwords of certain length which contained spaces.

This update fixes the vulnerability.
_______________________________________________________________________

References:

https://qa.mandriva.com/52149
https://qa.mandriva.com/51606
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2008.1:
c2f82185b6a1b451e8d0a469224d8c5a
2008.1/i586/initscripts-8.63-9.4mdv2008.1.i586.rpm
64f2ca707c0e6635cababcd7263d4abb
2008.1/SRPMS/initscripts-8.63-9.4mdv2008.1.src.rpm

Mandriva Linux 2008.1/X86_64:
fb044db8aee555c5e165e4c3ca608433
2008.1/x86_64/initscripts-8.63-9.4mdv2008.1.x86_64.rpm
64f2ca707c0e6635cababcd7263d4abb
2008.1/SRPMS/initscripts-8.63-9.4mdv2008.1.src.rpm

Mandriva Linux 2009.0:
547725f36363ffcfcc8c0389f2aeb298
2009.0/i586/debugmode-8.81-10.2mdv2009.0.i586.rpm
4779e320e3a1a345d926106de5135552
2009.0/i586/initscripts-8.81-10.2mdv2009.0.i586.rpm
5a0edc132358a4a0e1627edc64a2b734
2009.0/SRPMS/initscripts-8.81-10.2mdv2009.0.src.rpm

Mandriva Linux 2009.0/X86_64:
73c516af3830e70547cc15d69d2fbcd2
2009.0/x86_64/debugmode-8.81-10.2mdv2009.0.x86_64.rpm
7ecbe026d44e11ebfab474ea6941edd1
2009.0/x86_64/initscripts-8.81-10.2mdv2009.0.x86_64.rpm
5a0edc132358a4a0e1627edc64a2b734
2009.0/SRPMS/initscripts-8.81-10.2mdv2009.0.src.rpm

Mandriva Linux 2009.1:
6a202f378cfdd5bca9bf3fefcd28f884
2009.1/i586/debugmode-8.88-23.2mdv2009.1.i586.rpm
e21426bd4d5b4f2b8aa4b29b445ec0f3
2009.1/i586/initscripts-8.88-23.2mdv2009.1.i586.rpm
8e00b02e0fea6bb32370ab25f6add0dd
2009.1/SRPMS/initscripts-8.88-23.2mdv2009.1.src.rpm

Mandriva Linux 2009.1/X86_64:
14a7c9ca90043ec2989f3f9dd01f5ed7
2009.1/x86_64/debugmode-8.88-23.2mdv2009.1.x86_64.rpm
1f9acc735be39aa8bc937087c39808bd
2009.1/x86_64/initscripts-8.88-23.2mdv2009.1.x86_64.rpm
8e00b02e0fea6bb32370ab25f6add0dd
2009.1/SRPMS/initscripts-8.88-23.2mdv2009.1.src.rpm

Mandriva Enterprise Server 5:
bd9082dc2f1bf9f4ec7d376f946b1ccd
mes5/i586/debugmode-8.81-10.2mdvmes5.i586.rpm
23bdff614d8f7cc132f3dcbba2c7df45
mes5/i586/initscripts-8.81-10.2mdvmes5.i586.rpm
7458437fd85bd4fd0f7e9e67e1289883
mes5/SRPMS/initscripts-8.81-10.2mdvmes5.src.rpm

Mandriva Enterprise Server 5/X86_64:
95d8a219c11a9d357360e9ad6906ad41
mes5/x86_64/debugmode-8.81-10.2mdvmes5.x86_64.rpm
155bc9d037dbdaca8286b179ac03664b
mes5/x86_64/initscripts-8.81-10.2mdvmes5.x86_64.rpm
7458437fd85bd4fd0f7e9e67e1289883
mes5/SRPMS/initscripts-8.81-10.2mdvmes5.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFKb1pYmqjQ0CJFipgRAhT3AKDuxg88YO9tgrdu/NfViMinrNLlbgCfUciW
FZYSM6wOroGiquvGehX8TW8=
=7/zd
-----END PGP SIGNATURE-----


------------=_1248823288-13155-462
Content-Type: text/plain; name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________

------------=_1248823288-13155-462--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung