drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Unsichere Verwendung temporärer Dateien in systemd
Name: |
Unsichere Verwendung temporärer Dateien in systemd |
|
ID: |
MDVSA-2012:030 |
|
Distribution: |
Mandriva |
|
Plattformen: |
Keine Angabe |
|
Datum: |
Fr, 16. März 2012, 23:19 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1174 |
|
Applikationen: |
systemd |
|
Originalnachricht |
This is a multi-part message in MIME format...
------------=_1331926209-2905-10
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2012:030 http://www.mandriva.com/security/ _______________________________________________________________________
Package : systemd Date : March 16, 2012 Affected: 2011. _______________________________________________________________________
Problem Description:
A vulnerability has been found and corrected in systemd: A TOCTOU race condition was found in the way the systemd-logind login manager of the systemd, a system and service manager for Linux, performed removal of particular records related with user session upon user logout. A local attacker could use this flaw to conduct symbolic link attacks, potentially leading to removal of arbitrary system file (CVE-2012-1174). The updated packages have been patched to correct this issue. _______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1174 _______________________________________________________________________
Updated Packages:
Mandriva Linux 2011: babb58c1bfed5771648536306cfbee20 2011/i586/systemd-29-8.2-mdv2011.0.i586.rpm 7ea7f957bb91d211c1c390dd805c5666 2011/i586/systemd-gtk-29-8.2-mdv2011.0.i586.rpm 37a1216151f1888d985c0a784e3a71ca 2011/i586/systemd-sysvinit-29-8.2-mdv2011.0.i586.rpm 8b1e5251cc709a5c7dc499dc34abbeec 2011/i586/systemd-units-29-8.2-mdv2011.0.i586.rpm 8b4d1dfff9b62bfa97732ea8f28dced9 2011/SRPMS/systemd-29-8.2.src.rpm
Mandriva Linux 2011/X86_64: 189b87bc469f3e803729ddd1c496ea7d 2011/x86_64/systemd-29-8.2-mdv2011.0.x86_64.rpm ec3f95ed6706b3d057afe7e62b590b0a 2011/x86_64/systemd-gtk-29-8.2-mdv2011.0.x86_64.rpm 98125c6515460472604ab76183ddf63f 2011/x86_64/systemd-sysvinit-29-8.2-mdv2011.0.x86_64.rpm 723aeadda814b44ae5abf98ab98a62b5 2011/x86_64/systemd-units-29-8.2-mdv2011.0.x86_64.rpm 8b4d1dfff9b62bfa97732ea8f28dced9 2011/SRPMS/systemd-29-8.2.src.rpm _______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com _______________________________________________________________________
Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team <security*mandriva.com> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux)
iD8DBQFPY2kwmqjQ0CJFipgRAvRRAJ9yCEw+fhFVTTAi2PnjzdstBCyT3QCgqeyU mEYlhwfBY6gEQwh93fMRc/s= =ZDaq -----END PGP SIGNATURE-----
------------=_1331926209-2905-10 Content-Type: text/plain; charset="UTF-8"; name="message-footer.txt" Content-Disposition: inline; filename="message-footer.txt" Content-Transfer-Encoding: 8bit
To unsubscribe, send a email to sympa@mandrivalinux.org with this subject : unsubscribe security-announce _______________________________________________________ Want to buy your Pack or Services from Mandriva? Go to http://www.mandrivastore.com Join the Club : http://www.mandrivaclub.com _______________________________________________________
------------=_1331926209-2905-10--
|
|
|
|