AnNyung 1.3 Update Notice

PHP 보안 업데이트

김정균 — Tue, 10 Jan 2017 04:56:09 +0900

PHP 보안 업데이트


상세내용

* 보안 버그 fix
  . nosafe_mode_exec_dir: backtics and $() syntax weakness after semi colon #8
    https://github.com/OOPS-ORG-PHP/mod_execdir/issues/8


Autoupdates 지원 : 일부 지원
  pkgsysupdate -v

  pkgadd -F "php*"


update 패키지

  RPMS :

    + PHP5

    . php-binary-5.2.17-4.i686.rpm

    . php-5.2.17-4.i686.rpm
    . php-fcgi-5.2.17-4.i686.rpm
    . php-devel-5.2.17-4.i686.rpm
    . php-gd-5.2.17-4.i686.rpm
    . php-openssl-5.2.17-4.i686.rpm
    . php-iconv-5.2.17-4.i686.rpm
    . php-pdo-5.2.17-4.i686.rpm
    . php-sqlite-5.2.17-4.i686.rpm


  SRPMS :

    . php-5.2.17-4.src.rpm


참고 :
https://github.com/OOPS-ORG-PHP/mod_execdir/issues/8

glibc 보안 업데이트

김정균 — Fri, 30 Jan 2015 15:20:43 +0900

glibc 보안 업데이트


상세내용

- security fix

  . CVE-2015-0235

    Heap-based buffer overflow in the __nss_hostname_digits_dots function
    in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent
    attackers to execute arbitrary code via vectors related to the (1)
    gethostbyname or (2) gethostbyname2 function, aka "GHOST."


Autoupdates 지원 : 지원
  pkgsysupdate
  pkgadd -F nscd

  pkgadd 전에 pkgdb 를 한번 실행하고 해 주십시오.


update 패키지

  RPMS :

    . glibc-2.2.4-39.i686.rpm
    . glibc-2.2.4-39.i686.rpm
    . glibc-common-2.2.4-39.i686.rpm
    . glibc-profile-2.2.4-39.i686.rpm
    . nscd-2.2.4-39.i686.rpm

  SRPMS :

    . glibc-2.2.4-39.src.rpm

참고 :
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0235
http://www.securityfocus.com/archive/1/534555

bash 보안 업데이트

김정균 — Thu, 02 Oct 2014 16:00:20 +0900

bash 보안 업데이트


상세내용

. 보안 이슈
  - fixed CVE-2014-7186

    GNU Bash through 4.3 bash43-025 processes trailing strings after
    certain malformed function definitions in the values of environment
    variables, which allows remote attackers to write to files or
    possibly have unknown other impact via a crafted environment, as
    demonstrated by vectors involving the ForceCommand feature in
    OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache
    HTTP Server, scripts executed by unspecified DHCP clients, and
    other situations in which setting the environment occurs across
    a privilege boundary from Bash execution. NOTE: this vulnerability
    exists because of an incomplete fix for CVE-2014-6271.


Autoupdates 지원 : 지원


update 패키지

  RPMS :

    . bash-3.0-27.2.i686.rpm

  SRPMS :

    . bash-3.0-27.2.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7186

bash 보안 업데이트

김정균 — Tue, 30 Sep 2014 01:01:19 +0900

bash 보안 업데이트


상세내용

. 수정 사항

- Don't ship examples/loadable any more.
  Resolves: #448905
- Recycle pids so bash waits for process to end
- Added patch to recycle pids like in bash-4.0
  Resolves: #521134
- Recycle pids so bash waits for process to end
- Added patch to recycle pids like in bash-4.0
  Resolves: #521134
- bash globbing sometimes ignores locale settings
  Resolves: #539538
- check for invalid multibyte string when setting IFS
  Resolves: #539536
- patch for read memory leak
  Resolves: #537029
- Use `mktemp' for temporary files
  Resolves: #657500
- Don't include backup files
  Resolves: #657500
- Fixed bash-3.0-tmpfile.patch
  Resolves: #657500
- Don't include backup files
  Resolves: #657500

. 보안 이슈
- fixed CVE-2014-6271
- fixed CVE-2014-7169



Autoupdates 지원 : 지원


update 패키지

  RPMS :

    . bash-3.0-27.1.i686.rpm

  SRPMS :

    . bash-3.0-27.1.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7169

php 5.2 보안 업데이트

김정균 — Mon, 02 Sep 2013 01:44:27 +0900

php 5.2 보안 업데이트


상세내용

* 보안 버그 fix
  . CVE-2013-4073 Fixed openssl handling null bytes in subjectAltName
  . CVE-2013-4113 heap corruption in xml parser (#65236)


Autoupdates 지원 : 일부 지원
  pkgsysupdate -v

  pkgadd -F "php*"


update 패키지

  RPMS :

    + PHP5

    . php-binary-5.2.17-3.i686.rpm

    . php-5.2.17-3.i686.rpm
    . php-fcgi-5.2.17-3.i686.rpm
    . php-devel-5.2.17-3.i686.rpm
    . php-gd-5.2.17-3.i686.rpm
    . php-openssl-5.2.17-3.i686.rpm
    . php-iconv-5.2.17-3.i686.rpm
    . php-pdo-5.2.17-3.i686.rpm
    . php-sqlite-5.2.17-3.i686.rpm


  SRPMS :

    . php-5.2.17-3.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4073
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4113

php 5.2 버그 수정

김정균 — Mon, 05 Aug 2013 18:16:40 +0900

php 5.2 버그 수정


상세내용

* 버그 수정
  . Zend Optimizer 또는 ioncube 사용시 zend_error_noreturn symbol error 수정


Autoupdates 지원 : 일부 지원
  pkgsysupdate -v

  pkgadd -F "php*"


update 패키지

  RPMS :

    + PHP5

    . php-binary-5.2.17-2.i686.rpm

    . php-5.2.17-2.i686.rpm
    . php-fcgi-5.2.17-2.i686.rpm
    . php-devel-5.2.17-2.i686.rpm
    . php-gd-5.2.17-2.i686.rpm
    . php-openssl-5.2.17-2.i686.rpm
    . php-iconv-5.2.17-2.i686.rpm
    . php-pdo-5.2.17-2.i686.rpm
    . php-sqlite-5.2.17-2.i686.rpm


  SRPMS :

    . php-5.2.17-2.src.rpm


참고 :

bind 보안 업데이트

김정균 — Sun, 07 Jul 2013 04:17:08 +0900

bind 보안 업데이트


상세내용

- 9.4-ESV-R5-P1 update
- update named.root
- fixed CVE-2012-1667
- fixed CVE-2012-4244
- fixed CVE-2012-5166

. CVE-2012-1667
ISC BIND 9.x before 9.7.6-P1, 9.8.x before 9.8.3-P1, 9.9.x before 9.9.1-P1,
and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P1 does not properly handle
resource records with a zero-length RDATA section, which allows remote
DNS servers to cause a denial of service (daemon crash or data corruption)
or obtain sensitive information from process memory via a crafted record.

. CVE-2012-4244
ISC BIND 9.x before 9.7.6-P3, 9.8.x before 9.8.3-P3, 9.9.x before 9.9.1-P3,
and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P3 allows remote attackers to
cause a denial of service (assertion failure and named daemon exit) via a
query for a long resource record.

. CVE-2012-5166
ISC BIND 9.x before 9.7.6-P4, 9.8.x before 9.8.3-P4, 9.9.x before 9.9.1-P4,
and 9.4-ESV and 9.6-ESV before 9.6-ESV-R7-P4 allows remote attackers to
cause a denial of service (named daemon hang) via unspecified combinations
of resource records.


Autoupdates 지원 : 일부 지원
  pkgsysupdate && pkgadd -F "bind*"


update 패키지

  RPMS :

    . bind-9.4.ESV.R5.P1-1.i686.rpm
    . bind-utils-9.4.ESV.R5.P1-1.i686.rpm
    . bind-devel-9.4.ESV.R5.P1-1.i686.rpm

  SRPMS :

    . bind-9.4.ESV.R5.P1-1.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1667
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4244
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5166

apache 보안 업데이트

김정균 — Sat, 06 Jul 2013 05:25:12 +0900

apache 보안 업데이트


상세내용

- apache 1.3.42-1 update

- 보안버그 수정 사항

. CVE-2011-3368
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x
through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with
use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for
configuration of a reverse proxy, which allows remote attackers to send
requests to intranet servers via a malformed URI containing an initial @
(at sign) character.

. CVE-2011-4317
The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x
through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch
is in place, does not properly interact with use of (1) RewriteRule and (2)
ProxyPassMatch pattern matches for configuration of a reverse proxy, which
allows remote attackers to send requests to intranet servers via a malformed
URI containing an @ (at sign) character and a : (colon) character in invalid
positions. NOTE: this vulnerability exists because of an incomplete fix for
CVE-2011-3368.


Autoupdates 지원 : Packages System
    pkgadd -F "apache*"


update 패키지

  RPMS :

    . apache-1.3.42-1.i686.rpm
    . apache-devel-1.3.42-1.i686.rpm

  SRPMS :

    . apache-1.3.42-1.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3368
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4317

rsync 업데이트

김정균 — Sat, 06 Jul 2013 05:24:18 +0900

rsync 업데이트


상세내용

- 3.0.6 update


Autoupdates 지원 : Packages System
    pkgadd -F "rsync"


update 패키지

  RPMS :

    . rsync-3.0.6-9.el6.i686.rpm

  SRPMS :

    . rsync-3.0.6-9.el6.src.rpm


참고 :

pkgadm 업데이트

김정균 — Sat, 22 Jun 2013 05:30:55 +0900

pkgadm 업데이트


상세내용

* php 5.2.17 업데이트 이후, putfile_lib api 관련 경고 출력 수정


Autoupdates 지원 : 지원
  pkgsysupdate


update 패키지

  RPMS :

    . pkgadm-3.3.3-5.noarch.rpm

  SRPMS :

    . pkgadm-3.3.3-5.src.rpm


참고 :

php 5.2 보안 업데이트

김정균 — Sat, 22 Jun 2013 05:30:24 +0900

php 5.2 보안 업데이트


상세내용

* 5.2.17 update
* mod_korean 0.1.5 update
* 5.2.17 official bug 수정
  . #53568 swapped memset arguments in struct initialization
  . #54262 Crash when assigning value to a dimension in a non-array
  . #54265 crash when variable gets reassigned in error handler

* 보안 버그 fix
  . CVE-2010-4150
  . CVE-2010-3436
  . CVE-2010-3709
  . CVE-2010-2531
  . CVE-2010-2484
  . CVE-2010-3870
  . CVE-2008-2371
  . CVE-2008-3658
  . CVE-2008-3659
  . CVE-2008-3660
  . CVE-2008-2829


Autoupdates 지원 : 일부 지원
  pkgsysupdate -v

  pkgadd -F "php*"


update 패키지

  RPMS :

    + PHP5

    . php-binary-5.2.17-1.i686.rpm

    . php-5.2.17-1.i686.rpm
    . php-fcgi-5.2.17-1.i686.rpm
    . php-devel-5.2.17-1.i686.rpm
    . php-gd-5.2.17-1.i686.rpm
    . php-mssql-5.2.17-1.i686.rpm
    . php-bcmath-5.2.17-1.i686.rpm
    . php-geoip-5.2.17-1.i686.rpm
    . php-mysql-5.2.17-1.i686.rpm
    . php-gettext-5.2.17-1.i686.rpm
    . php-mysqli-5.2.17-1.i686.rpm
    . php-bz2-5.2.17-1.i686.rpm
    . php-hash-5.2.17-1.i686.rpm
    . php-openssl-5.2.17-1.i686.rpm
    . php-calendar-5.2.17-1.i686.rpm
    . php-iconv-5.2.17-1.i686.rpm
    . php-pdo-5.2.17-1.i686.rpm
    . php-curl-5.2.17-1.i686.rpm
    . php-imap-5.2.17-1.i686.rpm
    . php-pdo-mysql-5.2.17-1.i686.rpm
    . php-dba-5.2.17-1.i686.rpm
    . php-korean-5.2.17-1.i686.rpm
    . php-pdo-pgsql-5.2.17-1.i686.rpm
    . php-krisp-5.2.17-1.i686.rpm
    . php-pgsql-5.2.17-1.i686.rpm
    . php-eaccelerator-5.2.17-1.i686.rpm
    . php-rrd-5.2.17-1.i686.rpm
    . php-exif-5.2.17-1.i686.rpm
    . php-mcrypt-5.2.17-1.i686.rpm
    . php-sockets-5.2.17-1.i686.rpm
    . php-fileinfo-5.2.17-1.i686.rpm
    . php-memcache-5.2.17-1.i686.rpm
    . php-sqlite-5.2.17-1.i686.rpm
    . php-ftp-5.2.17-1.i686.rpm
    . php-mhash-5.2.17-1.i686.rpm
    . php-yp-5.2.17-1.i686.rpm
    . php-nis-5.2.17-1.i686.rpm
    . php-json-5.2.17-1.i686.rpm


  SRPMS :

    . php-extension-5.2.17-1.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4150
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3436
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3709
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2531
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2484
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3870
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2371
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3658
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3659
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3660
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2829

samba 보안 업데이트

김정균 — Sun, 21 Oct 2012 01:04:34 +0900

samba 보안 업데이트


상세내용

- 버그 픽스
  #532094 - Fix credentials file handling for mount.cifs.
  #559609 - Avoid enumeration of trusted domains when "allow trusted domains = no"
  #467775 - Allow to switch off krb5.conf creation
  #493962 - Fix POSIX open
  #562836 - Fix mtab locking in mount.cifs
  #585360 - Fix Windows Server 2008 R2 support
  #518785 - Fix unclean update issues when restorecon is unavailable

- 보안 버그 픽스
  #602319 - Security Release, fixes CVE-2010-2063
  #632226 - Security Release, fixes CVE-2010-3069
  #678329 - Security Release, fixes CVE-2011-0719
  #722551 - Security Release, fixes CVE-2011-0547, CVE-2011-2694, CVE-2011-2522
  #722551 - Add security fix also for CVE-2010-0787, CVE-2011-1678
  #722551 - Add security fix also for CVE-2011-2724
  #795717 - Security release, fixes CVE-2012-0870
  #812010 - Security Release, fixes CVE-2012-1182


Autoupdates 지원 : Packages System
    pkgadd -F "samba*"


update 패키지

  RPMS :

    . samba-common-3.0.33-3.36.el4.i686.rpm
    . samba-3.0.33-3.36.el4.i686.rpm
    . samba-clients-3.0.33-3.36.el4.i686.rpm
    . samba-swat-3.0.33-3.36.el4.i686.rpm

  SRPMS :

    . samba-3.0.33-3.36.el4.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2063
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3069
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0719
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0547
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2694
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2522
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0787
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1678
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2724
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0870
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1182

openssl097 보안 업데이트

김정균 — Sun, 21 Oct 2012 00:32:01 +0900

openssl097 보안 업데이트


상세내용

openssl097a 패키지는 openssl 0.9.7 library 를 link 하도록 빌드된
바이너리나 openssl 0.9.7 을 요구하는 빌드환경을 위하여 제공되는
호환 라이브러리 입니다.

이 라이브러리를 이용하여 빌드를 할 경우에는 다음의 사항을 주의해야
합니다.

이 라이브러리는 RHEL 4 의 openssl 0.9.7a-43.18.el4 를 이용하여 작성이 되었
습니다.

1. header file include 시..
   #include <openssl/xxx.h> 를 #include <openssl097a/xxx.h> 로 수정해야
   합니다.

2. library 링크시..
   -lssl 이나 -lcrypto 의 경우 -lssl097a 나 -lcrypto097a 로 수정해서 빌드
   해야 합니다.

Security fix
- CVE-2009-3245
- CVE-2010-4180
- CVE-2011-4619
- CVE-2011-4576

. CVE-2009-3245
OpenSSL before 0.9.8m does not check for a NULL return value from
bn_wexpand function calls in (1) crypto/bn/bn_div.c,
(2) crypto/bn/bn_gf2m.c, (3) crypto/ec/ec2_smpl.c, and
(4) engines/e_ubsec.c, which has unspecified impact and
context-dependent attack vectors.

. CVE-2010-4180
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when
SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly
prevent modification of the ciphersuite in the session cache, which
allows remote attackers to force the downgrade to an unintended cipher
via vectors involving sniffing network traffic to discover a session
identifier.

. CVE-2011-4619
The Server Gated Cryptography (SGC) implementation in OpenSSL before
0.9.8s and 1.x before 1.0.0f does not properly handle handshake
restarts, which allows remote attackers to cause a denial of service
via unspecified vectors.

. CVE-2011-4576
The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before
1.0.0f does not properly initialize data structures for block cipher
padding, which might allow remote attackers to obtain sensitive
information by decrypting the padding data sent by an SSL peer.


Autoupdates 지원 : 지원
  pkgsysupdate


update 패키지

  RPMS :

    . openssl097a-0.9.7a-43.18.el4.noarch.rpm
    . openssl097a-devel-0.9.7a-43.18.el4.noarch.rpm
    . openssl097a-doc-0.9.7a-43.18.el4.noarch.rpm


  SRPMS :

    . openssl097a-0.9.7a-43.18.el4.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3245
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4180
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4619
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4576

net-snmp 업데이트

김정균 — Sat, 20 Oct 2012 23:14:55 +0900

net-snmp 업데이트


상세내용

* 버그 수정
- fixed reading of mib files with empty /usr/share/snmp/mibs/.index file
- fixed snmptrapd showing "" instead of address of remote agent (#745431)
- fixed SELinux context of /usr/share/snmp/mibs/.index file (#663879)
- fix IF-MIB::ifSpeed of inactive interfaces (#487261)
- fix sending of linkUp and linkDown traps (#549724)
- fix responding to broadcast UDP requests (#521758)
- fix parsing of OIDs from configuration file (#598293)


Autoupdates 지원 : Packages System
    pkgadd -F net-snmp*
	pkgadd -F perl-SNMP


update 패키지

  RPMS :

    . net-snmp-5.1.2-22.el4.i686.rpm
    . net-snmp-devel-5.1.2-22.el4.i686.rpm
    . net-snmp-utils-5.1.2-22.el4.i686.rpm
    . perl-SNMP-5.1.2-22.el4.i686.rpm

  SRPMS :

    . net-snmp-5.1.2-22.el4.src.rpm

참고 :

libxml2 보안 업데이트

김정균 — Sat, 20 Oct 2012 22:53:54 +0900

libxml2 보안 업데이트


상세내용

- fix an XML namespace handling problem in XML parser
- security fix

. CVE-2011-3919
Heap-based buffer overflow in libxml2, as used in Google Chrome
before 16.0.912.75, allows remote attackers to cause a denial
of service or possibly have unspecified other impact via unknown
vectors.

. CVE-2011-3905
libxml2, as used in Google Chrome before 16.0.912.63, allows
remote attackers to cause a denial of service (out-of-bounds
read) via unspecified vectors.

. CVE-2011-2834
Double free vulnerability in libxml2, as used in Google Chrome
before 14.0.835.163, allows remote attackers to cause a denial
of service or possibly have unspecified other impact via vectors
related to XPath handling.

. CVE-2011-0216
Off-by-one error in libxml in Apple Safari before 5.0.6 allows
remote attackers to execute arbitrary code or cause a denial of
service (heap-based buffer overflow and application crash) via
a crafted web site.


Autoupdates 지원 : 지원
  pkgsysupdate
  pkgadd -F libxml2-phtyon


update 패키지

  RPMS :

    . libxml2-2.6.16-12.el4.9.i686.rpm
    . libxml2-devel-2.6.16-12.el4.9.i686.rpm
    . libxml2-python-2.6.16-12.el4.9.i686.rpm

  SRPMS :

    . libxml2-2.6.16-12.el4.9.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3919
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3905
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2834
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0216

krb5 보안 업데이트

김정균 — Sat, 20 Oct 2012 22:12:44 +0900

krb5 보안 업데이트


상세내용

1.3.4-65.el4 update

- fixed CVE-2010-1323
- fixed CVE-2011-4862

. CVE-2010-1323:
MIT Kerberos 5 (aka krb5) 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and
1.8.x through 1.8.3 does not properly determine the acceptability
of checksums, which might allow remote attackers to modify
user-visible prompt text, modify a response to a Key Distribution
Center (KDC), or forge a KRB-SAFE message via certain checksums
that (1) are unkeyed or (2) use RC4 keys.

. CVE-2011-4862:
Buffer overflow in libtelnet/encrypt.c in telnetd in FreeBSD 7.3
through 9.0, MIT Kerberos Version 5 Applications (aka krb5-appl)
1.0.2 and earlier, and Heimdal 1.5.1 and earlier allows remote
attackers to execute arbitrary code via a long encryption key,
as exploited in the wild in December 2011.


Autoupdates 지원 : Packages System
  pkgadd -F "krb5*"


update 패키지

  RPMS :

    . krb5-libs-1.3.4-65.el4.i686.rpm
    . krb5-server-1.3.4-65.el4.i686.rpm
    . krb5-workstation-1.3.4-65.el4.i686.rpm
    . krb5-devel-1.3.4-65.el4.i686.rpm

  SRPMS :

    . krb5-1.3.4-65.el4.src.rpm


참고 :
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1323
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4862

sudo 보안 업데이트

김정균 — Sat, 20 Oct 2012 21:17:17 +0900

sudo 보안 업데이트


상세내용

- 1.7.4p5-13 update
- fixed rhbz#840872
- fixed rhbz#829756 (CVE-2012-2337)


- 보안버그 수정 사항

. CVE-2012-2337
sudo 1.6.x and 1.7.x before 1.7.9p1, and 1.8.x before 1.8.4p5, does not
properly support configurations that use a netmask syntax, which allows
local users to bypass intended command restrictions in opportunistic
circumstances by executing a command on a host that has an IPv4 address.


Autoupdates 지원 : 지원


update 패키지

  RPMS :

    . sudo-1.7.4p5-11.el6.i686.rpm
 

  SRPMS :

    . sudo-1.7.4p5-11.el6.src.rpm


참고 :

libkrisp-data 업데이트

김정균 — Sat, 20 Oct 2012 21:06:02 +0900

libkrisp-data 업데이트


상세내용

2012.10 data update


Autoupdates 지원 : 지원
  pkgsysupdate
  or
  pkgadd -F "libkrisp-data"


update 패키지

  RPMS :

    . libkrisp-data-20121020-1.noarch.rpm

  SRPMS :

    . libkrisp-data-20121020-1.src.rpm


참고 :

cvs 업데이트

김정균 — Sun, 16 Sep 2012 03:18:08 +0900

cvs 업데이트


상세내용

- 1.11.23 update


Autoupdates 지원 : 지원
  pkgsysupdate


update 패키지

  RPMS :

    . cvs-1.11.23-11.i686.rpm

  SRPMS :

    . cvs-1.11.23-11.src.rpm


참고 :

pdnsd 업데이트

김정균 — Sun, 16 Sep 2012 02:12:52 +0900

pdnsd 업데이트


상세내용

- 1.2.9a update


Autoupdates 지원 : 지원


update 패키지

  RPMS :

    . pdnsd-1.2.9a-1.i686.rpm
    . pdnsd-doc-1.2.9a-1.i686.rpm
 

  SRPMS :

    . pdnsd-1.2.9a-1.src.rpm


참고 :