close
Pourquoi s'enregistré ... Pour bénéficié de plein d'avantage, plus l'accès à des partis du site qui ne sont accessible qu'aux membres. L'inscription n'est pas une obligation.

       
Mot de passe oublié?    Identifiant oublié?    Créer un compte

Si toute fois vous avez envies de vous inscrire, donner une adresse e-mail valide, car il vous seras envoyer un mail de confirmation d'ouverture de compte. Merci.
Top Panel
Login
Top Panel

Pin-Up

Recherche Google

Publicité

[Security Announce] [ MDVSA-2009:255 ] perl-DBD-Pg PDF Imprimer Envoyer
(0 Votes)
Écrit par Administrator   
Jeudi, 08 Octobre 2009 15:03
_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2009:255
http://www.mandriva.com/security/
_______________________________________________________________________


Package : perl-DBD-Pg
Date : October 2, 2009
Affected: Corporate 4.0
_______________________________________________________________________

Problem Description:

A vulnerability was discovered and corrected in perl-DBD-Pg:

Heap-based buffer overflow in the DBD::Pg module for Perl might allow context-dependent attackers to execute arbitrary code via unspecified input to an application that uses the getline and pg_getline functions to read database rows.

This update provides a fix for this vulnerability.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0663
_______________________________________________________________________
Updated Packages:

Corporate 4.0:
e3c38bea68b6e9fe28cc153b3c948c4b corporate/4.0/i586/perl-DBD-Pg-1.43-2.1.20060mlcs4.i586.rpm
4bc29785b1dfd8449775ddbbcce697f6 corporate/4.0/SRPMS/perl-DBD-Pg-1.43-2.1.20060mlcs4.src.rpm

Corporate 4.0/X86_64:
341998c53e860a0ea02c32fb62baa8e0 corporate/4.0/x86_64/perl-DBD-Pg-1.43-2.1.20060mlcs4.x86_64.rpm
4bc29785b1dfd8449775ddbbcce697f6 corporate/4.0/SRPMS/perl-DBD-Pg-1.43-2.1.20060mlcs4.src.rpm

_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

 

Ajouter un Commentaire


Code de sécurité
Rafraîchir

maps.amung.us

www.geo-loc.com

Publicité

Browse the web faster with Firefox