[Full-disclosure] [ MDVSA-2013:093 ] ircd-hybrid
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:093 http://www.mandriva.com/en/support/security/ ___ Package : ircd-hybrid Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated ircd-hybrid packages fix security vulnerability: Bob Nomnomnom reported a Denial of Service vulnerability in IRCD-Hybrid, an Internet Relay Chat server. A remote attacker may use an error in the masks validation and crash the server (CVE-2013-0238). Please note that due to the previously suboptimal nature of the sysvinit script, systemd systems would not correctly detect the daemon process as running and thus could not stop the service. As a result, you may have to manually kill the process and start the service after upgrading (i.e. killall ircd-hybrid; systemctl start ircd-hybrid.service). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0238 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0055 ___ Updated Packages: Mandriva Business Server 1/X86_64: ba5d07fc4a485b665995289da05d2550 mbs1/x86_64/ircd-hybrid-7.2.3-11.1.mbs1.x86_64.rpm 56f380db80e139935111062c46c6f944 mbs1/x86_64/ircd-hybrid-devel-7.2.3-11.1.mbs1.x86_64.rpm 85eeac94496a539034464d738e7a26b9 mbs1/SRPMS/ircd-hybrid-7.2.3-11.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZQgkmqjQ0CJFipgRAmAVAKCAE9zcAR3HonSi9xWrncg6KvfC5ACfZBqe on0eOl8fOPYuLYZ+h6XIhSg= =fX7M -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:094 ] jakarta-poi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:094 http://www.mandriva.com/en/support/security/ ___ Package : jakarta-poi Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated jakarta-poi packages fix security vulnerability: It was discovered that Apache POI, a Java implementation of the Microsoft Office file formats, would allocate arbitrary amounts of memory when processing crafted documents. This could impact the stability of the Java virtual machine (CVE-2012-0213). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0213 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0044 ___ Updated Packages: Mandriva Business Server 1/X86_64: 1543b16e05cc5159bc06de733b401428 mbs1/x86_64/jakarta-poi-3.1-0.0.5.1.mbs1.noarch.rpm cd9cb91ac3c148afc695a86ef6ca8a19 mbs1/x86_64/jakarta-poi-javadoc-3.1-0.0.5.1.mbs1.noarch.rpm a342501f233bb08f77f2fd4d3803e25d mbs1/x86_64/jakarta-poi-manual-3.1-0.0.5.1.mbs1.noarch.rpm 68666dc3187d8c1da5f35365f36efdcb mbs1/SRPMS/jakarta-poi-3.1-0.0.5.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZQxLmqjQ0CJFipgRAg96AJ0ZUHYDLYzFQ1XJbiJuYkGIUECrWACghHXF yYtWfB1/NDcRhfxQR0dRUi8= =v4Ls -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:095 ] java-1.7.0-openjdk
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:095 http://www.mandriva.com/en/support/security/ ___ Package : java-1.7.0-openjdk Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated java-1.7.0-openjdk packages fix security vulnerabilities: Two improper permission check issues were discovered in the reflection API in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions (CVE-2012-3174, CVE-2013-0422). Multiple improper permission check issues were discovered in the AWT, CORBA, JMX, Libraries, and Beans components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions (CVE-2013-0442, CVE-2013-0445, CVE-2013-0441, CVE-2013-1475, CVE-2013-1476, CVE-2013-0429, CVE-2013-0450, CVE-2013-0425, CVE-2013-0426, CVE-2013-0428, CVE-2013-0444). Multiple flaws were found in the way image parsers in the 2D and AWT components handled image raster parameters. A specially-crafted image could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with the virtual machine privileges (CVE-2013-1478, CVE-2013-1480). A flaw was found in the AWT component's clipboard handling code. An untrusted Java application or applet could use this flaw to access clipboard data, bypassing Java sandbox restrictions (CVE-2013-0432). The default Java security properties configuration did not restrict access to certain com.sun.xml.internal packages. An untrusted Java application or applet could use this flaw to access information, bypassing certain Java sandbox restrictions. This update lists the whole package as restricted (CVE-2013-0435). Multiple improper permission check issues were discovered in the JMX, Libraries, Networking, and JAXP components. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions (CVE-2013-0431, CVE-2013-0427, CVE-2013-0433, CVE-2013-0434). It was discovered that the RMI component's CGIHandler class used user inputs in error messages without any sanitization. An attacker could use this flaw to perform a cross-site scripting (XSS) attack (CVE-2013-0424). It was discovered that the SSL/TLS implementation in the JSSE component did not properly enforce handshake message ordering, allowing an unlimited number of handshake restarts. A remote attacker could use this flaw to make an SSL/TLS server using JSSE consume an excessive amount of CPU by continuously restarting the handshake (CVE-2013-0440). It was discovered that the JSSE component did not properly validate Diffie-Hellman public keys. An SSL/TLS client could possibly use this flaw to perform a small subgroup attack (CVE-2013-0443). Multiple improper permission check issues were discovered in the JMX and Libraries components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions (CVE-2013-1486, CVE-2013-1484). An improper permission check issue was discovered in the Libraries component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions (CVE-2013-1485). It was discovered that OpenJDK leaked timing information when decrypting TLS/SSL protocol encrypted records when CBC-mode cipher suites were used. A remote attacker could possibly use this flaw to retrieve plain text from the encrypted packets by using a TLS/SSL server as a padding oracle (CVE-2013-0169). An integer overflow flaw was found in the way the 2D component handled certain sample model instances. A specially-crafted sample model instance could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges (CVE-2013-0809). It was discovered that the 2D component did not properly reject certain malformed images. Specially-crafted raster parameters could cause Java Virtual Machine memory corruption and, possibly, lead to arbitrary code execution with virtual machine privileges (CVE-2013-1493). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3174 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0169 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0422 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0424 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0425 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0426 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0427 http://cve.mitre.org/cgi-bin/cvename.cgi
[Full-disclosure] [ MDVSA-2013:096 ] keepalived
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:096 http://www.mandriva.com/en/support/security/ ___ Package : keepalived Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated keepalived package fixes security vulnerability: The pidfile_write function in core/pidfile.c in keepalived 1.2.2 and earlier uses 0666 permissions for the (1) keepalived.pid, (2) checkers.pid, and (3) vrrp.pid files in /var/run/, which allows local users to kill arbitrary processes by writing a PID to one of these files (CVE-2011-1784). A security issue due to syslog being used inside of sighandlers has also been fixed. Finally, keepalived was failing to load the ip_vs kernel module because of an incorrect modprobe option. This has also been corrected. ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1784 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0188 ___ Updated Packages: Mandriva Business Server 1/X86_64: 43f8ed4c37d9fe36333144910b156756 mbs1/x86_64/keepalived-1.2.2-2.1.mbs1.x86_64.rpm 469ea55f6172a4bd36202dcd33203765 mbs1/SRPMS/keepalived-1.2.2-2.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD4DBQFRZRCCmqjQ0CJFipgRAnXcAJsEPq8H42diIeDzfSLbYTBbIcVThQCYoPUr 0WT3U+EaOSqe849N5BxaYQ== =KIH+ -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:097 ] libotr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:097 http://www.mandriva.com/en/support/security/ ___ Package : libotr Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: A vulnerability was found and corrected in libotr: Just Ferguson discovered that libotr, an off-the-record (OTR) messaging library, can be forced to perform zero-length allocations for heap buffers that are used in base64 decoding routines. An attacker can exploit this flaw by sending crafted messages to an application that is using libotr to perform denial of service attacks or potentially execute arbitrary code (CVE-2012-3461). The updated packages have been patched to correct this issue. ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3461 ___ Updated Packages: Mandriva Business Server 1/X86_64: d2d74c963e8d28f640a73a1fd2250880 mbs1/x86_64/lib64otr2-3.2.0-6.1.mbs1.x86_64.rpm 02ba68747b2e3e7d5ba656a5b568ba2a mbs1/x86_64/lib64otr-devel-3.2.0-6.1.mbs1.x86_64.rpm 67bd7de29c7138e79c475898a58ccd98 mbs1/x86_64/libotr-utils-3.2.0-6.1.mbs1.x86_64.rpm c429f649c06662ae2067945e1097c414 mbs1/SRPMS/libotr-3.2.0-6.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZRKCmqjQ0CJFipgRAkwIAJ9AS7ndBW5RwwzAttgM41XwFCFAwACdHyCi bJFE1tlYRDs45E6qaLnoAdM= =7P7K -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:098 ] libupnp
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:098 http://www.mandriva.com/en/support/security/ ___ Package : libupnp Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated libupnp packages fix security vulnerabilities: The Portable SDK for UPnP Devices libupnp library contains multiple buffer overflow vulnerabilities. Devices that use libupnp may also accept UPnP queries over the WAN interface, therefore exposing the vulnerabilities to the internet (CVE-2012-5958, CVE-2012-5959, CVE-2012-5960, CVE-2012-5961, CVE-2012-5962, CVE-2012-5963, CVE-2012-5964, CVE-2012-5965). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5958 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5959 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5960 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5961 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5962 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5963 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5964 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5965 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0037 ___ Updated Packages: Mandriva Business Server 1/X86_64: e1a84a18b2e770dbce77c11d0155a1f9 mbs1/x86_64/lib64ixml2-1.6.15-2.1.mbs1.x86_64.rpm e1d530a001d425d49eddc2ec2dc999d5 mbs1/x86_64/lib64threadutil6-1.6.15-2.1.mbs1.x86_64.rpm 17c487876aaac30cf97b9ff616b90bf7 mbs1/x86_64/lib64upnp6-1.6.15-2.1.mbs1.x86_64.rpm 685671dfa94ec5145568712ff5d805cd mbs1/x86_64/lib64upnp-devel-1.6.15-2.1.mbs1.x86_64.rpm 2416afd16222310951a75ae68083e38c mbs1/SRPMS/libupnp-1.6.15-2.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZRMSmqjQ0CJFipgRAq+CAKDy9zvv7WPwoYY42+BtKeHYZ7XqDQCePsx4 IsvYihwpTeTREw4cWkln/vA= =Qz3A -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:099 ] libytnef
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:099 http://www.mandriva.com/en/support/security/ ___ Package : libytnef Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated libytnef package fixes security vulnerability: Function DecompressRTF() in libytnef 1.5 leads to a buffer overflow on certain TNEF files (presumably, on files, generated by some recent versions of MS software). ___ References: https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0201 ___ Updated Packages: Mandriva Business Server 1/X86_64: 32e01fd30340a009a309507c32668445 mbs1/x86_64/lib64ytnef0-1.5-6.1.mbs1.x86_64.rpm 1050d21a527e7a99dcfc04edeb2d4f5e mbs1/x86_64/lib64ytnef-devel-1.5-6.1.mbs1.x86_64.rpm 5d72fa442c33cc9d69e0377cf51237e2 mbs1/SRPMS/libytnef-1.5-6.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZRRdmqjQ0CJFipgRAkuIAJwL2zu8QseiToHa6SIorsAM/mrbTgCgqgmk GiflVu8+JRXDDlKyaEHwEU8= =lCsV -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:100 ] lighttpd
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:100 http://www.mandriva.com/en/support/security/ ___ Package : lighttpd Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: The http_request_split_value function in request.c in lighttpd before 1.4.32 allows remote attackers to cause a denial of service (infinite loop) via a request with a header containing an empty token, as demonstrated using the Connection: TE,,Keep-Alive header (CVE-2012-5533). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5533 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0345 ___ Updated Packages: Mandriva Business Server 1/X86_64: 1f9672e603a521ef9700c93988e78d8a mbs1/x86_64/lighttpd-1.4.30-6.1.mbs1.x86_64.rpm 0bf593384f0eae5b5da53534eb4a2dc4 mbs1/x86_64/lighttpd-mod_auth-1.4.30-6.1.mbs1.x86_64.rpm 027debf6342d1f45a9757ac1a442937d mbs1/x86_64/lighttpd-mod_cml-1.4.30-6.1.mbs1.x86_64.rpm a1364305e91d876cb8a053ed82a8e965 mbs1/x86_64/lighttpd-mod_compress-1.4.30-6.1.mbs1.x86_64.rpm d015e5c8d57800b306cd4ad5cde9b3f5 mbs1/x86_64/lighttpd-mod_magnet-1.4.30-6.1.mbs1.x86_64.rpm d1b1796113f1e852ddc36694ee8b5e76 mbs1/x86_64/lighttpd-mod_mysql_vhost-1.4.30-6.1.mbs1.x86_64.rpm 76399d4981fb67e66de73040afccd47f mbs1/x86_64/lighttpd-mod_trigger_b4_dl-1.4.30-6.1.mbs1.x86_64.rpm 993e7c600ff357af50bbb7a94ee8bc5a mbs1/x86_64/lighttpd-mod_webdav-1.4.30-6.1.mbs1.x86_64.rpm 83adc393b5d45412afe0b1bcf6de78ef mbs1/SRPMS/lighttpd-1.4.30-6.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZRTYmqjQ0CJFipgRAq11AKDZi9q1LqcqeA6wE5kCJquGuU1T3ACfRb6Z DjN2S3+3ggGUh+FgZZnCMJ4= =Y6wj -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:101 ] lynx
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:101 http://www.mandriva.com/en/support/security/ ___ Package : lynx Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated lynx package fixes security vulnerability: Lynx does not verify that the server's certificate is signed by a trusted certification authority, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate, related to improper use of a certain GnuTLS function (CVE-2012-5821). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5821 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0351 ___ Updated Packages: Mandriva Business Server 1/X86_64: 777f25fe8b425d1385af79891e7c0447 mbs1/x86_64/lynx-2.8.7-5.1.mbs1.x86_64.rpm 94b3428d676786e79c7a636dd7ee4e55 mbs1/SRPMS/lynx-2.8.7-5.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZRVImqjQ0CJFipgRAnhUAJ9f1z5xakbIIqQDPAIls+PPWshN2gCfRk/Y yQt2avmt+JhDF3c8wsDnepc= =FGfl -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:102 ] mariadb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:102 http://www.mandriva.com/en/support/security/ ___ Package : mariadb Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated mariadb packages includes fixes for the following security vulnerabilities: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.26 and earlier allows remote attackers to affect integrity and availability, related to MySQL Client (CVE-2012-3147). Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.64 and earlier, and 5.5.26 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Protocol (CVE-2012-3158). Multiple SQL injection vulnerabilities in the replication code in Oracle MySQL possibly before 5.5.29, and MariaDB 5.1.x through 5.1.62, 5.2.x through 5.2.12, 5.3.x through 5.3.7, and 5.5.x through 5.5.25, allow remote authenticated users to execute arbitrary SQL commands via vectors related to the binary log. NOTE: as of 20130116, Oracle has not commented on claims from a downstream vendor that the fix in MySQL 5.5.29 is incomplete (CVE-2012-4414). Stack-based buffer overflow in the acl_get function in Oracle MySQL 5.5.19 and other versions through 5.5.28, and 5.1.53 and other versions through 5.1.66, and MariaDB 5.5.2.x before 5.5.28a, 5.3.x before 5.3.11, 5.2.x before 5.2.13 and 5.1.x before 5.1.66, allows remote authenticated users to execute arbitrary code via a long argument to the GRANT FILE command (CVE-2012-5611). A buffer overflow that can cause a server crash or arbitrary code execution (a variant of CVE-2012-5611) Heap-based buffer overflow in Oracle MySQL 5.5.19 and other versions through 5.5.28, and MariaDB 5.5.28a and possibly other versions, allows remote authenticated users to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code, as demonstrated using certain variations of the (1) USE, (2) SHOW TABLES, (3) DESCRIBE, (4) SHOW FIELDS FROM, (5) SHOW COLUMNS FROM, (6) SHOW INDEX FROM, (7) CREATE TABLE, (8) DROP TABLE, (9) ALTER TABLE, (10) DELETE FROM, (11) UPDATE, and (12) SET PASSWORD commands (CVE-2012-5612). MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a, 5.3.11, 5.2.13, 5.1.66, and possibly other versions, generates different error messages with different time delays depending on whether a user name exists, which allows remote attackers to enumerate valid usernames (CVE-2012-5615). Be advised that for CVE-2012-5615 to be completely closed, it's recommended to remove any anonymous logins. Previously, such a user without access rights was added by default. A vulnerability was found in the handling of password salt values in MySQL. When a user logs into MySQL a salt value is generated that is then used to prevent password guessing attacks (since the salt value must be known in order to send a password). This salt value is created at the start of a session and used for the entire session, once authenticated an attacker can use the MySQL change_user command to attempt to login as a different, as the salt value is known a password guessing attack will be much more efficient (CVE-2012-5627). in addition it fixes MDEV-4029 and rpl.rpl_mdev382 test from mariadb-bench, and a problem preventing the feedback plugin from working has been corrected. ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3147 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3158 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4414 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5611 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5612 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5615 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5627 https://wiki.mageia.org/en/Support/Advisories/MGAA-2012-0135 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0244 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0341 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0349 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0019 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0046 ___ Updated Packages: Mandriva Business Server 1/X86_64: 209fc8930bb829c3a4711086c02bb49d mbs1/x86_64/lib64mariadb18-5.5.25-1.1.mbs1.x86_64.rpm 566959cfc01bac6db75cfd9b9ae49502 mbs1/x86_64/lib64mariadb-devel-5.5.25-1.1.mbs1.x86_64.rpm 75fd6b4a27fb22416e40fbea1dbad0d6 mbs1/x86_64/lib64
[Full-disclosure] [ MDVSA-2013:103 ] mesa
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:103 http://www.mandriva.com/en/support/security/ ___ Package : mesa Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated mesa packages fix security vulnerability: The glsl shaders are vulnerable to a buffer overrun in parcel_out_uniform_storage::visit_field. When too many uniforms are used, the error will now be caught in check_resources (src/glsl/linker.cpp) (CVE-2012-2864). Additionally, Mesa has been updated to 8.0.4, fixing several bugs. ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2864 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264 ___ Updated Packages: Mandriva Business Server 1/X86_64: ddd7f11666cd9228f779fa74d2a3b913 mbs1/x86_64/lib64dri-drivers-8.0.4-1.mbs1.x86_64.rpm 605fadbb4940d2911231302e77bc1a3e mbs1/x86_64/lib64gbm1-8.0.4-1.mbs1.x86_64.rpm 346f755585cafcc134c154a21d4d7bdd mbs1/x86_64/lib64gbm1-devel-8.0.4-1.mbs1.x86_64.rpm 36d15a0261c0d03f82bf4856d683900f mbs1/x86_64/lib64glapi0-8.0.4-1.mbs1.x86_64.rpm bab03d93fa49d16f391f69b4165ccfc7 mbs1/x86_64/lib64glapi0-devel-8.0.4-1.mbs1.x86_64.rpm b3e750795674443d0d0cc13014f3829f mbs1/x86_64/lib64mesaegl1-8.0.4-1.mbs1.x86_64.rpm 795c535bba6d27dad7b818799471a5ee mbs1/x86_64/lib64mesaegl1-devel-8.0.4-1.mbs1.x86_64.rpm bfed4a50ba04bc36d95860afaefbc927 mbs1/x86_64/lib64mesagl1-8.0.4-1.mbs1.x86_64.rpm d938e7d97178db09d57c7869a2c416ba mbs1/x86_64/lib64mesagl1-devel-8.0.4-1.mbs1.x86_64.rpm 35421f0c0da617decbde02ca8b5f2df5 mbs1/x86_64/lib64mesaglesv1_1-8.0.4-1.mbs1.x86_64.rpm 4457aaf24a8c006f22bf16c73d7b6cbe mbs1/x86_64/lib64mesaglesv1_1-devel-8.0.4-1.mbs1.x86_64.rpm 7507b996f57f13ee6c953ea8563cca00 mbs1/x86_64/lib64mesaglesv2_2-8.0.4-1.mbs1.x86_64.rpm 63057e38a81caf6423f7c5e8a756b6bb mbs1/x86_64/lib64mesaglesv2_2-devel-8.0.4-1.mbs1.x86_64.rpm efec37560ee8b44d336112196cc40583 mbs1/x86_64/lib64mesaglu1-8.0.4-1.mbs1.x86_64.rpm 14f595184581c078aef1b1b9af4b952b mbs1/x86_64/lib64mesaglu1-devel-8.0.4-1.mbs1.x86_64.rpm bda454a325e9447d06407f09b796c70b mbs1/x86_64/lib64mesaopenvg1-8.0.4-1.mbs1.x86_64.rpm 42203d6567254c09d5b513d29afc3c78 mbs1/x86_64/lib64mesaopenvg1-devel-8.0.4-1.mbs1.x86_64.rpm ba5408712f31f8ad72214069097ff4a5 mbs1/x86_64/lib64wayland-egl1-8.0.4-1.mbs1.x86_64.rpm e1f6c2a93574af1f49ace95c0eaf5fee mbs1/x86_64/lib64wayland-egl1-devel-8.0.4-1.mbs1.x86_64.rpm 01c4ab83b92f06f295530daf2dea47b3 mbs1/x86_64/mesa-8.0.4-1.mbs1.x86_64.rpm c38819f524ce848b78c43043d27e561a mbs1/x86_64/mesa-common-devel-8.0.4-1.mbs1.x86_64.rpm 7edddb6da33c4be3d06aec29b1aad456 mbs1/SRPMS/mesa-8.0.4-1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZRwGmqjQ0CJFipgRAq3pAJ4/NkJME0MgNq/NjsI1pwAevc8gBACcDSxw vmFaJLBJ4JEd9m7epoI/Lt4= =BN6E -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:104 ] mosh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:104 http://www.mandriva.com/en/support/security/ ___ Package : mosh Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated mosh package fixes security vulnerability: Mosh versions 1.2 and earlier allow an application to cause the mosh-server to consume large amounts of CPU time with a short ANSI escape sequence. In addition, a malicious mosh-server can cause the mosh-client to consume large amounts of CPU time with a short ANSI escape sequence. This arises because there was no limit on the value of the repeat parameter in some ANSI escape sequences, so even large and nonsensical values would be interpreted by Mosh's terminal emulator (CVE-2012-2385). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2385 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0182 ___ Updated Packages: Mandriva Business Server 1/X86_64: 8dbc4e336eabdac0478ca8d9a6d9f407 mbs1/x86_64/mosh-1.1.3-2.1.mbs1.x86_64.rpm 2e83953c0a0358c7922e80eef8fe5b3c mbs1/SRPMS/mosh-1.1.3-2.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZR1VmqjQ0CJFipgRApBSAJ4iiorMy9OmoNjM9J62fYCFBHwgKgCfZVD3 Gq0AFeGBulq0iak5MXuABKE= =/mMc -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:105 ] munin
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:105 http://www.mandriva.com/en/support/security/ ___ Package : munin Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated munin packages fix security vulnerabilities: The qmailscan plugin for Munin before 2.0 rc6 allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names (CVE-2012-2103). Munin before 2.0.6 stores plugin state files that run as root in the same group-writable directory as non-root plugins, which allows local users to execute arbitrary code by replacing a state file, as demonstrated using the smart_ plugin (CVE-2012-3512). munin-cgi-graph in Munin before 2.0.6, when running as a CGI module under Apache, allows remote attackers to load new configurations and create files in arbitrary directories via the logdir command (CVE-2012-3513). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2103 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3512 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3513 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0358 ___ Updated Packages: Mandriva Business Server 1/X86_64: 4c7fe485c14d7505fad9fd55a52b1149 mbs1/x86_64/munin-2.0-0.rc5.3.1.mbs1.noarch.rpm 99d2b05b2bfa1dab1367488c10c1f3c0 mbs1/x86_64/munin-master-2.0-0.rc5.3.1.mbs1.noarch.rpm ecbb1b19cf63ab8e219cb65eb8ee74a8 mbs1/x86_64/munin-node-2.0-0.rc5.3.1.mbs1.noarch.rpm 2df651f2e31b3b65bf6e7af96898ba91 mbs1/SRPMS/munin-2.0-0.rc5.3.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZR4BmqjQ0CJFipgRAm4gAJ0aWeoB/9TMZap1DbrlQ2EfOrdSwwCeJQjl YIZHotFWnIQ03h0gNtsZNQs= =w3u3 -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:106 ] nss-pam-ldapd
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:106 http://www.mandriva.com/en/support/security/ ___ Package : nss-pam-ldapd Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated nss-pam-ldapd packages fixes the following security vulnerability: Garth Mollett discovered that a file descriptor overflow issue in the use of FD_SET() in nss-pam-ldapd can lead to a stack-based buffer overflow. An attacker could, under some circumstances, use this flaw to cause a process that has the NSS or PAM module loaded to crash or potentially execute arbitrary code. The issue can be triggered in a network daemon by opening a large number of connections and forcing a name lookup. This would result in a crash and possibly remote code execution. This issue may also allow local privilege escalation if a suid program does name lookups and doesn't close file descriptors inherited from the parent process (CVE-2013-0288). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0288 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0071 ___ Updated Packages: Mandriva Business Server 1/X86_64: cbf543dd3fef9f555cff3437e2a38639 mbs1/x86_64/nss-pam-ldapd-0.8.6-4.1.mbs1.x86_64.rpm 4e6bf408943ff751ed7655b661bec550 mbs1/SRPMS/nss-pam-ldapd-0.8.6-4.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZSHrmqjQ0CJFipgRAgbfAKCSr8sXuhi6fqHiGAPnN1bsPifwpwCfSfpy bdicQKUhJy3d51gHAEHQZHA= =tafI -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:107 ] ocaml-xml-light
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:107 http://www.mandriva.com/en/support/security/ ___ Package : ocaml-xml-light Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated ocaml-xml-light packages fix security vulnerability: OCaml Xml-Light Library before r234 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via unspecified vectors (CVE-2012-3514). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3514 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0266 ___ Updated Packages: Mandriva Business Server 1/X86_64: 3666aa769d5c8d100f6195e28e98a83e mbs1/x86_64/ocaml-xml-light-2.2-20.1.mbs1.x86_64.rpm 69c38e365310f6ce2901e1801ed692df mbs1/x86_64/ocaml-xml-light-devel-2.2-20.1.mbs1.x86_64.rpm 4bf9b19e6001c9c5d36c23b5308538dc mbs1/SRPMS/ocaml-xml-light-2.2-20.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZSRPmqjQ0CJFipgRAiLCAKCxMI6K1zrtLm1srcMawIiizPg9HACg3rSJ uEh2Z1aaLTec2mtnv7/kRqA= =WCFE -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:108 ] openconnect
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:108 http://www.mandriva.com/en/support/security/ ___ Package : openconnect Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated openconnect packages fix security vulnerability: A stack-based buffer overflow flaw was found in the way OpenConnect, a client for Cisco's AnyConnect VPN, performed processing of certain host names, paths, or cookie lists, received from the VPN gateway. A remote VPN gateway could provide a specially-crafted host name, path or cookie list that, when processed by the openconnect client would lead to openconnect executable crash (CVE-2012-6128). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6128 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0060 ___ Updated Packages: Mandriva Business Server 1/X86_64: ff86644272d60d629d1ddce8738bf6ac mbs1/x86_64/lib64openconnect1-3.15-3.1.mbs1.x86_64.rpm f713d0e0f0793fb90c2f1491179b8903 mbs1/x86_64/lib64openconnect-devel-3.15-3.1.mbs1.x86_64.rpm dd22e9a5c295d8d07ff99725910a4b12 mbs1/x86_64/openconnect-3.15-3.1.mbs1.x86_64.rpm a03cb1e1e35fa2e73b0f6547dfa935b8 mbs1/SRPMS/openconnect-3.15-3.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZSTsmqjQ0CJFipgRAv9IAJ0dKQQgiutbsYBeUs5GpXsSUSKvHACcDev7 ZHcyTsaTi7poowVZpozpLTw= =8z+/ -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:109 ] open-iscsi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:109 http://www.mandriva.com/en/support/security/ ___ Package : open-iscsi Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated open-iscsi package fixes security vulnerability: Colin Watson discovered that iscsi_discovery in Open-iSCSI did not safely create temporary files. A local attacker could exploit this to overwrite arbitrary files with root privileges (CVE-2009-1297). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1297 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0241 ___ Updated Packages: Mandriva Business Server 1/X86_64: 6587dcd4d9243029b97b0dc017d727a5 mbs1/x86_64/open-iscsi-2.0-871.5.1.mbs1.x86_64.rpm fcf11e3ec34330d077938057d678fcc5 mbs1/SRPMS/open-iscsi-2.0-871.5.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZShmmqjQ0CJFipgRAu0JAKCXvtAdd+By17RBL5fFOHHL78KUvQCg1Prb dX16WoglqrXR3eK3qn4hiHQ= =WYRJ -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:110 ] openjpeg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:110 http://www.mandriva.com/en/support/security/ ___ Package : openjpeg Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated openjpeg packages fix security vulnerability: An out-of heap-based buffer bounds read and write flaw, leading to invalid free, was found in the way a tile coder / decoder (TCD) implementation of OpenJPEG, an open-source JPEG 2000 codec written in C language, performed releasing of previously allocated memory for the TCD encoder handle by processing certain Gray16 TIFF images. A remote attacker could provide a specially-crafted TIFF image file, which once converted into the JPEG 2000 file format with an application linked against OpenJPEG (such as 'image_to_j2k'), would lead to that application crash, or, potentially arbitrary code execution with the privileges of the user running the application (CVE-2009-5030). An input validation flaw, leading to a heap-based buffer overflow, was found in the way OpenJPEG handled the tile number and size in an image tile header. A remote attacker could provide a specially-crafted image file that, when decoded using an application linked against OpenJPEG, would cause the application to crash or, potentially, execute arbitrary code with the privileges of the user running the application (CVE-2012-3358). It was found that OpenJPEG failed to sanity-check an image header field before using it. A remote attacker could provide a specially-crafted image file that could cause an application linked against OpenJPEG to crash or, possibly, execute arbitrary code (CVE-2012-3535). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-5030 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3358 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3535 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0152 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0166 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0274 ___ Updated Packages: Mandriva Business Server 1/X86_64: 59e2ca4e2d6eae2f1b6dfdc7b5bf7983 mbs1/x86_64/lib64openjpeg1-1.5.0-2.1.mbs1.x86_64.rpm 498834fe8ac2b8355402f0ded1470eda mbs1/x86_64/lib64openjpeg-devel-1.5.0-2.1.mbs1.x86_64.rpm 62fc2e8ee57f8c420254dc7cf12618ff mbs1/x86_64/openjpeg-1.5.0-2.1.mbs1.x86_64.rpm d0f2aa59be4a6abc5aca46a048735599 mbs1/SRPMS/openjpeg-1.5.0-2.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZSmDmqjQ0CJFipgRAlEFAJ4xR4XMz2T5wCE7cK8PkA0uepJB4ACeLe6F LVoBTMKkC4aP4DWUpQqp/Qs= =PXwv -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:111 ] openslp
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:111 http://www.mandriva.com/en/support/security/ ___ Package : openslp Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated openslp packages fix security vulnerability: The extension parser in slp_v2message.c in OpenSLP 1.2.1 allows remote attackers to cause a denial of service (infinite loop) via a packet with a next extension offset that references this extension or a previous extension (CVE-2010-3609). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3609 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0227 ___ Updated Packages: Mandriva Business Server 1/X86_64: e863b5cd954a8e357b4d302080bcf2b3 mbs1/x86_64/lib64openslp1-1.2.1-12.1.mbs1.x86_64.rpm bf3fb47883d845a0db1e860b9974f990 mbs1/x86_64/lib64openslp1-devel-1.2.1-12.1.mbs1.x86_64.rpm 2773736d0111632d0406a3a13ab6b14b mbs1/x86_64/openslp-1.2.1-12.1.mbs1.x86_64.rpm 9e8e79a76684f70dffb8817762ce6193 mbs1/SRPMS/openslp-1.2.1-12.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZSrGmqjQ0CJFipgRAunJAJ9Cwn8n/YTUliLbY08a3ng1DSVVpQCgqnyz 9/3I5O/CnIYH0e3TzMv5aBY= =H4YC -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:112 ] otrs
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:112 http://www.mandriva.com/en/support/security/ ___ Package : otrs Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated otrs package fixes security vulnerabilities: Multiple cross-site scripting (XSS) vulnerabilities in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.13, 3.0.x before 3.0.15, and 3.1.x before 3.1.9, and OTRS ITSM 2.1.x before 2.1.5, 3.0.x before 3.0.6, and 3.1.x before 3.1.6, allow remote attackers to inject arbitrary web script or HTML via an e-mail message body with (1) a Cascading Style Sheets (CSS) expression property in the STYLE attribute of an arbitrary element or (2) UTF-7 text in an HTTP-EQUIV=CONTENT-TYPE META element (CVE-2012-2582). Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.14, 3.0.x before 3.0.16, and 3.1.x before 3.1.10, when Firefox or Opera is used, allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with nested HTML tags (CVE-2012-4600). Cross-site scripting (XSS) vulnerability in Open Ticket Request System (OTRS) Help Desk 2.4.x before 2.4.15, 3.0.x before 3.0.17, and 3.1.x before 3.1.11 allows remote attackers to inject arbitrary web script or HTML via an e-mail message body with whitespace before a javascript: URL in the SRC attribute of an element, as demonstrated by an IFRAME element (CVE-2012-4751). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2582 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4600 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4751 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0322 ___ Updated Packages: Mandriva Business Server 1/X86_64: 972c63cf977db8c7e01be8d6733b6fa7 mbs1/x86_64/otrs-3.1.11-1.mbs1.noarch.rpm 3cf42ac9d8ff07b6b7fe83d0d0c9d983 mbs1/SRPMS/otrs-3.1.11-1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZS59mqjQ0CJFipgRAsFLAJ43nOt+DFthXHnsqQKMx9KQ+qnSrgCglcgZ wcecApmJODgcu6BPfiPnU4k= =RTOh -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] DoS vulnerability in Internet Explorer (access violation)
Hello list!
I want to warn you about Denial of Service vulnerabilities in Internet
Explorer. This is access violation.
I've made the exploit and tested this vulnerability at 13.02.2013. This
exploit is based on video by TheSecuritylab for IE7. As I've tested, it also
works in IE6 and IE8.
-
Affected products:
-
Vulnerable are Internet Explorer 6 (6.0.2900.2180), Internet Explorer 7
(7.00.5730.13), Internet Explorer 8.0 (8.00.6001.18702) and previous
versions of these browsers. IE9 is not affected (Microsoft fixed this hole).
--
Details:
--
Denial of Service (WASC-10):
Browser crashes at recursive including of css-file. It happens due to access
violation (aka segmentation fault) in iexplore.exe. Also it's important for
the crash that css-file has short name. For exploit to work in IE6 it's
needed to refresh the page.
PoC / Exploit:
IE_DoS_Exploit.html
dos.css
@import url("dos.css");
@import url("dos.css");
@import url("dos.css");
@import url("dos.css");
@import url("dos.css");
Video PoC:
Internet Explorer CSS Denial of Service Vulnerability
http://www.youtube.com/watch?v=eihStRWnrX4
Best wishes & regards,
MustLive
Administrator of Websecurity web site
http://websecurity.com.ua
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] DeepSec 2013 - Call for Papers
DeepSec 2013 "Seven Seas" - Call for Papers Dear Researchers, Hackers, Developers, dear Members of the IT-Security Community: This is our call for papers for DeepSec 2013, the seventh DeepSec In-Depth Security Conference. Our annual event will take place from November 19th to 22th at the Imperial Riding School Renaissance Hotel in Vienna. It consists of two days of workshops followed by a two day long conference. Our speakers and trainers traditionally come from the security community, companies, hacker spaces, journalism and academic organisations, talking about different topics and aspects of IT-Security: current threats and vulnerabilities, social engineering and psychological aspects as well as security management and philosophy. Content For DeepSec 2013 we're not looking for talks about the latest trending technologies, gadgets and behaviours, no, DeepSec 2013 is all about secrets, failures and visions! We are looking for talks that will enable us to see things from another perspective and hopefully give us a lot to think about. We still talk about technology, exploits, bug, vulnerabilities, defence (hopefully in-depth), software, hardware, infrastructure, procedures and everything. We just think it's important to put your findings into perspective with the real world – which in turn consists of secrets, failures and vision on a daily basis. Secrets Every person, every group, every enterprise and every government has them. Secrets are the very reason why information security uses encryption, access control, even doors and locks (physical and otherwise). You wouldn’t need all of this if it wasn’t for safeguarding these secrets. How do you protect your secrets? And are secrets still secret once they escape? Failures Sometimes things go wrong. Often not only by malicious action, but by bad design or bad implementation. Human error contributes as well to major and minor catastrophes. All it takes is a missed state (or states or bugs or anything) during quality assurance or changes to an already “perfect” system to start the chain reaction. Failures are always an option. So how do you deal with failures? How do you detect them? Do you dare to talk about them? And what do you (not) learn from them? Visions In an ideal world nothing stays bad forever. While sometimes it can get worse, there are lots of ideas for improvement. That’s what upgrades and changes in behavior are for (learning helps too). If you have ideas how to improve the current state of affairs, then visions are for you. We want to hear them! You can put all hot topics of IT security into either one of these categories. Really good lessons touch all three. Categories - You can submit content for three categories: - Talks for the conference (45 minute slots) - Two day workshops - U21 (a special category for young security researchers) https://deepsec.net/cfp.html Talks Talks should be up-to-date, of high quality and preferably exclusive. We're looking for the vanguard and lateral thinkers – No Rock Stars, no Marketing, no panic creating, no 2nd hand opinions – we want you to introduce us to new ideas and we do like a bit of controversy: We're keen on unconventional thoughts that challenge the mainstream. Speaker privileges: - Free entrance to the conference - Hotel accommodation for three nights (single/double room) - Travel expenses (please have your ticket up to EUR 800,- approved) - Invitation to our famous Speaker's Dinner with traditional Austrian food Workshops Again: It's quality that counts. We're looking for novel, challenging lectures for a sophisticated audience with a very high level of technical understanding, deeply involved with security management, implementation, operation and research. There's no need to keep it simple but we like you to be precise. Don't try to cover too much ground, focus! Two days may sound a lot but it isn't. Trainer privileges: - Free entrance to the conference - Invitation to our famous Speaker's Dinner with traditional Austrian food - 50% of the net profit of your class U21 DeepSec will sponsor young security researchers by providing an opportunity to attend the conference for free. In order to take advantage of this offer your have to submit a description of your own security research project. Please don't copy & paste, be creative! Be original! There's no need to be shy: Viennese people may look grumpy, but they don't bite and we're really looking forward to introduce some brand new faces to the IT security community. If you get accepted your work will be an exhibit during the breaks at the conference, optionally you can do a lightning talk about your work (roughly 5 minutes). The offer is intended for everyone with a maximum age of 21 (or slightly more, depending on your social engineering skills). U21 privileges: - A 5 minute lightning talk on the conference - Free entrance to the conference - Invitation to the Speaker's Dinner, but no alcohol without age check ;) - We help y
Re: [Full-disclosure] [ MDVSA-2013:101 ] lynx
Is it really necessary to spam the list with a separate email for every issue you want to report? Perhaps one email a week with a link to the full report would suffice? On 10 Apr 2013, at 11:31, secur...@mandriva.com wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > ___ > > Mandriva Linux Security Advisory MDVSA-2013:101 > http://www.mandriva.com/en/support/security/ > ___ > > Package : lynx > Date: April 10, 2013 > Affected: Business Server 1.0 > ___ > > Problem Description: > > Updated lynx package fixes security vulnerability: > > Lynx does not verify that the server's certificate is signed by > a trusted certification authority, which allows man-in-the-middle > attackers to spoof SSL servers via a crafted certificate, related to > improper use of a certain GnuTLS function (CVE-2012-5821). > ___ > > References: > > http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5821 > https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0351 > ___ > > Updated Packages: > > Mandriva Business Server 1/X86_64: > 777f25fe8b425d1385af79891e7c0447 mbs1/x86_64/lynx-2.8.7-5.1.mbs1.x86_64.rpm > 94b3428d676786e79c7a636dd7ee4e55 mbs1/SRPMS/lynx-2.8.7-5.1.mbs1.src.rpm > ___ > > To upgrade automatically use MandrivaUpdate or urpmi. The verification > of md5 checksums and GPG signatures is performed automatically for you. > > All packages are signed by Mandriva for security. You can obtain the > GPG public key of the Mandriva Security Team by executing: > > gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 > > You can view other update advisories for Mandriva Linux at: > > http://www.mandriva.com/en/support/security/advisories/ > > If you want to report vulnerabilities, please contact > > security_(at)_mandriva.com > ___ > > Type Bits/KeyID Date User ID > pub 1024D/22458A98 2000-07-10 Mandriva Security Team > > -BEGIN PGP SIGNATURE- > Version: GnuPG v1.4.12 (GNU/Linux) > > iD8DBQFRZRVImqjQ0CJFipgRAnhUAJ9f1z5xakbIIqQDPAIls+PPWshN2gCfRk/Y > yQt2avmt+JhDF3c8wsDnepc= > =FGfl > -END PGP SIGNATURE- > > ___ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] [ MDVSA-2013:101 ] lynx
On Wed, Apr 10, 2013 at 11:44:22AM +0100, Peter W-S wrote: > Is it really necessary to spam the list with a separate email for every issue > you want to report? Perhaps one email a week with a link to the full report > would suffice? It is necessary. Waiting a week for a batched email to find out my software has vulnerabilities is not acceptable just because some people insist on reading email on their telephone. -- Erik Falor http://unnovative.net signature.asc Description: Digital signature ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] [ MDVSA-2013:101 ] lynx
Hello Erik On 10.04.2013 17:16, Erik Falor wrote: On Wed, Apr 10, 2013 at 11:44:22AM +0100, Peter W-S wrote: Is it really necessary to spam the list with a separate email for every issue you want to report? Perhaps one email a week with a link to the full report would suffice? It is necessary. Waiting a week for a batched email to find out my software has vulnerabilities is not acceptable just because some people insist on reading email on their telephone. If you are using Mandriva, then you could and should subscribe directly to the announce or security mailing list there. I really prefer the step e.g. Ubuntu (and also some other Linux distribution I do not remember) have taken about 2 years ago. They stopped sending out their security announces to Bugtraq and Full-Disclosure. I would be happy if other distributions or projects, with such high volume of announces, would do the same. bye Fabian ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] [ MDVSA-2013:101 ] lynx
But sending 10 emails in a row is necessary? 2013/4/10 Erik Falor > On Wed, Apr 10, 2013 at 11:44:22AM +0100, Peter W-S wrote: > > Is it really necessary to spam the list with a separate email for every > issue you want to report? Perhaps one email a week with a link to the full > report would suffice? > > It is necessary. > > Waiting a week for a batched email to find out my software has > vulnerabilities is not acceptable just because some people insist on > reading email on their telephone. > > -- > Erik Falor http://unnovative.net > > ___ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ > ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] [ MDVSA-2013:101 ] lynx
: It is necessary. : Waiting a week for a batched email to find out my software has : vulnerabilities is not acceptable just because some people insist on : reading email on their telephone. You aren't reading these advisories I take it. Several of them are reporting that Mandriva has finally fixed publicly disclosed issues from 2010 and 2011. You are already waiting *years* to find out your software has vulnerabilities, and you find that perfectly acceptable. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] [ MDVSA-2013:101 ] lynx
I agree! I hate those MDVSA spam!! On Wed, 10 Apr 2013 17:36:59 +0200, Fabian Wenk wrote: > Hello Erik > > On 10.04.2013 17:16, Erik Falor wrote: >> On Wed, Apr 10, 2013 at 11:44:22AM +0100, Peter W-S wrote: >>> Is it really necessary to spam the list with a separate email for every >>> issue you want to report? Perhaps one email a week with a link to the full >>> report would suffice? >> >> It is necessary. >> >> Waiting a week for a batched email to find out my software has >> vulnerabilities is not acceptable just because some people insist on >> reading email on their telephone. > > If you are using Mandriva, then you could and should subscribe > directly to the announce or security mailing list there. > > I really prefer the step e.g. Ubuntu (and also some other Linux > distribution I do not remember) have taken about 2 years ago. They > stopped sending out their security announces to Bugtraq and > Full-Disclosure. I would be happy if other distributions or projects, > with such high volume of announces, would do the same. > > > bye > Fabian > > ___ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software Advisory ID: cisco-sa-20130410-asa Revision 1.0 For Public Release 2013 April 10 16:00 UTC (GMT) +-- Summary === Cisco ASA Software is affected by the following vulnerabilities: IKE Version 1 Denial of Service Vulnerability Crafted URL Denial of Service Vulnerability Denial of Service During Validation of Crafted Certificates DNS Inspection Denial of Service Vulnerability These vulnerabilities are independent of each other; a release that is affected by one of the vulnerabilities may not be affected by the others. Successful exploitation of any of these vulnerabilities may result in a reload of an affected device, leading to a denial of service (DoS) condition. Cisco has released free software updates that address these vulnerabilities. Workarounds are available for some of these vulnerabilities. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asa Note: The Cisco Firewall Services Module (FWSM) for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers may be affected by some of the vulnerabilities listed above. A separate Cisco Security Advisory has been published to disclose the vulnerabilities that affect the Cisco FWSM. This advisory is available at http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-fwsm -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) iF4EAREIAAYFAlFlkRYACgkQUddfH3/BbTpxAQD/Zkba4GDth49SWailwZV871q2 ffeUbZzP4AzcT4zJTbYA/1nk8ZqZBfW9TCUenapRkiykoh14ATXnyjV5GqUtWiUa =Ds4x -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module Software
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module Software Advisory ID: cisco-sa-20130410-fwsm Revision 1.0 For Public Release 2013 April 10 16:00 UTC (GMT) +-- Summary === Cisco Firewall Services Module (FWSM) Software for Cisco Catalyst 6500 Series Switches and Cisco 7600 Series Routers is affected by the following vulnerabilities: FWSM HTTP Proxy Traceback Vulnerability IKE Version 1 Denial of Service Vulnerability These vulnerabilities are independent of each other; a release that is affected by one of the vulnerabilities may not be affected by the other. Successful exploitation of either of these vulnerabilities may result in a reload of an affected device, leading to a denial of service (DoS) condition. Cisco has released free software updates that address these vulnerabilities. A workaround is available for the IKE vulnerability. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-fwsm Note: The Cisco Adaptive Security Appliance (ASA) may be affected by some of the vulnerabilities listed above. A separate Cisco Security Advisory has been published to disclose the vulnerabilities that affect the Cisco ASA. That advisory is available at: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asa -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) iF4EAREIAAYFAlFlkSAACgkQUddfH3/BbTo2YwD/c8Pz1w7Af3bIH+OvuwkO7VTL JmdT2IMDCdZs5rLOH4cA/0EmYvvKa62cD09xfM8u5IgFP+qgWptVYvD15x2uBPWh =JjgU -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Solution
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Unified MeetingPlace Solution Advisory ID: cisco-sa-20130410-mp Revision 1.0 For Public Release 2013 April 10 16:00 UTC (GMT) +-- Summary === Cisco Unified MeetingPlace Application Server contains an authentication bypass vulnerability and Cisco Unified MeetingPlace Web Conferencing Server contains an arbitrary login vulnerability. For both vulnerabilities, successful exploitation could allow an unauthenticated, remote attacker to impersonate a legitimate user and send arbitrary commands to the affected system with the privileges of that user. Cisco has released free software updates that address these vulnerabilities. A workaround is available for the Cisco Unified MeetingPlace Web Conferencing Server Arbitrary Login Vulnerability. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-mp -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) iF4EAREIAAYFAlFlkTIACgkQUddfH3/BbTry0QD/awwTnQ3pFKZZaKwl0jslafJC P3L5GHiKhL9bE92KEkMA/RRgoVb0TOUiTubSi1c3jnQKZVtI19zWdYElJkYcQSXP =7GS+ -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS XE Software for 1000 Series Aggregation Services Routers Advisory ID: cisco-sa-20130410-asr1000 Revision 1.0 For Public Release 2013 April 10 16:00 UTC (GMT) +-- Summary === Cisco IOS XE Software for 1000 Series Aggregation Services Routers (ASR) contains the following denial of service (DoS) vulnerabilities: Cisco IOS XE Software IPv6 Multicast Traffic Denial of Service Vulnerability Cisco IOS XE Software MVPNv6 Traffic Denial of Service Vulnerability Cisco IOS XE Software L2TP Traffic Denial of Service Vulnerability Cisco IOS XE Software Bridge Domain Interface Denial of Service Vulnerability Cisco IOS XE Software SIP Traffic Denial of Service Vulnerability These vulnerabilities are independent of each other; a release that is affected by one of the vulnerabilities may not be affected by the others. Successful exploitation of any of these vulnerabilities could allow an unauthenticated remote attacker to trigger a reload of the Embedded Services Processors (ESP) card or the Route Processor (RP) card, causing an interruption of services. Repeated exploitation could result in a sustained DoS condition. Note: Cisco IOS Software and Cisco IOS-XR Software are not affected by these vulnerabilities. Cisco has released free software updates that address these vulnerabilities. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-asr1000 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) iF4EAREIAAYFAlFlkTsACgkQUddfH3/BbTqhGAD/Q21EVj/+oRmfkFXo+IZZ89AF K6vZOBcbjbfPKEwpM4gA/A8HlrWHY2egoNaTLDeLRfAi7jZhkrGHpE18WDC/91lw =OG4L -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] Cisco Security Advisory: Cisco Prime Network Control Systems Database Default Credentials Vulnerability
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cisco Security Advisory: Cisco Prime Network Control Systems Database Default Credentials Vulnerability Advisory ID: cisco-sa-20130410-ncs Revision 1.0 For Public Release 2013 April 10 16:00 UTC (GMT) +-- Summary === Cisco Prime Network Control System NCS appliances that are running software versions prior to 1.1.1.24 contain a database user account that is created with default credentials. An attacker could use this account to modify the configuration of the application or disrupt services. A software upgrade is required to resolve this vulnerability. Cisco has released free software updates that address this vulnerability. There is no workaround for this vulnerability. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130410-ncs -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) iF4EAREIAAYFAlFlkSkACgkQUddfH3/BbTrRtQEAjKEfrZ4g2yWNSGLKq4eYQtGy +N+7Dea/oX5EQtOnnqEA/3h6A5A+RsvGrcVAse061dKJCwT0X2q3khD437CqSYZy =TLJ/ -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [SECURITY] [DSA 2659-1] libapache-mod-security security update
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - Debian Security Advisory DSA-2659-1 secur...@debian.org http://www.debian.org/security/ Salvatore Bonaccorso April 09, 2013 http://www.debian.org/security/faq - - Package: libapache-mod-security Vulnerability : XML external entity processing vulnerability Problem type : remote Debian-specific: no CVE ID : CVE-2013-1915 Debian Bug : 704625 Timur Yunusov and Alexey Osipov from Positive Technologies discovered that the XML files parser of ModSecurity, an Apache module whose purpose is to tighten the Web application security, is vulnerable to XML external entities attacks. A specially-crafted XML file provided by a remote attacker, could lead to local file disclosure or excessive resources (CPU, memory) consumption when processed. This update introduces a SecXmlExternalEntity option which is 'Off' by default. This will disable the ability of libxml2 to load external entities. For the stable distribution (squeeze), this problem has been fixed in version 2.5.12-1+squeeze2. For the testing distribution (wheezy), this problem has been fixed in version 2.6.6-6 of the modsecurity-apache package. For the unstable distribution (sid), this problem has been fixed in version 2.6.6-6 of the modsecurity-package package. We recommend that you upgrade your libapache-mod-security packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: debian-security-annou...@lists.debian.org -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iQEcBAEBAgAGBQJRZaYhAAoJEFb2GnlAHawEJcEH/jTa0h4YLeFM1Ethm17Xnspt krXt5vaRbuj1QauO/dPLpnSWDUDIESB3sdL/vxxUbRhFWIbGg2aQHreWFPxONBnk KzqYXefKhbMjJFRBTKZfv/9j0f2fHHy5xfvZjYPeISpCQVqfiD3bzETY0Z9mvq19 zbrgj9YXCIg6ZdnxF1Q3p0K3wx83uuUcFFk02PfYTtPO+hlzDjkNkq1vn2XKxlAc P1aWePly4Ii4DlFwnXaWGVzQiiosELd4aqQzZfqeRsSDbk+MBEwH9z/xyjrAsNOI s/Bvfk4Cxa0I6BqrIEqGcLPW0Gt3td9LdltGDSSD3SokpMUO7ANIrYHKHe+GKfA= =bgvz -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] [ MDVSA-2013:101 ] lynx
These mails can be easily compressed in a single daily digest. If you really need to have those alerts directly, subscribing to the vendor feed would be faster, and it would save everybody that isn't interested in mandriva a lot less mails. Julius Kivimäki wrote: >But sending 10 emails in a row is necessary? > > >2013/4/10 Erik Falor > >> On Wed, Apr 10, 2013 at 11:44:22AM +0100, Peter W-S wrote: >> > Is it really necessary to spam the list with a separate email for every >> issue you want to report? Perhaps one email a week with a link to the full >> report would suffice? >> >> It is necessary. >> >> Waiting a week for a batched email to find out my software has >> vulnerabilities is not acceptable just because some people insist on >> reading email on their telephone. >> >> -- >> Erik Falor http://unnovative.net >> >> ___ >> Full-Disclosure - We believe in it. >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html >> Hosted and sponsored by Secunia - http://secunia.com/ >> > >___ >Full-Disclosure - We believe in it. >Charter: http://lists.grok.org.uk/full-disclosure-charter.html >Hosted and sponsored by Secunia - http://secunia.com/ ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] [ MDVSA-2013:101 ] lynx
I also agree that Its annoying spam. I never run Mandriva and I'm not planning to do it ... Please, stop sending spam to full disclousure!!! El mié, 10-04-2013 a las 18:48 +0200, Alex escribió: > I agree! I hate those MDVSA spam!! > > On Wed, 10 Apr 2013 17:36:59 +0200, Fabian Wenk > wrote: > > Hello Erik > > > > On 10.04.2013 17:16, Erik Falor wrote: > >> On Wed, Apr 10, 2013 at 11:44:22AM +0100, Peter W-S wrote: > >>> Is it really necessary to spam the list with a separate email for every > >>> issue you want to report? Perhaps one email a week with a link to the > >>> full report would suffice? > >> > >> It is necessary. > >> > >> Waiting a week for a batched email to find out my software has > >> vulnerabilities is not acceptable just because some people insist on > >> reading email on their telephone. > > > > If you are using Mandriva, then you could and should subscribe > > directly to the announce or security mailing list there. > > > > I really prefer the step e.g. Ubuntu (and also some other Linux > > distribution I do not remember) have taken about 2 years ago. They > > stopped sending out their security announces to Bugtraq and > > Full-Disclosure. I would be happy if other distributions or projects, > > with such high volume of announces, would do the same. > > > > > > bye > > Fabian > > > > ___ > > Full-Disclosure - We believe in it. > > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > > Hosted and sponsored by Secunia - http://secunia.com/ > > ___ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http://secunia.com/ ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] [ MDVSA-2013:101 ] lynx
How about a sensible middle ground? Daily batches of MDVSA vulnerabilities? On Apr 10, 2013, at 9:48 AM, Alex wrote: I agree! I hate those MDVSA spam!! On Wed, 10 Apr 2013 17:36:59 +0200, Fabian Wenk wrote: Hello Erik On 10.04.2013 17:16, Erik Falor wrote: On Wed, Apr 10, 2013 at 11:44:22AM +0100, Peter W-S wrote: Is it really necessary to spam the list with a separate email for every issue you want to report? Perhaps one email a week with a link to the full report would suffice? It is necessary. Waiting a week for a batched email to find out my software has vulnerabilities is not acceptable just because some people insist on reading email on their telephone. If you are using Mandriva, then you could and should subscribe directly to the announce or security mailing list there. I really prefer the step e.g. Ubuntu (and also some other Linux distribution I do not remember) have taken about 2 years ago. They stopped sending out their security announces to Bugtraq and Full-Disclosure. I would be happy if other distributions or projects, with such high volume of announces, would do the same. bye Fabian -- * Peter Thoeny - peter09[at]thoeny.org * http://TWiki.org - is your team already TWiki enabled? * Knowledge cannot be managed, it can be discovered and shared * This e-mail is: (_) private(_) ask first(x) public ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Re: [Full-disclosure] [ MDVSA-2013:101 ] lynx
On Wed, Apr 10, 2013 at 1:36 PM, Peter Thoeny wrote: > How about a sensible middle ground? Daily batches of MDVSA vulnerabilities? Sounds like a good idea - perhaps prepare one bulletin with affected components and provide links to the detailed article. I imagine the folks who prepare and send the bulletins would not mind a reduction in workload (preparing/signing/sending one bulletin vs many bulletins). > On Apr 10, 2013, at 9:48 AM, Alex wrote: > >> I agree! I hate those MDVSA spam!! >> >> On Wed, 10 Apr 2013 17:36:59 +0200, Fabian Wenk >> wrote: >>> >>> Hello Erik >>> >>> On 10.04.2013 17:16, Erik Falor wrote: On Wed, Apr 10, 2013 at 11:44:22AM +0100, Peter W-S wrote: > > Is it really necessary to spam the list with a separate email for every > issue you want to report? Perhaps one email a week with a link to the full > report would suffice? It is necessary. Waiting a week for a batched email to find out my software has vulnerabilities is not acceptable just because some people insist on reading email on their telephone. >>> >>> >>> If you are using Mandriva, then you could and should subscribe >>> directly to the announce or security mailing list there. >>> >>> I really prefer the step e.g. Ubuntu (and also some other Linux >>> distribution I do not remember) have taken about 2 years ago. They >>> stopped sending out their security announces to Bugtraq and >>> Full-Disclosure. I would be happy if other distributions or projects, >>> with such high volume of announces, would do the same. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [Security-news] SA-CONTRIB-2013-042 - RESTful Web Services (RESTWS) - Denial of Service
View online: http://drupal.org/node/1966780 * Advisory ID: DRUPAL-SA-CONTRIB-2013-042 * Project: RESTful Web Services [1] (third-party module) * Version: 7.x * Date: 2013-April-10 * Security risk: Critical [2] * Exploitable from: Remote * Vulnerability: Denial of Service DESCRIPTION - This module enables you to expose Drupal entities as RESTful web services. It provides a machine-readable interface to exchange resources in JSON, XML and RDF. The module interferes with Drupal's page cache and allows an attacker to poison the cache with non-HTML page responses, thereby exposing a denial of service vulnerability. This vulnerability is mitigated by the fact that page caching must be enabled and the anonymous user role must be assigned a RESTWS permission, for example "access resource node". CVE IDENTIFIER(S) ISSUED * /A CVE identifier [3] will be requested, and added upon issuance, in accordance with Drupal Security Team processes./ VERSIONS AFFECTED --- * RESTWS 7.x-1.x versions prior to 7.x-1.3. * RESTWS 7.x-2.x versions prior to 7.x-2.0-alpha5. Drupal core is not affected. If you do not use the contributed RESTful Web Services [4] module, there is nothing you need to do. SOLUTION Install the latest version: * If you use the RESTWS 1.x module for Drupal 7.x, upgrade to RESTWS 7.x-1.3 [5] * If you use the RESTWS 2.x module for Drupal 7.x, upgrade to RESTWS 7.x-2.0-alpha5 [6] Also see the RESTful Web Services [7] project page. REPORTED BY - * Dylan Tack [8] of the Drupal Security Team FIXED BY * Klaus Purer [9] the module maintainer * Stéphane Corlosquet [10] of the Drupal Security Team COORDINATED BY -- * Klaus Purer [11] of the Drupal Security Team CONTACT AND MORE INFORMATION The Drupal security team can be reached at security at drupal.org or via the contact form at http://drupal.org/contact [12]. Learn more about the Drupal Security team and their policies [13], writing secure code for Drupal [14], and securing your site [15]. [1] http://drupal.org/project/restws [2] http://drupal.org/security-team/risk-levels [3] http://cve.mitre.org/ [4] http://drupal.org/project/restws [5] http://drupal.org/node/1966752 [6] http://drupal.org/node/1966758 [7] http://drupal.org/project/restws [8] http://drupal.org/user/96647 [9] http://drupal.org/user/262198 [10] http://drupal.org/user/52142 [11] http://drupal.org/user/262198 [12] http://drupal.org/contact [13] http://drupal.org/security-team [14] http://drupal.org/writing-secure-code [15] http://drupal.org/security/secure-configuration ___ Security-news mailing list security-n...@drupal.org Unsubscribe at http://lists.drupal.org/mailman/listinfo/security-news ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:123 ] rpmdevtools
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:123 http://www.mandriva.com/en/support/security/ ___ Package : rpmdevtools Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated rpmdevtools package fixes security vulnerability: A TOCTOU race condition was found in the way 'annotate-output' (used to execute a program annotating the output linewise with time and stream) tool of rpmdevtools before 8.3 performed management of its temporary files used for standard output and standard error output. A local attacker could use this flaw to conduct symbolic link attacks, possibly leading to their ability in an unauthorized way to alter files belonging to the user running the 'annotate-output' tool (CVE-2012-3500). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3500 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0316 ___ Updated Packages: Mandriva Business Server 1/X86_64: 71b23cbb10bd646ca4ba1f5e772f77a1 mbs1/x86_64/rpmdevtools-8.3-1.mbs1.noarch.rpm fa512beb5677542a86236f63262a9b91 mbs1/SRPMS/rpmdevtools-8.3-1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZVNFmqjQ0CJFipgRAlcCAKCY47at4+lH8jwXSjpo7I4tMyLdjgCeOLzJ x61EqhnMkmg5NOfXU4lsFb4= =ug3y -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:121 ] qemu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:121 http://www.mandriva.com/en/support/security/ ___ Package : qemu Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated qemu packages fix security vulnerability: A flaw was found in how qemu, in snapshot mode (-snapshot command line argument), handled the creation and opening of the temporary file used to store the difference of the virtualized guest's read-only image and the current state. In snapshot mode, bdrv_open() creates an empty temporary file without checking for any mkstemp() or close() failures; it also ignores the possibility of a buffer overrun given an exceptionally long /tmp. Because qemu re-opens that file after creation, it is possible to race qemu and insert a symbolic link with the same expected name as the temporary file, pointing to an attacker-chosen file. This can be used to either overwrite the destination file with the privileges of the user running qemu (typically root), or to point to an attacker-readable file that could expose data from the guest to the attacker (CVE-2012-2652). A flaw was found in the way QEMU handled VT100 terminal escape sequences when emulating certain character devices. A guest user with privileges to write to a character device that is emulated on the host using a virtual console back-end could use this flaw to crash the qemu-kvm process on the host or, possibly, escalate their privileges on the host (CVE-2012-3515). It was discovered that the e1000 emulation code in QEMU does not enforce frame size limits in the same way as the real hardware does. This could trigger buffer overflows in the guest operating system driver for that network card, assuming that the host system does not discard such frames (which it will by default) (CVE-2012-6075). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2652 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3515 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6075 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0185 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0263 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0025 ___ Updated Packages: Mandriva Business Server 1/X86_64: 2077322ff415a0f63921650be5b4d7fa mbs1/x86_64/qemu-1.0-8.1.mbs1.x86_64.rpm a4741d08a3dedd1007296ac535ecce83 mbs1/x86_64/qemu-img-1.0-8.1.mbs1.x86_64.rpm 4e9cead8b0e57eec5c5e36abf0318efa mbs1/SRPMS/qemu-1.0-8.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZVG5mqjQ0CJFipgRAvdbAKDuC2ZxrYAhBiDajUFvXh7qGODENACeLK+a A9jU52eEUkylFSSyud9MeM4= =RVuM -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:135 ] vte
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:135 http://www.mandriva.com/en/support/security/ ___ Package : vte Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated vte packages fix security vulnerability: A denial of service flaw was found in the way VTE, a terminal emulator widget, processed certain escape sequences with large repeat counts. A remote attacker could provide a specially-crafted file, which once opened in a terminal using the VTE terminal emulator could lead to excessive CPU consumption (CVE-2012-2738). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2738 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0163 ___ Updated Packages: Mandriva Business Server 1/X86_64: 4566a8d789bd97a1878507939912f9f9 mbs1/x86_64/lib64vte9-0.28.2-5.1.mbs1.x86_64.rpm 27a8bd6e01a230a99b5129e8d74a0b95 mbs1/x86_64/lib64vte-devel-0.28.2-5.1.mbs1.x86_64.rpm c5b3588d6b7735ed816d609e0efa mbs1/x86_64/lib64vte-gir0.0-0.28.2-5.1.mbs1.x86_64.rpm 614f4e1a8e82320438efe99803ee3ad4 mbs1/x86_64/python-vte-0.28.2-5.1.mbs1.x86_64.rpm 8dc2b110ae5529d791e364b72f7f4ed1 mbs1/x86_64/vte-0.28.2-5.1.mbs1.x86_64.rpm e0ed7c26edf07e7a03821fc14c97da96 mbs1/SRPMS/vte-0.28.2-5.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZV+/mqjQ0CJFipgRAuAMAJ4g2+waHAG/kClKiAOpkPaR/EwJPACfS58b xtYHhE3BeYi3KuQu2HjgtSk= =VKKN -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:126 ] snack
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:126 http://www.mandriva.com/en/support/security/ ___ Package : snack Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated snack packages fix security vulnerability: Two vulnerabilities have been discovered in Snack Sound Toolkit, which are caused due to missing boundary checks in the GetWavHeader() function (generic/jkSoundFile.c) when parsing either format sub-chunks or unknown sub-chunks. This can be exploited to cause a heap-based buffer overflow via specially crafted WAV files with overly large chunk sizes specified (CVE-2012-6303). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6303 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0017 ___ Updated Packages: Mandriva Business Server 1/X86_64: cc5a34a07194a2d4f226de5b7f336c8c mbs1/x86_64/python-snack-2.2.10-11.1.mbs1.x86_64.rpm 6c10508707c1370f2ba84756c912e83b mbs1/x86_64/tcl-snack-2.2.10-11.1.mbs1.x86_64.rpm 834f2117e1251aa60d1aa7d8f95b2cec mbs1/SRPMS/snack-2.2.10-11.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZVXnmqjQ0CJFipgRAv44AKDlIIT/dmXREry26hKVgp0lxm0rwwCfe5qu M2WU2CwSMDIxFHzcMJVBmoY= =mXBe -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:132 ] tor
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:132 http://www.mandriva.com/en/support/security/ ___ Package : tor Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated tor package fixes security vulnerabilities: Tor before 0.2.2.34, when configured as a client or bridge, sends a TLS certificate chain as part of an outgoing OR connection, which allows remote relays to bypass intended anonymity properties by reading this chain and then determining the set of entry guards that the client or bridge had selected (CVE-2011-2768). Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATE_FAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values (CVE-2011-2769). Use-after-free vulnerability in dns.c in Tor before 0.2.2.38 might allow remote attackers to cause a denial of service (daemon crash) via vectors related to failed DNS requests (CVE-2012-3517). The networkstatus_parse_vote_from_string function in routerparse.c in Tor before 0.2.2.38 does not properly handle an invalid flavor name, which allows remote attackers to cause a denial of service (out-of-bounds read and daemon crash) via a crafted (1) vote document or (2) consensus document (CVE-2012-3518). routerlist.c in Tor before 0.2.2.38 uses a different amount of time for relay-list iteration depending on which relay is chosen, which might allow remote attackers to obtain sensitive information about relay selection via a timing side-channel attack (CVE-2012-3519). The compare_tor_addr_to_addr_policy function in or/policies.c in Tor before 0.2.2.39, and 0.2.3.x before 0.2.3.21-rc, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a zero-valued port field that is not properly handled during policy comparison (CVE-2012-4419). Tor before 0.2.2.39, when waiting for a client to renegotiate, allowed it to add bytes to the input buffer, allowing a crash to be caused remotely (tor-5934, tor-6007). Denial of Service vulnerability in Tor before 0.2.3.25, due to an error when handling SENDME cells and can be exploited to cause excessive consumption of memory resources within an entry node (SA51329, CVE-2012-5573). The version of Tor shipped in MBS1 did not have correctly formed systemd unit and thus failed to start. This updated version corrects this problem and restores working behaviour. ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2768 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2769 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3517 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3518 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3519 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4419 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5573 https://wiki.mageia.org/en/Support/Advisories/MGAA-2012-0184 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0276 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0356 ___ Updated Packages: Mandriva Business Server 1/X86_64: 8cadc920e4452cd2a3551a3cb01d9fcf mbs1/x86_64/tor-0.2.2.39-1.mbs1.x86_64.rpm 7cbba7170bc4f9e6ee8409398437570c mbs1/SRPMS/tor-0.2.2.39-1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZVsDmqjQ0CJFipgRAm9IAJ9tYUVrI7u2V+7yJGNLn2OVMdOzcACgyrhf PUIroe88x4NDpj7AUyd2YP8= =x4YG -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:118 ] python-feedparser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:118 http://www.mandriva.com/en/support/security/ ___ Package : python-feedparser Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated python-feedparser package fixes security vulnerability: Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII encoded document (CVE-2012-2921). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2921 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0157 ___ Updated Packages: Mandriva Business Server 1/X86_64: 1b570eafb2641697e940bf970e5a9f0c mbs1/x86_64/python-feedparser-5.1.2-1.mbs1.noarch.rpm 369d5d4b737303d0ae792c05930300e2 mbs1/SRPMS/python-feedparser-5.1.2-1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZTwomqjQ0CJFipgRAlkKAKDcKGPXbYrXE0csFmKqTTxLRMsZrACfcWwp ft2NvLazjqlfBYTJsCEHVJA= =fgXV -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:122 ] quagga
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:122 http://www.mandriva.com/en/support/security/ ___ Package : quagga Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated quagga package fixes security vulnerability: The bgp_capability_orf function in bgpd in Quagga 0.99.20.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) by leveraging a BGP peering relationship and sending a malformed Outbound Route Filtering (ORF) capability TLV in an OPEN message (CVE-2012-1820). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1820 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0133 ___ Updated Packages: Mandriva Business Server 1/X86_64: ccff198235c967974cf3fbd36357d74b mbs1/x86_64/lib64quagga0-0.99.20.1-4.1.mbs1.x86_64.rpm 2f39ea9b9dc6d43d2c5d6f4a52f03199 mbs1/x86_64/lib64quagga-devel-0.99.20.1-4.1.mbs1.x86_64.rpm 47e58bf9ed528f49b5fc949ee97e3a61 mbs1/x86_64/quagga-0.99.20.1-4.1.mbs1.x86_64.rpm 8631379a83fbe4414c6a6eed168a3eab mbs1/x86_64/quagga-contrib-0.99.20.1-4.1.mbs1.x86_64.rpm 692575a51b91902aafd594dc1a628660 mbs1/SRPMS/quagga-0.99.20.1-4.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZVKPmqjQ0CJFipgRAqDBAJ0UIibF/CxlkQs84SH9L+LNCFGixgCdGQ8Z 6nfdWJt00X05gt1q7uQci/U= =nomv -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:138 ] x11-driver-video-qxl
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:138 http://www.mandriva.com/en/support/security/ ___ Package : x11-driver-video-qxl Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated x11-driver-video-qxl package fixes security vulnerability: A flaw was found in the way the host's qemu-kvm qxl driver and the guest's X.Org qxl driver interacted when a SPICE connection terminated. A user able to initiate a SPICE connection to a guest could use this flaw to make the guest temporarily unavailable or, potentially (if the sysctl kernel.softlockup_panic variable was set to 1 in the guest), crash the guest (CVE-2013-0241). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0241 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0036 ___ Updated Packages: Mandriva Business Server 1/X86_64: 45afe4e8c0274558fc1bc8c202115808 mbs1/x86_64/x11-driver-video-qxl-0.0.16-5.1.mbs1.x86_64.rpm 379d4bbc4a8c6a96c4b79448a3b522f5 mbs1/SRPMS/x11-driver-video-qxl-0.0.16-5.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZWL+mqjQ0CJFipgRArfFAKDwlEJ9IjBqQQ0AmDGXHSb+TkgncgCfR5Ta ux2yJaVNML1XMEIh6Ww+6WM= =mv0M -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:137 ] wordpress
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:137 http://www.mandriva.com/en/support/security/ ___ Package : wordpress Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: This update provides WordPress 3.4.2, a maintenance and security release. ___ References: http://codex.wordpress.org/Version_3.4.1 http://codex.wordpress.org/Version_3.4.2 ___ Updated Packages: Mandriva Business Server 1/X86_64: 64998825efc75905c0972a74bf3c9206 mbs1/x86_64/wordpress-3.4.2-1.mbs1.noarch.rpm 611df695614c1c6941ac79dad656bcb0 mbs1/SRPMS/wordpress-3.4.2-1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZWJxmqjQ0CJFipgRAsl5AJ9+j+HczWEPI3clCJ5g5rJdi33VyACcDcWB gyXHu/JgyytF/gMabzN62oU= =RY2y -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:120 ] python-pycrypto
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:120 http://www.mandriva.com/en/support/security/ ___ Package : python-pycrypto Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated python-pycrypto package fixes security vulnerability: PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers to conduct brute force attacks to obtain the private key (CVE-2012-2417). Note: any ElGamal keys that have previously been generated by PyCrypto should be regenerated after installing this update. ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2417 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0194 ___ Updated Packages: Mandriva Business Server 1/X86_64: 1e4f298ab96e08555e5314c8fa73d050 mbs1/x86_64/python-pycrypto-2.3-3.1.mbs1.x86_64.rpm bd9a308fc11c45024117d57eed49d4ae mbs1/SRPMS/python-pycrypto-2.3-3.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZT1+mqjQ0CJFipgRAu1LAKD0ktwzQ8Bgi/Aft3bUvUzoEpN66wCfUhD1 4nvRBGH4phQ86U2+g1s8pZo= =qGWU -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:117 ] python
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:117 http://www.mandriva.com/en/support/security/ ___ Package : python Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated python packages fix security vulnerabilities: A race condition was found in the way the Python distutils module set file permissions during the creation of the .pypirc file. If a local user had access to the home directory of another user who is running distutils, they could use this flaw to gain access to that user's .pypirc file, which can contain usernames and passwords for code repositories (CVE-2011-4944). Additionally, python has been built against the system expat and ffi libraries, to avoid any future issues with those (mitigates CVE-2012-0876 for expat). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4944 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0170 https://wiki.mageia.org/en/Support/Advisories/MGAA-2012-0160 ___ Updated Packages: Mandriva Business Server 1/X86_64: b881c50649d40cd289121dcb9096a0ce mbs1/x86_64/lib64python2.7-2.7.3-4.3.mbs1.x86_64.rpm a6f9acad83631a08138a5625d293053a mbs1/x86_64/lib64python-devel-2.7.3-4.3.mbs1.x86_64.rpm 6ac2a0c1a3ad370e86d8254f2d9bef46 mbs1/x86_64/python-2.7.3-4.3.mbs1.x86_64.rpm 65d2e7117491b520c81f5caf2641839a mbs1/x86_64/python-docs-2.7.3-4.3.mbs1.noarch.rpm e2e6a3dc44a5010a21455142d0e27eac mbs1/x86_64/tkinter-2.7.3-4.3.mbs1.x86_64.rpm 831aa6af3b0dfaad7811e35ef3174823 mbs1/x86_64/tkinter-apps-2.7.3-4.3.mbs1.x86_64.rpm 1a2d2c13cef451bf074a259004e7280f mbs1/SRPMS/python-2.7.3-4.3.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZTtAmqjQ0CJFipgRAlCiAJ9fLQj3fziCnoRDtMNWjWUa9B5D0gCgp1qz qNvLOMx4CXKGLEWdcXtfP2o= =aIz/ -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:133 ] usbmuxd
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:133 http://www.mandriva.com/en/support/security/ ___ Package : usbmuxd Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated usbmuxd packages fix security vulnerability: It was discovered that usbmuxd did not correctly perform bounds checking when processing the SerialNumber field of USB devices. An attacker with physical access could use this to crash usbmuxd or potentially execute arbitrary code as the 'usbmux' user (CVE-2012-0065). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0065 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0228 ___ Updated Packages: Mandriva Business Server 1/X86_64: 98b47906fa5816c823043ddf9502ccd9 mbs1/x86_64/lib64usbmuxd1-1.0.7-3.1.mbs1.x86_64.rpm 5b1d14d3d61e526a8723e48d760e6c25 mbs1/x86_64/lib64usbmuxd-devel-1.0.7-3.1.mbs1.x86_64.rpm 71d043ba9ea7c4f78d7526ad8bdf1cb8 mbs1/x86_64/usbmuxd-1.0.7-3.1.mbs1.x86_64.rpm aa575ce62a21d528d5caba5144f21291 mbs1/SRPMS/usbmuxd-1.0.7-3.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZVuDmqjQ0CJFipgRAnpDAKCsOJGpjtUYDIDQ4vtGbwB6z9lILgCgz5Je u7LMub+ZeoVcX0NtySE9UNE= =Rdju -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:131 ] taglib
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:131 http://www.mandriva.com/en/support/security/ ___ Package : taglib Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated taglib packages fix security vulnerabilities: taglib before 1.7.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted MP4 file (CVE-2012-2396). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2396 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0116 ___ Updated Packages: Mandriva Business Server 1/X86_64: 9b0fb15d342f1baf6501284b25192ae0 mbs1/x86_64/lib64taglib1-1.7.2-1.mbs1.x86_64.rpm 8163792710ad8d17dad5b2ddeb030b10 mbs1/x86_64/lib64taglib_c0-1.7.2-1.mbs1.x86_64.rpm efbd43a7177be5c0c1bef15ea1dd98e7 mbs1/x86_64/lib64taglib-devel-1.7.2-1.mbs1.x86_64.rpm 64a4c120a7088efdc2ab11590874dada mbs1/SRPMS/taglib-1.7.2-1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZVlvmqjQ0CJFipgRAiJ2AKDU1KuM+VuBxT7v8W0XdYn9a4AnDQCgwDL4 sH9c2rA3kkKG74wkNEhI0sY= =Plu1 -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:128 ] squashfs-tools
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:128 http://www.mandriva.com/en/support/security/ ___ Package : squashfs-tools Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated squashfs-tools packages fix security vulnerabilities: remote arbitrary code execution via crafted list file (CVE-2012-4024). integer overflow in queue_init() may lead to abitrary code execution (CVE-2012-4025). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4024 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4025 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0001 ___ Updated Packages: Mandriva Business Server 1/X86_64: b76bef9f418c3c90eaceca35874a3de0 mbs1/x86_64/squashfs-tools-4.2-3.1.mbs1.x86_64.rpm 94a5224fd4756c38b8c47e6c0bc22e97 mbs1/SRPMS/squashfs-tools-4.2-3.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZVbnmqjQ0CJFipgRAqzKAJ9oDc9cFxGg5R2iGuqZdwutuemWzgCfRVDl 0Bz/c8pzh+xLEtLjPbSFi+U= =pr/w -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:130 ] stunnel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:130 http://www.mandriva.com/en/support/security/ ___ Package : stunnel Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated stunnel packages fix security vulnerability: stunnel 4.21 through 4.54, when CONNECT protocol negotiation and NTLM authentication are enabled, does not correctly perform integer conversion, which allows remote proxy servers to execute arbitrary code via a crafted request that triggers a buffer overflow (CVE-2013-1762). The updated packages also fixes the following: - move library subpackages back into main stunnel package - add a systemd unit file (partially fixing Bug 3951) - fix issues with stunnel.conf and stunnel.pem, with stunnel running in a chroot environment. ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1762 https://wiki.mageia.org/en/Support/Advisories/MGAA-2012-0196 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0097 ___ Updated Packages: Mandriva Business Server 1/X86_64: 1eb5c58851d2856d80c28978b6df0516 mbs1/x86_64/stunnel-4.55-1.mbs1.x86_64.rpm e0e0026642bcceda874cdd2009d98dc1 mbs1/SRPMS/stunnel-4.55-1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZVkGmqjQ0CJFipgRAtUkAJ0dbe797LIDoeBbWqSFMz15TcYzYwCfV1bW ozPWY1ycQzwVqjwsrOqYXs8= =ZYA3 -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:119 ] python-httplib2
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:119 http://www.mandriva.com/en/support/security/ ___ Package : python-httplib2 Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: python-httplib2 ships its own copy of the Mozilla NSS certificates, but it should use the system-wide ones provided by the rootcerts package instead. This has been corrected. ___ References: https://wiki.mageia.org/en/Support/Advisories/MGAA-2012-0129 ___ Updated Packages: Mandriva Business Server 1/X86_64: 464494038aaa2123438069b6e713a04c mbs1/x86_64/python-httplib2-0.7.4-3.1.mbs1.noarch.rpm 4842a9cd70af815d51a6b34653616390 mbs1/SRPMS/python-httplib2-0.7.4-3.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZTz8mqjQ0CJFipgRAq5NAKDHS+A3LyaDMTCC/cvjrA6viYcfGACdGgar CNYlmElV6ZGFvAHnqsiCgrU= =6L6Q -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:139 ] x11-server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:139 http://www.mandriva.com/en/support/security/ ___ Package : x11-server Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: This fixes a format string vulnerability in the LogVHdrMessageVerb function in os/log.c when handling input device names in X.Org X11 server (CVE-2012-2118). MBS1 is not vulnerable to arbitrary code execution via this vulnerability because of the compiler options that were used to build it, but it can still cause a crash. ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2118 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0299 ___ Updated Packages: Mandriva Business Server 1/X86_64: 00a312b53f5f738eb99136baa320b377 mbs1/x86_64/x11-server-1.11.4-12.1.mbs1.x86_64.rpm 5d7904e06c3ac9f9a2ec7ffc17e08e84 mbs1/x86_64/x11-server-common-1.11.4-12.1.mbs1.x86_64.rpm 0afd9ce4b40f61de739c6e044b18214d mbs1/x86_64/x11-server-devel-1.11.4-12.1.mbs1.x86_64.rpm cd0740f1c1b38629c715d4928b5b073c mbs1/x86_64/x11-server-source-1.11.4-12.1.mbs1.noarch.rpm f67e5502f5a3f539b63f3035b6d2bfeb mbs1/x86_64/x11-server-xdmx-1.11.4-12.1.mbs1.x86_64.rpm 0ade415fecb6b7025db51ca751713284 mbs1/x86_64/x11-server-xephyr-1.11.4-12.1.mbs1.x86_64.rpm e876de003069ff43554b5df2bb44a92c mbs1/x86_64/x11-server-xfake-1.11.4-12.1.mbs1.x86_64.rpm a063fca83d52a911533a0e65507593c5 mbs1/x86_64/x11-server-xfbdev-1.11.4-12.1.mbs1.x86_64.rpm d77deac2203fab6cd1dcff00bee9c706 mbs1/x86_64/x11-server-xnest-1.11.4-12.1.mbs1.x86_64.rpm 0d404052d4611a66228afadf3ce406c9 mbs1/x86_64/x11-server-xorg-1.11.4-12.1.mbs1.x86_64.rpm 28d31da41ae4293f0565a25c385058bd mbs1/x86_64/x11-server-xvfb-1.11.4-12.1.mbs1.x86_64.rpm f2c9457f6009e3d0f1b6cf29b575128f mbs1/SRPMS/x11-server-1.11.4-12.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZWOCmqjQ0CJFipgRAsWxAJwLgz1JpCiGvTEgKYKW/AC8wTjpsQCg6hrX 4uir2ZgG/O3KO+jNnlFYOpc= =4lwv -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:129 ] squid
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:129 http://www.mandriva.com/en/support/security/ ___ Package : squid Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated squid packages fix security vulnerability: Due to missing input validation, the Squid cachemgr.cgi tool in Squid before 3.1.22 and 3.2.4 is vulnerable to a denial of service attack when processing specially crafted requests (CVE-2012-5643). It was discovered that the patch for CVE-2012-5643 was incorrect. A remote attacker could exploit this flaw to perform a denial of service attack (CVE-2013-0189). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5643 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0189 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0368 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0029 ___ Updated Packages: Mandriva Business Server 1/X86_64: 03f4a33d16e0ccb13c2b825fa9739e3c mbs1/x86_64/squid-3.1.19-5.2.mbs1.x86_64.rpm 0844295e6c832b20b53a89a6570bd632 mbs1/x86_64/squid-cachemgr-3.1.19-5.2.mbs1.x86_64.rpm 721e597deda6926578f64dd31b0df387 mbs1/SRPMS/squid-3.1.19-5.2.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZVfUmqjQ0CJFipgRAnhlAJ9orRIWER7dyp+HiX7vCDKsHuQv9QCfXOiO vh6AUMKiHIKi6QunM9En6Yg= =RwvM -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
[Full-disclosure] [ MDVSA-2013:140 ] asterisk
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:140 http://www.mandriva.com/en/support/security/ ___ Package : asterisk Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Multiple vulnerablilities was identified and fixed in asterisk: The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits different behavior for invalid INVITE, SUBSCRIBE, and REGISTER transactions depending on whether the user account exists, which allows remote attackers to enumerate account names by (1) reading HTTP status codes, (2) reading additional text in a 403 (aka Forbidden) response, or (3) observing whether certain retransmissions occur (CVE-2013-2264). Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-sets H.264 media attribute in a SIP Session Description Protocol (SDP) header (CVE-2013-2685). main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which allows remote attackers to conduct stack-consumption attacks and cause a denial of service (daemon crash) via a crafted HTTP POST request. NOTE: this vulnerability exists because of an incorrect fix for CVE-2012-5976 (CVE-2013-2686). The updated packages have upgraded to the 11.2.2 version which is not vulnerable to these issues ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2264 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2685 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2686 ___ Updated Packages: Mandriva Business Server 1/X86_64: a54f9c52287911d3009b9a4a63b0d9b5 mbs1/x86_64/asterisk-11.2.2-1.mbs1.x86_64.rpm bcb912383884c79bb03fff129c5e73a2 mbs1/x86_64/asterisk-addons-11.2.2-1.mbs1.x86_64.rpm df3e731ab622828d3fc24ce2d6d8ff05 mbs1/x86_64/asterisk-devel-11.2.2-1.mbs1.x86_64.rpm 6f50863ffe38eb34af0c815d1f72ed8e mbs1/x86_64/asterisk-firmware-11.2.2-1.mbs1.x86_64.rpm c9e37bd25faa73c7db9a80add5f4c41a mbs1/x86_64/asterisk-plugins-alsa-11.2.2-1.mbs1.x86_64.rpm 4ca4658e6c0789c9b1a8d08a35508127 mbs1/x86_64/asterisk-plugins-calendar-11.2.2-1.mbs1.x86_64.rpm 0422472f189ed9cc7b321d6aa545d083 mbs1/x86_64/asterisk-plugins-cel-11.2.2-1.mbs1.x86_64.rpm 7120a68c9917f2089bcc0573e61814af mbs1/x86_64/asterisk-plugins-corosync-11.2.2-1.mbs1.x86_64.rpm 229099ec3eb0ec8c9a158cd12b3c7381 mbs1/x86_64/asterisk-plugins-curl-11.2.2-1.mbs1.x86_64.rpm 0df35ef09a290759c86d2f83dc493317 mbs1/x86_64/asterisk-plugins-dahdi-11.2.2-1.mbs1.x86_64.rpm fca23ba0184fca97687de135bc6db938 mbs1/x86_64/asterisk-plugins-fax-11.2.2-1.mbs1.x86_64.rpm e8ef64d157e89569a24642df5ecd218d mbs1/x86_64/asterisk-plugins-festival-11.2.2-1.mbs1.x86_64.rpm dae0d37e87a647e9dcf7c103b2d75936 mbs1/x86_64/asterisk-plugins-ices-11.2.2-1.mbs1.x86_64.rpm 6003a92d49063d384f64557102de45a0 mbs1/x86_64/asterisk-plugins-jabber-11.2.2-1.mbs1.x86_64.rpm 7f24a0975072b8267514594124c59ab9 mbs1/x86_64/asterisk-plugins-jack-11.2.2-1.mbs1.x86_64.rpm 18c95e28ed7e2030296f89a228bb3866 mbs1/x86_64/asterisk-plugins-ldap-11.2.2-1.mbs1.x86_64.rpm 74d80afb084ae84a1d03df32fa150eeb mbs1/x86_64/asterisk-plugins-lua-11.2.2-1.mbs1.x86_64.rpm 34b054b98623abbef21308ff2ae9ce8e mbs1/x86_64/asterisk-plugins-minivm-11.2.2-1.mbs1.x86_64.rpm 3f5ec5d48595ce72b732e7041a221e5e mbs1/x86_64/asterisk-plugins-mobile-11.2.2-1.mbs1.x86_64.rpm c8dd361926bbf937381f38dd52b2c033 mbs1/x86_64/asterisk-plugins-mp3-11.2.2-1.mbs1.x86_64.rpm 18a3412d113e67bf89a1c7ccde2d6580 mbs1/x86_64/asterisk-plugins-mysql-11.2.2-1.mbs1.x86_64.rpm 73fa8038d86571a80a5bce4811a98186 mbs1/x86_64/asterisk-plugins-ooh323-11.2.2-1.mbs1.x86_64.rpm 825402b29cfba17e1927e732d9d5ec58 mbs1/x86_64/asterisk-plugins-osp-11.2.2-1.mbs1.x86_64.rpm 0c324752f143577ab5ec722519c92144 mbs1/x86_64/asterisk-plugins-oss-11.2.2-1.mbs1.x86_64.rpm 1ebf4f1ac970416960f0fe3507d94d40 mbs1/x86_64/asterisk-plugins-pgsql-11.2.2-1.mbs1.x86_64.rpm 17d23d345b78b40f91ac28ccf4adbcd6 mbs1/x86_64/asterisk-plugins-pktccops-11.2.2-1.mbs1.x86_64.rpm 548eb2
[Full-disclosure] [ MDVSA-2013:113 ] perl
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2013:113 http://www.mandriva.com/en/support/security/ ___ Package : perl Date: April 10, 2013 Affected: Business Server 1.0 ___ Problem Description: Updated perl packages fix security vulnerability: It was discovered that Perl's 'x' string repeat operator is vulnerable to a heap-based buffer overflow. An attacker could use this to execute arbitrary code (CVE-2012-5195). The _compile function in Maketext.pm in the Locale::Maketext implementation in Perl before 5.17.7 does not properly handle backslashes and fully qualified method names during compilation of bracket notation, which allows context-dependent attackers to execute arbitrary commands via crafted input to an application that accepts translation strings from users (CVE-2012-6329). In order to prevent an algorithmic complexity attack against its hashing mechanism, perl will sometimes recalculate keys and redistribute the contents of a hash. This mechanism has made perl robust against attacks that have been demonstrated against other systems. Research by Yves Orton has recently uncovered a flaw in the rehashing code which can result in pathological behavior. This flaw could be exploited to carry out a denial of service attack against code that uses arbitrary user input as hash keys. Because using user-provided strings as hash keys is a very common operation, we urge users of perl to update their perl executable as soon as possible. Updates to address this issue have bene pushed to main-5.8, maint-5.10, maint-5.12, maint-5.14, and maint-5.16 branches today. Vendors* were informed of this problem two weeks ago and are expected to be shipping updates today (or otherwise very soon) (CVE-2013-1667). ___ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5195 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6329 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1667 https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0352 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0032 https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0094 ___ Updated Packages: Mandriva Business Server 1/X86_64: e010dd5d07ad358f78a421e97d158cc5 mbs1/x86_64/perl-5.14.2-8.1.mbs1.x86_64.rpm 2b935278aa38f3ed01fb4859036fc17a mbs1/x86_64/perl-base-5.14.2-8.1.mbs1.x86_64.rpm 8b2791b988a751ad818bbae21854bfe4 mbs1/x86_64/perl-devel-5.14.2-8.1.mbs1.x86_64.rpm 54a4521ed44b8728a1fa8af387d1e9c2 mbs1/x86_64/perl-doc-5.14.2-8.1.mbs1.noarch.rpm c7d0a40057c4ec1d24baa9b605dea7cd mbs1/x86_64/perl-Locale-Maketext-1.220.0-2.1.mbs1.noarch.rpm 1e7634153853dabcec48738081b1c2ec mbs1/SRPMS/perl-5.14.2-8.1.mbs1.src.rpm e1790a3f5f3c579ce1e5e0cb43cb6b08 mbs1/SRPMS/perl-Locale-Maketext-1.220.0-2.1.mbs1.src.rpm ___ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/en/support/security/advisories/ If you want to report vulnerabilities, please contact security_(at)_mandriva.com ___ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) iD8DBQFRZTScmqjQ0CJFipgRAvvZAKDvNYwjKSP6aDS0eBOTxFY+DVg88QCeMtHw Djq+wBCBuU/OSJtapFhN4j0= =27uE -END PGP SIGNATURE- ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
