Login
Newsletter
Werbung

Sicherheit: Mangelnde Rechteprüfung in apache-commons-daemon
Aktuelle Meldungen Distributionen
Name: Mangelnde Rechteprüfung in apache-commons-daemon
ID: FEDORA-2011-10880
Distribution: Fedora
Plattformen: Fedora 16
Datum: Di, 23. August 2011, 23:09
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2729
Applikationen: apache-commons-daemon

Originalnachricht

-------------------------------------------------------------------------------
-
Fedora Update Notification
FEDORA-2011-10880
2011-08-15 20:21:33
-------------------------------------------------------------------------------
-

Name : apache-commons-daemon
Product : Fedora 16
Version : 1.0.7
Release : 1.fc16
URL : http://commons.apache.org/daemon
Summary : Defines API to support an alternative invocation mechanism
Description :
The scope of this package is to define an API in line with the current
Java Platform APIs to support an alternative invocation mechanism
which could be used instead of the public static void main(String[])
method. This specification covers the behavior and life cycle of what
we define as Java daemons, or, in other words, non interactive
Java applications.

-------------------------------------------------------------------------------
-
Update Information:

This update fixes several bugs and also security issue CVE-2011-2729.

Users are encouraged to update as soon as possible.
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #730400 - CVE-2011-2729 jakarta-commons-daemon: jsvc does not drop
capabilities allowing access to files and directories owned by the superuser
https://bugzilla.redhat.com/show_bug.cgi?id=730400
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update apache-commons-daemon' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung