cpio 보안 업데이트
Web Browser 로는 FTP 접속이 불가능 합니다.
문서번호 : 1269864111
업데이트 : 2010.03.29
상세내용
- security fix CVE-2010-0624
- fix writing multitape archives (bz#253917)
CVE-2010-0624:
Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c
in the rmt client functionality in GNU tar before 1.23 and GNU cpio
before 2.11 allows remote rmt servers to cause a denial of service
(memory corruption) or possibly execute arbitrary code by sending more
data than was requested, related to archive filenames that contain
a : (colon) character.
Autoupdates 지원 : 지원
update 패키지
RPMS :
. cpio-2.5-16.el48.1.i686.rpm
SRPMS :
. cpio-2.5-16.el48.1.src.rpm
참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0624
|