On Tue, 26 Jul 2011, Grant McChesney wrote:

> On Tue, Jul 26, 2011 at 8:30 AM, RobertH <[email protected]> wrote:
>
>> do you know why yum on centos4 is segfaulting on repoforge "extra" in the
>> past week or two?
>>
>> please forgive my lack of knowledge on it, i just see the result
>>
>> if you can direct me, ill be happy to gather more info
>>
>> i just noticed someone on centos list posted same
>
> I'm getting a segfault when I yum update with rpmforge enabled as well on
> CentOS 5.6.

Whatever the cause, yum segfaulting on any repository metadata is a 
security problem, possibly exploitable. We are looking at our side to find 
the cause (or a workaround). I do not seem to be able to reproduce this as 
of yet.

Regardless someone should fill this as a potential security-problem with 
the yum maintainers. I think they should be very concerned :-/

-- 
-- dag wieers, [email protected], http://dag.wieers.com/
-- dagit linux solutions, [email protected], http://dagit.net/

[Any errors in spelling, tact or fact are transmission errors]
_______________________________________________
users mailing list
[email protected]
http://lists.repoforge.org/mailman/listinfo/users

Reply via email to