drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Pufferüberläufe in libtar
Name: |
Pufferüberläufe in libtar |
|
ID: |
MDVSA-2013:253 |
|
Distribution: |
Mandriva |
|
Plattformen: |
Mandriva Enterprise Server 5.0, Mandriva Business Server 1.0 |
|
Datum: |
Fr, 18. Oktober 2013, 16:05 |
|
Referenzen: |
http://advisories.mageia.org/MGASA-2013-0309.html
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4397 |
|
Applikationen: |
libtar |
|
Originalnachricht |
This is a multi-part message in MIME format...
------------=_1382096004-2618-8
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2013:253 http://www.mandriva.com/en/support/security/ _______________________________________________________________________
Package : libtar Date : October 18, 2013 Affected: Business Server 1.0, Enterprise Server 5.0 _______________________________________________________________________
Problem Description:
Updated libtar packages fixes security vulnerability: Two heap-based buffer overflow flaws were found in the way libtar handled certain archives. If a user were tricked into expanding a specially-crafted archive, it could cause the libtar executable or an application using libtar to crash or, potentially, execute arbitrary code (CVE-2013-4397). _______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4397 http://advisories.mageia.org/MGASA-2013-0309.html _______________________________________________________________________
Updated Packages:
Mandriva Enterprise Server 5: fc5de91cbfbe6ef4887508950228917f mes5/i586/libtar-1.2.11-8.1mdvmes5.2.i586.rpm 51344632af14453cbcbe965b7c399f54 mes5/i586/libtar-devel-1.2.11-8.1mdvmes5.2.i586.rpm 89a4b3aecbad9877387083d7d8beb338 mes5/SRPMS/libtar-1.2.11-8.1mdvmes5.2.src.rpm
Mandriva Enterprise Server 5/X86_64: dd7147087f499c1820af6fd133deb67c mes5/x86_64/libtar-1.2.11-8.1mdvmes5.2.x86_64.rpm 500ab433962e2858127dc355b4449264 mes5/x86_64/libtar-devel-1.2.11-8.1mdvmes5.2.x86_64.rpm 89a4b3aecbad9877387083d7d8beb338 mes5/SRPMS/libtar-1.2.11-8.1mdvmes5.2.src.rpm
Mandriva Business Server 1/X86_64: ffa99a374bd177f1d2945781c5ef27aa mbs1/x86_64/libtar-1.2.11-11.1.mbs1.x86_64.rpm d9017890822440d08a1c6fea588b58f3 mbs1/x86_64/libtar-devel-1.2.11-11.1.mbs1.x86_64.rpm cf4340715eac00d62d97ce5c242e13d2 mbs1/SRPMS/libtar-1.2.11-11.1.mbs1.src.rpm _______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/en/support/security/advisories/
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com _______________________________________________________________________
Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux)
iD8DBQFSYO+zmqjQ0CJFipgRAktEAJ0Ucyo5IMA+rwtvDivPhmjNBwhcCgCdGu4P oVXlXmOU2AH4q46TUynlBjY= =mWvW -----END PGP SIGNATURE-----
------------=_1382096004-2618-8 Content-Type: text/plain; charset="UTF-8"; name="message-footer.txt" Content-Disposition: inline; filename="message-footer.txt" Content-Transfer-Encoding: 8bit
To unsubscribe, send a email to sympa@mandrivalinux.org with this subject : unsubscribe security-announce _______________________________________________________ Want to buy your Pack or Services from Mandriva? Go to http://store.mandriva.com _______________________________________________________
------------=_1382096004-2618-8--
|
|
|
|