Login
Newsletter
Werbung

Sicherheit: Denial of Service in gpsd
Aktuelle Meldungen Distributionen
Name: Denial of Service in gpsd
ID: FEDORA-2013-7305
Distribution: Fedora
Plattformen: Fedora 17
Datum: Mi, 29. Mai 2013, 08:33
Referenzen: Keine Angabe
Applikationen: gpsd

Originalnachricht

Name        : gpsd
Product : Fedora 17
Version : 3.9
Release : 1.fc17
URL : http://catb.org/gpsd/
Summary : Service daemon for mediating access to a GPS
Description :
gpsd is a service daemon that mediates access to a GPS sensor
connected to the host computer by serial or USB interface, making its
data on the location/course/velocity of the sensor available to be
queried on TCP port 2947 of the host computer. With gpsd, multiple
GPS client applications (such as navigational and wardriving software)
can share access to a GPS without contention or loss of data. Also,
gpsd responds to queries with a format that is substantially easier to
parse than NMEA 0183.

-------------------------------------------------------------------------------
-
Update Information:

This is an update to the latest upstream release, which fixes a denial of
service flaw found in the way AIS driver packet parser processed certain malformed packets.
-------------------------------------------------------------------------------
-
ChangeLog:

* Thu May 2 2013 Miroslav Lichvar <mlichvar@redhat.com> - 3.9-1
- update to 3.9 (#958717)
* Mon Apr 30 2012 Miroslav Lichvar <mlichvar@redhat.com> - 3.5-1
- update to 3.5
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #958717 - gpsd: DoS (packet parser crash) in the NMEA0183 driver
when processing malformed packet
https://bugzilla.redhat.com/show_bug.cgi?id=958717
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program. Use
su -c 'yum update gpsd' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung