Login
Newsletter
Werbung

Sicherheit: Pufferüberlauf in rsync
Aktuelle Meldungen Distributionen
Name: Pufferüberlauf in rsync
ID: MDKSA-2007:166
Distribution: Mandriva
Plattformen: Mandriva Corporate 4.0, Mandriva 2007.0, Mandriva 2007.1
Datum: So, 19. August 2007, 04:31
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4091
Applikationen: rsync

Originalnachricht

This is a multi-part message in MIME format...

------------=_1187490630-7034-750


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2007:166
http://www.mandriva.com/security/
_______________________________________________________________________

Package : rsync
Date : August 18, 2007
Affected: 2007.0, 2007.1, Corporate 4.0
_______________________________________________________________________

Problem Description:

Sebastian Krahmer of the SUSE Security Team discovered an off-by-one
buffer overflow within rsync. It is not clear if this problem is
exploitable, however updates are available to correct the issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4091
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2007.0:
7b0c5424444c99181f9283f8d584820b
2007.0/i586/rsync-2.6.8-3.1mdv2007.0.i586.rpm
8422a0235e1bd6a69a5d452f461df534
2007.0/SRPMS/rsync-2.6.8-3.1mdv2007.0.src.rpm

Mandriva Linux 2007.0/X86_64:
52676839c4467ca1cd80cd7976757cea
2007.0/x86_64/rsync-2.6.8-3.1mdv2007.0.x86_64.rpm
8422a0235e1bd6a69a5d452f461df534
2007.0/SRPMS/rsync-2.6.8-3.1mdv2007.0.src.rpm

Mandriva Linux 2007.1:
915d44a76b37ec5e17b0899849e527db
2007.1/i586/rsync-2.6.9-1.1mdv2007.1.i586.rpm
38b3ca6d286049cb04c54f7f10e5186e
2007.1/SRPMS/rsync-2.6.9-1.1mdv2007.1.src.rpm

Mandriva Linux 2007.1/X86_64:
0681877f97a2d02d8bc95295626560d9
2007.1/x86_64/rsync-2.6.9-1.1mdv2007.1.x86_64.rpm
38b3ca6d286049cb04c54f7f10e5186e
2007.1/SRPMS/rsync-2.6.9-1.1mdv2007.1.src.rpm

Corporate 4.0:
d0aa26829de006aab9cc0ce237f81a96
corporate/4.0/i586/rsync-2.6.6-1.1.20060mlcs4.i586.rpm
417cd6ce0a47db43d97dfea6b098a580
corporate/4.0/SRPMS/rsync-2.6.6-1.1.20060mlcs4.src.rpm

Corporate 4.0/X86_64:
98f1f8032c050a9687e691a017162e54
corporate/4.0/x86_64/rsync-2.6.6-1.1.20060mlcs4.x86_64.rpm
417cd6ce0a47db43d97dfea6b098a580
corporate/4.0/SRPMS/rsync-2.6.6-1.1.20060mlcs4.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFGx2SqmqjQ0CJFipgRAjY+AJwIauX4dyBl6FWDsPJT259LrGgqHQCgom+8
M6tbHPJ1dRyJeipy7mmTwAg=
=WsvZ
-----END PGP SIGNATURE-----


------------=_1187490630-7034-750
Content-Type: text/plain; name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva?
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________

------------=_1187490630-7034-750--
Pro-Linux
Gewinnspiel
Neue Nachrichten
Werbung