Описание
ELSA-2012-0451: rpm security update (IMPORTANT)
[4.8.0-19.1]
- Proper region tag validation on package/header read (CVE-2012-0060)
- Double-check region size against header size (CVE-2012-0061)
- Validate negated offsets too in headerVerifyInfo() (CVE-2012-0815)
Обновленные пакеты
Oracle Linux 5
Oracle Linux ia64
popt
1.10.2.3-28.0.1.el5_8
rpm
4.4.2.3-28.0.1.el5_8
rpm-apidocs
4.4.2.3-28.0.1.el5_8
rpm-build
4.4.2.3-28.0.1.el5_8
rpm-devel
4.4.2.3-28.0.1.el5_8
rpm-libs
4.4.2.3-28.0.1.el5_8
rpm-python
4.4.2.3-28.0.1.el5_8
Oracle Linux x86_64
popt
1.10.2.3-28.0.1.el5_8
rpm
4.4.2.3-28.0.1.el5_8
rpm-apidocs
4.4.2.3-28.0.1.el5_8
rpm-build
4.4.2.3-28.0.1.el5_8
rpm-devel
4.4.2.3-28.0.1.el5_8
rpm-libs
4.4.2.3-28.0.1.el5_8
rpm-python
4.4.2.3-28.0.1.el5_8
Oracle Linux i386
popt
1.10.2.3-28.0.1.el5_8
rpm
4.4.2.3-28.0.1.el5_8
rpm-apidocs
4.4.2.3-28.0.1.el5_8
rpm-build
4.4.2.3-28.0.1.el5_8
rpm-devel
4.4.2.3-28.0.1.el5_8
rpm-libs
4.4.2.3-28.0.1.el5_8
rpm-python
4.4.2.3-28.0.1.el5_8
Oracle Linux 6
Oracle Linux x86_64
rpm
4.8.0-19.el6_2.1
rpm-apidocs
4.8.0-19.el6_2.1
rpm-build
4.8.0-19.el6_2.1
rpm-cron
4.8.0-19.el6_2.1
rpm-devel
4.8.0-19.el6_2.1
rpm-libs
4.8.0-19.el6_2.1
rpm-python
4.8.0-19.el6_2.1
Oracle Linux i686
rpm
4.8.0-19.el6_2.1
rpm-apidocs
4.8.0-19.el6_2.1
rpm-build
4.8.0-19.el6_2.1
rpm-cron
4.8.0-19.el6_2.1
rpm-devel
4.8.0-19.el6_2.1
rpm-libs
4.8.0-19.el6_2.1
rpm-python
4.8.0-19.el6_2.1
Связанные CVE
Связанные уязвимости
Уязвимости операционной системы Gentoo Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.
The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.
The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large region size in a package header.
The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not ...