Login
Newsletter
Werbung

Sicherheit: Fehlerhafter Passwort-Hash in php-suhosin
Aktuelle Meldungen Distributionen
Name: Fehlerhafter Passwort-Hash in php-suhosin
ID: MDVSA-2011:180
Distribution: Mandriva
Plattformen: Mandriva Enterprise Server 5.0, Mandriva 2010.1, Mandriva 2011
Datum: Mo, 19. Dezember 2011, 10:26
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2483
Applikationen: php-suhosin

Originalnachricht

This is a multi-part message in MIME format...

------------=_1324285614-2333-527

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2011:180
http://www.mandriva.com/security/
_______________________________________________________________________

Package : php-suhosin
Date : November 28, 2011
Affected: 2010.1, 2011., Enterprise Server 5.0
_______________________________________________________________________

Problem Description:

A vulnerability was discovered and fixed in php-suhosin:

crypt_blowfish before 1.1, as used in suhosin does not properly
handle 8-bit characters, which makes it easier for context-dependent
attackers to determine a cleartext password by leveraging knowledge
of a password hash (CVE-2011-2483).

The updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2483
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2010.1:
d461e8204a5878c3def6a3c1af150d54
2010.1/i586/php-suhosin-0.9.32.1-0.6mdv2010.2.i586.rpm
e19262da680951dca92d1f26447c663f
2010.1/SRPMS/php-suhosin-0.9.32.1-0.6mdv2010.2.src.rpm

Mandriva Linux 2010.1/X86_64:
bb0555f1e35c39975260302b2f399041
2010.1/x86_64/php-suhosin-0.9.32.1-0.6mdv2010.2.x86_64.rpm
e19262da680951dca92d1f26447c663f
2010.1/SRPMS/php-suhosin-0.9.32.1-0.6mdv2010.2.src.rpm

Mandriva Linux 2011:
c5fbc571c0399fe39c9a688ed0aded61
2011/i586/php-suhosin-0.9.32.1-9.1-mdv2011.0.i586.rpm
c3605cc71c0909260e4dcf98e3ea851c 2011/SRPMS/php-suhosin-0.9.32.1-9.1.src.rpm

Mandriva Linux 2011/X86_64:
aa2cc255aaba77139bef400eb22a8233
2011/x86_64/php-suhosin-0.9.32.1-9.1-mdv2011.0.x86_64.rpm
c3605cc71c0909260e4dcf98e3ea851c 2011/SRPMS/php-suhosin-0.9.32.1-9.1.src.rpm

Mandriva Enterprise Server 5:
43153149701d77e234344448a8480784
mes5/i586/php-suhosin-0.9.32.1-0.6mdvmes5.2.i586.rpm
db1c4e65c03a964c38b8d6001c246a81
mes5/SRPMS/php-suhosin-0.9.32.1-0.6mdvmes5.2.src.rpm

Mandriva Enterprise Server 5/X86_64:
6a3cb09cdb742644bd37460d879f920e
mes5/x86_64/php-suhosin-0.9.32.1-0.6mdvmes5.2.x86_64.rpm
db1c4e65c03a964c38b8d6001c246a81
mes5/SRPMS/php-suhosin-0.9.32.1-0.6mdvmes5.2.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFO04y/mqjQ0CJFipgRArTIAKC3gvzBnz/ehStOPKyHccpjOvU9eQCgwGiN
foUWSPfot8HBD/jny5AYxjA=
=mvTf
-----END PGP SIGNATURE-----


------------=_1324285614-2333-527
Content-Type: text/plain; charset="UTF-8";
name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________

------------=_1324285614-2333-527--
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung