AnNyung 1.3 Update Notice

krb5 �� Ʈ

�� — Wed, 14 Jul 2010 02:56:59 +0900

krb5 �� Ʈ


�󼼳���

1.3.4-62.el48.2 update

- fixed CVE-2010-1321

CVE-2010-1321:
The kg_accept_krb5 function in krb5/accept_sec_context.c in the GSS-API
library in MIT Kerberos 5 (aka krb5) through 1.7.1 and 1.8 before 1.8.2,
as used in kadmind and other applications, does not properly check for
invalid GSS-API tokens, which allows remote authenticated users to cause
a denial of service (NULL pointer dereference and daemon crash) via an
AP-REQ message in which the authenticator's checksum field is missing.


Autoupdates ���� : Packages System
  pkgadd -F "krb5*"


update ��Ű��

  RPMS :

    . krb5-libs-1.3.4-62.el48.2.i686.rpm
    . krb5-server-1.3.4-62.el48.2.i686.rpm
    . krb5-workstation-1.3.4-62.el48.2.i686.rpm
    . krb5-devel-1.3.4-62.el48.2.i686.rpm

  SRPMS :

    . krb5-1.3.4-62.el48.2.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1321

strace ��Ʈ

�� — Mon, 21 Dec 2009 03:30:22 +0900

strace ��Ʈ


�󼼳���

- fixed BZ#538410


Autoupdates ���� : ����


update ��Ű��

  RPMS :

    . strace-4.5.16-1.el48.6.i686.rpm

  SRPMS :

    . strace-4.5.16-1.el48.6.src.rpm


���� :

net-snmp ��Ʈ

�� — Wed, 14 Jul 2010 02:17:31 +0900

net-snmp ��Ʈ


�󼼳���

* ���� ����
  - fix trap forwarding from SMUX peers (#462016)
  - implement 'v1trapaddress' snmpd.conf option to set fixed agent address in
    outgoing SNMPv1 traps (#437494)
  - implement 'dontLogTCPWrappersConnects' snmpd.conf option to turn off
    logging of incoming connections (#444657)
  - UDP responses are now sent from the interface that received the request
    (#447947)
  - snmpd no longer reports '-f' option as deprecated (#440220)
  - fix parsing of command line parameters to allow hostnames in
    specification of transport address (#447839)
  - fix a regression in 5.1.2-15 - snmptrapd no longer passes ""
    as hostname of sender of received trap (#437494)
  - fix crash in bulk request processing (#469371)
  - fix net-snmp package dependencies (#469679)
  - fix crash when parsing '-LS', '-LF' and '-LO' command line arguments
    (#469620)
  - fix UCD-SNMP-MIB::ssCpu* statistics - show one-minute load average instead
    of average since agent startup (#469607)
  - fix HOST-RESOURCES-MIB::hrProcessorLoad - show one-minute load average instead
    of average since last query (#458996)
  - fix UCD-SNMP-MIB::dskPercent to support filesystems > 32TB (#474161)
  - fix regressions caused by new compilation flags
  - fix ifSpeed of inactive interfaces (#562754)


Autoupdates ���� : Packages System
    pkgadd -F net-snmp*
	pkgadd -F perl-SNMP


update ��Ű��

  RPMS :

    . net-snmp-5.1.2-18.el48.2.i686.rpm
    . net-snmp-devel-5.1.2-18.el48.2.i686.rpm
    . net-snmp-utils-5.1.2-18.el48.2.i686.rpm
    . perl-SNMP-5.1.2-18.el48.2.i686.rpm

  SRPMS :

    . net-snmp-5.1.2-18.el48.2.src.rpm

���� :

perl �� Ʈ

�� — Sat, 10 Jul 2010 03:10:50 +0900

perl �� Ʈ


�󼼳���

���ȹ��� fix:

  . CVE-2008-5302
  Race condition in the rmtree function in File::Path 1.08 and 2.07
  (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create
  arbitrary setuid binaries via a symlink attack, a different vulnerability
  than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a
  regression error related to CVE-2005-0448. It is different from CVE-2008-5303
  due to affected versions.

  . CVE-2010-1168
  he Safe (aka Safe.pm) module before 2.25 for Perl allows context-dependent
  attackers to bypass intended (1) Safe::reval and (2) Safe::rdo access
  restrictions, and inject and execute arbitrary code, via vectors involving
  implicitly called methods and implicitly blessed objects, as demonstrated
  by the (a) DESTROY and (b) AUTOLOAD methods, related to "automagic methods."

  . CVE-2010-1447
  The Safe (aka Safe.pm) module 2.26, and certain earlier versions, for Perl,
  as used in PostgreSQL 7.4 before 7.4.29, 8.0 before 8.0.25, 8.1 before 8.1.21,
  8.2 before 8.2.17, 8.3 before 8.3.11, 8.4 before 8.4.4, and 9.0 Beta before 9.0
  Beta 2, allows context-dependent attackers to bypass intended (1) Safe::reval
  and (2) Safe::rdo access restrictions, and inject and execute arbitrary code,
  via vectors involving subroutine references and delayed execution.

  . CVE-2008-5302
  Race condition in the rmtree function in File::Path 1.08 and 2.07
  (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create
  arbitrary setuid binaries via a symlink attack, a different vulnerability
  than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a
  regression error related to CVE-2005-0448. It is different from CVE-2008-5303
  due to affected versions.


Autoupdates ���� : ����


update ��Ű��

  RPMS :

    . perl-5.8.8-32.el5.i686.rpm

  SRPMS :

    . perl-5.8.8-32.el5.src.rpm


���� : 
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5302
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1168
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1447
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5302

php 5.x �� Ʈ

�� — Sat, 10 Jul 2010 01:22:26 +0900

php 5.x �� Ʈ


�󼼳���

* ���� ���� fix
  . CVE-2010-0397
  The xmlrpc extension in PHP 5.3.1 does not properly handle a missing
  methodName element in the first argument to the xmlrpc_decode_request
  function, which allows context-dependent attackers to cause a denial
  of service (NULL pointer dereference and application crash) and possibly
  have unspecified other impact via a crafted argument.

  . CVE-2010-2225
  Use-after-free vulnerability in the SplObjectStorage unserializer in
  PHP 5.2.x and 5.3.x through 5.3.2 allows remote attackers to execute
  arbitrary code or obtain sensitive information via serialized data,
  related to the PHP unserialize function.


Autoupdates ���� : �Ϻ� ����
  pkgsysupdate -v

  pkgadd -F "php*"


update ��Ű��

  RPMS :

    + PHP5

    . php-binary-5.2.6-7.i686.rpm

    . php-5.2.6-7.i686.rpm
    . php-fcgi-5.2.6-7.i686.rpm
    . php-devel-5.2.6-7.i686.rpm
    . php-gd-5.2.6-7.i686.rpm
    . php-mssql-5.2.6-7.i686.rpm
    . php-bcmath-5.2.6-7.i686.rpm
    . php-geoip-5.2.6-7.i686.rpm
    . php-mysql-5.2.6-7.i686.rpm
    . php-gettext-5.2.6-7.i686.rpm
    . php-mysqli-5.2.6-7.i686.rpm
    . php-bz2-5.2.6-7.i686.rpm
    . php-hash-5.2.6-7.i686.rpm
    . php-openssl-5.2.6-7.i686.rpm
    . php-calendar-5.2.6-7.i686.rpm
    . php-iconv-5.2.6-7.i686.rpm
    . php-pdo-5.2.6-7.i686.rpm
    . php-curl-5.2.6-7.i686.rpm
    . php-imap-5.2.6-7.i686.rpm
    . php-pdo-mysql-5.2.6-7.i686.rpm
    . php-dba-5.2.6-7.i686.rpm
    . php-korean-5.2.6-7.i686.rpm
    . php-pdo-pgsql-5.2.6-7.i686.rpm
    . php-krisp-5.2.6-7.i686.rpm
    . php-pgsql-5.2.6-7.i686.rpm
    . php-eaccelerator-5.2.6-7.i686.rpm
    . php-rrd-5.2.6-7.i686.rpm
    . php-exif-5.2.6-7.i686.rpm
    . php-mcrypt-5.2.6-7.i686.rpm
    . php-sockets-5.2.6-7.i686.rpm
    . php-fileinfo-5.2.6-7.i686.rpm
    . php-memcache-5.2.6-7.i686.rpm
    . php-sqlite-5.2.6-7.i686.rpm
    . php-ftp-5.2.6-7.i686.rpm
    . php-mhash-5.2.6-7.i686.rpm
    . php-yp-5.2.6-7.i686.rpm
    . php-nis-5.2.6-7.i686.rpm
    . php-json-5.2.6-7.i686.rpm


  SRPMS :

    . php-5.2.6-7.src.rpm
    . php-extension-5.2.6-7.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0397
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2225

libkrisp ��

�� — Mon, 07 Jun 2010 04:24:06 +0900

libkrisp ��


�󼼳���

2.1.5-1 ������Ʈ:

- 2.1.4-1 ������Ʈ �� ��, loinip field type�� �߸� �Ǿ� �߸��� ��� ������
  ���� �ذ�


Autoupdates ���� : ����
  pkgsysupdate
  or
  pkgadd -F "libkrisp*"


update ��Ű��

  RPMS :

    . libkrisp-2.1.5-1.i686.rpm
    . libkrisp-devel-2.1.5-1.i686.rpm

  SRPMS :

    . libkrisp-2.1.5-1.src.rpm


���� :
http://devel.oops.org/index.php?c=5
http://devel.oops.org/viewtopic.php?t=85

libkrisp ��

�� — Sat, 05 Jun 2010 21:08:01 +0900

libkrisp ��


�󼼳���

2.1.4-1 ������Ʈ:

- 2.1.2-2 ������Ʈ �� ��, krnic data �˻� �����ϴ� ���� ����
- 201006 database update


Autoupdates ���� : ����
  pkgsysupdate
  or
  pkgadd -F "libkrisp*"


update ��Ű��

  RPMS :

    . libkrisp-2.1.4-1.i686.rpm
    . libkrisp-devel-2.1.4-1.i686.rpm

  SRPMS :

    . libkrisp-2.1.4-1.src.rpm


���� :
http://devel.oops.org/index.php?c=5
http://devel.oops.org/viewtopic.php?t=85

initscript ��Ʈ

�� — Sat, 15 May 2010 19:29:23 +0900

initscript ��Ʈ


�󼼳���

* SSH_LANG ����
  SSH client���� SSH_LANG ȯ�� ������ �����ϸ�, LANG ȯ�� ������ �ݿ��ϵ��� ����


Autoupdates ���� : ����
  pkgsysupdate -v


update ��Ű��

  RPMS :

    . initscripts-6.67-16.i686.rpm


  SRPMS :

    . initscripts-6.67-16.src.rpm


���� :

openssh ��Ʈ

�� — Thu, 13 May 2010 14:26:47 +0900

openssh ��Ʈ


�󼼳���

- 5.5p1 update

* openssh �ȳ� ������ �߰� ����

  . -H �ɼ����� host key check�� ���� ���� �� �ֽ��ϴ�. ��ũ��Ʈ��
    ���� ��� key ����� �Ǿ� ���� �ʾƼ� block�� �Ǵ� ��� �����ϰ�
    ����� �� �ֽ��ϴ�.
  . ssh �ѱ�.com�� ���� multibyte �������� ���� ����Ͻ� �� �ֽ��ϴ�.
  . 5.5p1 ���� sftp readline patch�� ���� �Ǿ����ϴ�.


Autoupdates ���� : ����


update ��Ű��

  RPMS :

    . openssh-5.5p1-1.i686.rpm
    . openssh-clients-5.5p1-1.i686.rpm
    . openssh-server-5.5p1-1.i686.rpm

  SRPMS :

    . openssh-5.5p1-1.src.rpm


���� : 
http://openssh.org/txt/release-5.5

libkrisp ��

�� — Sat, 10 Apr 2010 03:31:59 +0900

libkrisp ��


�󼼳���

2.1.2-2 ������Ʈ:

- �ѱ� IP�� �ƴ� ���, ���� ������ �ѱ����� ������ ���� ����
- 201004 database update


Autoupdates ���� : Pakcages System �̿�
  pkgadd -F "libkrisp*"


update ��Ű��

  RPMS :

    . libkrisp-2.1.2-2.i686.rpm
    . libkrisp-devel-2.1.2-2.i686.rpm

  SRPMS :

    . libkrisp-2.1.2-2.src.rpm


���� :
http://devel.oops.org/index.php?c=5
http://devel.oops.org/viewtopic.php?t=85

sendmail �� Ʈ

�� — Thu, 01 Apr 2010 22:13:35 +0900

sendmail �� Ʈ


�󼼳���

8.14.4 update
CVE-2009-4565 fixed

CVE-2009-4565:
sendmail before 8.14.4 does not properly handle a '\0' character in a
Common Name (CN) field of an X.509 certificate, which (1) allows
man-in-the-middle attackers to spoof arbitrary SSL-based SMTP servers
via a crafted server certificate issued by a legitimate Certification
Authority, and (2) allows remote attackers to bypass intended access
restrictions via a crafted client certificate issued by a legitimate
Certification Authority, a related issue to CVE-2009-2408.


* ����

sendmail update �Ŀ�, ������ sendmail.cf �� sendmail.cf.rpmsave ��
����� �˴ϴ�. �׷��Ƿ� ������ ������ �� sendmail.cf �� ������ �ּž�
�մϴ�. ��ġ�� �⺻������ ����Ͻ� �ٸ� �Ű澲�� �ʾƵ� ��� �����ϴ�.


Autoupdates ���� : Packages System
  pkgadd -F "sendmail*"


update ��Ű��

  RPMS :

    . sendmail-8.14.4-1.i686.rpm
    . sendmail-devel-8.14.4-1.i686.rpm
    . sendmail-cf-8.14.4-1.i686.rpm

  SRPMS :

    . sendmail-8.14.4-1.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4565

curl �� Ʈ

�� — Wed, 19 Aug 2009 20:40:46 +0900

curl �� Ʈ


�󼼳���

7.12.1-11.1.el4.1 update

- fixed CVE-2009-2417

CVE-2009-2417:
lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is
used, does not properly handle a '

openssl097 �� Ʈ

�� — Thu, 01 Apr 2010 21:04:07 +0900

openssl097 �� Ʈ


�󼼳���

openssl097a ��Ű���� openssl 0.9.7 library �� link �ϵ��� �����
���̳ʸ��� openssl 0.9.7 �� �䱸�ϴ� ����ȯ���� ���Ͽ� �����Ǵ�
ȣȯ ���̺귯�� �Դϴ�.

�� ���̺귯���� �̿��Ͽ� ���带 �� ��쿡�� ������ ������ �����ؾ�
�մϴ�.

�� ���̺귯���� RHEL 4 �� openssl 0.9.7a-43.17.el48.5 �� �̿��Ͽ� �ۼ��� �Ǿ�
���ϴ�.

1. header file include ��..
   #include <openssl/xxx.h> �� #include <openssl097a/xxx.h> �� �����ؾ�
   �մϴ�.

2. library ��ũ��..
   -lssl �̳� -lcrypto �� ��� -lssl097a �� -lcrypto097a �� �����ؼ� ����
   �ؾ� �մϴ�.

Security fix
- CVE-2009-0590
- CVE-2009-2409
- CVE-2009-3555

CVE-2009-0590
The ASN1_STRING_print_ex function in OpenSSL before 0.9.8k allows remote
attackers to cause a denial of service (invalid memory access and
application crash) via vectors that trigger printing of a (1) BMPString
or (2) UniversalString with an invalid encoded length.

CVE-2009-2409
The Network Security Services (NSS) library before 3.12.3, as used in
Firefox; GnuTLS before 2.6.4 and 2.7.4; OpenSSL 0.9.8 through 0.9.8k;
and other products support MD2 with X.509 certificates, which might allow
remote attackers to spoof certificates by using MD2 design flaws to
generate a hash collision in less than brute-force time. NOTE: the scope
of this issue is currently limited because the amount of computation
required is still large.

CVE-2009-3555
The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used
in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the
Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5
and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier,
multiple Cisco products, and other products, does not properly associate
renegotiation handshakes with an existing connection, which allows
man-in-the-middle attackers to insert data into HTTPS sessions, and
possibly other types of sessions protected by TLS or SSL, by sending an
unauthenticated request that is processed retroactively by a server in
a post-renegotiation context, related to a "plaintext injection" attack,
aka the "Project Mogul" issue.


Autoupdates ���� : ����
  pkgsysupdate


update ��Ű��

  RPMS :

    . openssl097a-0.9.7a-43.17.el48.5.noarch.rpm
    . openssl097a-devel-0.9.7a-43.17.el48.5.noarch.rpm
    . openssl097a-doc-0.9.7a-43.17.el48.5.noarch.rpm


  SRPMS :

    . openssl097a-0.9.7a-43.17.el48.5.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0590
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2409
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555

tar �� Ʈ

�� — Mon, 29 Mar 2010 21:06:01 +0900

tar �� Ʈ


�󼼳���

- security fix
  CVE-2007-4476
  CVE-2010-0624

CVE-2007-4476:

Buffer overflow in the safer_name_suffix function in GNU tar has
unspecified attack vectors and impact, resulting in a "crashing
stack."

CVE-2010-0624:

Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c
in the rmt client functionality in GNU tar before 1.23 and GNU cpio
before 2.11 allows remote rmt servers to cause a denial of service
(memory corruption) or possibly execute arbitrary code by sending more
data than was requested, related to archive filenames that contain a
: (colon) character.


Autoupdates ���� : ����


update ��Ű��

  RPMS :

    . tar-1.14-16.el48.1.i686.rpm


  SRPMS :

    . tar-1.14-16.el48.1.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4476
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0624

cpio �� Ʈ

�� — Mon, 29 Mar 2010 21:01:51 +0900

cpio �� Ʈ


�󼼳���

- security fix CVE-2010-0624
- fix writing multitape archives (bz#253917)

CVE-2010-0624:
Heap-based buffer overflow in the rmt_read__ function in lib/rtapelib.c
in the rmt client functionality in GNU tar before 1.23 and GNU cpio
before 2.11 allows remote rmt servers to cause a denial of service
(memory corruption) or possibly execute arbitrary code by sending more
data than was requested, related to archive filenames that contain
a : (colon) character.


Autoupdates ���� : ����


update ��Ű��

  RPMS :

    . cpio-2.5-16.el48.1.i686.rpm


  SRPMS :

    . cpio-2.5-16.el48.1.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0624

mysql ��Ʈ

�� — Fri, 12 Mar 2010 17:27:01 +0900

mysql ��Ʈ


�󼼳���

- mysql 5.0.90 update


Autoupdates ���� : Packages System
  pkgadd -F "mysql*"


update ��Ű��

  RPMS :
    . mysql-5.0.90-1.i686.rpm
    . mysql-devel-5.0.90-1.i686.rpm
    . mysql-client-5.0.90-1.i686.rpm
    . mysql-shared-5.0.90-1.i686.rpm

  SRPMS :

    . mysql-5.0.90-1.src.rpm


���� :

proftpd ��Ʈ

�� — Wed, 10 Mar 2010 02:29:51 +0900

proftpd ��Ʈ


�󼼳���

1.3.2e-1 ������Ʈ

* ���� ����

- Bug 3342 - FEAT response contains LF without preceding CR.


Autoupdates ���� : ����
  pkgsysupdate
  pkgadd -F proftpd-devel


update ��Ű��

  RPMS :

    . proftpd-1.3.2e-1.i686.rpm
    . proftpd-devel-1.3.2e-1.i686.rpm

  SRPMS :

    . proftpd-1.3.2e-1.src.rpm


���� :

php 5.x �� Ʈ

�� — Mon, 25 Jan 2010 18:41:45 +0900

php 5.x �� Ʈ


�󼼳���

* ���� ���� fix
  . CVE-2009-2687
  The exif_read_data function in the Exif module in PHP before 5.2.10 allows
  remote attackers to cause a denial of service (crash) via a malformed JPEG
  image with invalid offset fields, a different issue than CVE-2005-3353.

  . CVE-2009-3291
  The php_openssl_apply_verification_policy function in PHP before 5.2.11 does
  not properly perform certificate validation, which has unknown impact and
  attack vectors, probably related to an ability to spoof certificates.

  . CVE-2009-3292
  Unspecified vulnerability in PHP before 5.2.11, and 5.3.x before 5.3.1, has
  unknown impact and attack vectors related to "missing sanity checks around
  exif processing."

  . CVE-2009-3546
  The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1,
  and the GD Graphics Library 2.x, does not properly verify a certain colorsTotal
  structure member, which might allow remote attackers to conduct buffer overflow
  or buffer over-read attacks via a crafted GD file, a different vulnerability
  than CVE-2009-3293. NOTE: some of these details are obtained from third party
  information.

  . CVE-2009-4017
  PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of
  temporary files created when handling a multipart/form-data POST request,
  which allows remote attackers to cause a denial of service (resource
  exhaustion), and makes it easier for remote attackers to exploit local file
  inclusion vulnerabilities, via multiple requests, related to lack of support
  for the max_file_uploads directive.

  . CVE-2009-4142
  The htmlspecialchars function in PHP before 5.2.12 does not properly handle (1)
  overlong UTF-8 sequences, (2) invalid Shift_JIS sequences, and (3) invalid
  EUC-JP sequences, which allows remote attackers to conduct cross-site scripting
  (XSS) attacks by placing a crafted byte sequence before a special character.


* sqlrelqy 0.41 update


Autoupdates ���� : �Ϻ� ����
  pkgsysupdate -v

  pkgadd -F "php*"


update ��Ű��

  RPMS :

    + PHP5

    . php-binary-5.2.6-6.i686.rpm

    . php-5.2.6-6.i686.rpm
    . php-fcgi-5.2.6-6.i686.rpm
    . php-devel-5.2.6-6.i686.rpm
    . php-gd-5.2.6-6.i686.rpm
    . php-mssql-5.2.6-6.i686.rpm
    . php-bcmath-5.2.6-6.i686.rpm
    . php-geoip-5.2.6-6.i686.rpm
    . php-mysql-5.2.6-6.i686.rpm
    . php-gettext-5.2.6-6.i686.rpm
    . php-mysqli-5.2.6-6.i686.rpm
    . php-bz2-5.2.6-6.i686.rpm
    . php-hash-5.2.6-6.i686.rpm
    . php-openssl-5.2.6-6.i686.rpm
    . php-calendar-5.2.6-6.i686.rpm
    . php-iconv-5.2.6-6.i686.rpm
    . php-pdo-5.2.6-6.i686.rpm
    . php-curl-5.2.6-6.i686.rpm
    . php-imap-5.2.6-6.i686.rpm
    . php-pdo-mysql-5.2.6-6.i686.rpm
    . php-dba-5.2.6-6.i686.rpm
    . php-korean-5.2.6-6.i686.rpm
    . php-pdo-pgsql-5.2.6-6.i686.rpm
    . php-krisp-5.2.6-6.i686.rpm
    . php-pgsql-5.2.6-6.i686.rpm
    . php-eaccelerator-5.2.6-6.i686.rpm
    . php-rrd-5.2.6-6.i686.rpm
    . php-exif-5.2.6-6.i686.rpm
    . php-mcrypt-5.2.6-6.i686.rpm
    . php-sockets-5.2.6-6.i686.rpm
    . php-fileinfo-5.2.6-6.i686.rpm
    . php-memcache-5.2.6-6.i686.rpm
    . php-sqlite-5.2.6-6.i686.rpm
    . php-ftp-5.2.6-6.i686.rpm
    . php-mhash-5.2.6-6.i686.rpm
    . php-yp-5.2.6-6.i686.rpm
    . php-nis-5.2.6-6.i686.rpm
    . php-json-5.2.6-6.i686.rpm


  SRPMS :

    . php-5.2.6-6.src.rpm
    . php-extension-5.2.6-6.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2687
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3291
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3292
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3546
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4017
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4142

bind �� Ʈ

�� — Mon, 25 Jan 2010 02:41:12 +0900

bind �� Ʈ


�󼼳���

- 9.4.3-5 (9.4.3-P5) update
- root name server information update
- fixed CVE-2010-0097
- fixed CVE-2010-0290

. CVE-2010-0097:
A flaw was found in the BIND DNSSEC NSEC/NSEC3 validation code. If BIND was
running as a DNSSEC-validating resolver, it could incorrectly cache
NXDOMAIN responses, as if they were valid, for records proven by NSEC or
NSEC3 to exist. A remote attacker could use this flaw to cause a BIND
server to return the bogus, cached NXDOMAIN responses for valid records and
prevent users from retrieving those records (denial of service).

. CVE-2010-0290:
The original fix for CVE-2009-4022 was found to be incomplete. BIND was
incorrectly caching certain responses without performing proper DNSSEC
validation. CNAME and DNAME records could be cached, without proper DNSSEC
validation, when received from processing recursive client queries that
requested DNSSEC records but indicated that checking should be disabled. A
remote attacker could use this flaw to bypass the DNSSEC validation check
and perform a cache poisoning attack if the target BIND server was
receiving such client queries.


Autoupdates ���� : �Ϻ� ����
  pkgsysupdate && pkgadd -F "bind*"


update ��Ű��

  RPMS :

    . bind-9.4.3-5.i686.rpm
    . bind-utils-9.4.3-5.i686.rpm
    . bind-devel-9.4.3-5.i686.rpm

  SRPMS :

    . bind-9.4.3-5.src.rpm


���� :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0097
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0290

ypserv ��Ʈ

�� — Mon, 25 Jan 2010 02:10:00 +0900

ypserv ��Ʈ


�󼼳���

* in the previous ypserv package, ypserv logged a lot of common errors
that are safe to ignore. In this updated package, the verbosity of ypserv
logs has been decreased for certain common errors.

* some binaries -- mainly ypserv -- were stripped of debugging symbols,
even though a debuginfo package was available. In these cases, no debugging
symbols were available when using ypservb.

* in the previous ypserv package, "/var/yp/Makefile" did not fail when the
NIS/YP domain name was set to "none". This was seen by running the "make -C
/var/yp" command. Now, for these situations, the "make -C /var/yp" command
fails, and an error occurs.


Autoupdates ���� : Packages system
  pkgadd -F ypserv


update ��Ű��

  RPMS :

    . ypserv-2.19-15.el5.i686.rpm

  SRPMS :

    . ypserv-2.19-15.el5.src.rpm


���� :

AnNyung 1.3 Update Notice

krb5 ���� ������Ʈ

strace ������Ʈ

net-snmp ������Ʈ

perl ���� ������Ʈ

php 5.x ���� ������Ʈ

libkrisp ���� ����

libkrisp ���� ����

initscript ������Ʈ

openssh ������Ʈ

libkrisp ���� ����

sendmail ���� ������Ʈ

curl ���� ������Ʈ

openssl097 ���� ������Ʈ

tar ���� ������Ʈ

cpio ���� ������Ʈ

mysql ������Ʈ

proftpd ������Ʈ

php 5.x ���� ������Ʈ

bind ���� ������Ʈ

ypserv ������Ʈ

krb5 �� Ʈ

strace ��Ʈ

net-snmp ��Ʈ

perl �� Ʈ

php 5.x �� Ʈ

libkrisp ��

libkrisp ��

initscript ��Ʈ

openssh ��Ʈ

libkrisp ��

sendmail �� Ʈ

curl �� Ʈ

openssl097 �� Ʈ

tar �� Ʈ

cpio �� Ʈ

mysql ��Ʈ

proftpd ��Ʈ

php 5.x �� Ʈ

bind �� Ʈ

ypserv ��Ʈ