| [Security Announce] [ MDVA-2009:192 ] mmc-wizard |
|
|
|
| Écrit par Administrator |
| Dimanche, 15 Novembre 2009 18:19 |
|
_______________________________________________________________________ Mandriva Linux Advisory MDVA-2009:192 http://www.mandriva.com/security/ _______________________________________________________________________ Package : mmc-wizard Date : November 10, 2009 Affected: Enterprise Server 5.0 _______________________________________________________________________ Problem Description: The /etc/dhcpd.conf file contains the root password in a clear text and all users can read this file. This update corrects this issue making only the root user able to read the file. The extension of domain name in MDS stack's configuration is too restrictive, actually beetween 2 and 4 characters, this update removes this restriction. Additionally the perl-NetAddr-IP package has been rebuilt and being provided with this update to fullfill new dependancies for mmc-wizard. _______________________________________________________________________ References: https://qa.mandriva.com/52372 https://qa.mandriva.com/51982 _______________________________________________________________________ Updated Packages: Mandriva Enterprise Server 5: 7fa7bbfcf2bd4e51a4c0c2a6209f1d44 mes5/i586/mmc-wizard-1.0-12.2mdvmes5.noarch.rpm a6535a99158b09ab4af201d165842637 mes5/i586/perl-NetAddr-IP-4.007-3.1mdvmes5.i586.rpm e70a61539ed6c5b15db46f2a5703675e mes5/SRPMS/mmc-wizard-1.0-12.2mdvmes5.src.rpm e744e00013d0e80d377475cc6f220cf1 mes5/SRPMS/perl-NetAddr-IP-4.007-3.1mdvmes5.src.rpm Mandriva Enterprise Server 5/X86_64: 4188f12bd20dba5b159868f82f27a327 mes5/x86_64/mmc-wizard-1.0-12.2mdvmes5.noarch.rpm c2b610b7c190826962bbd0fdeb4e8e52 mes5/x86_64/perl-NetAddr-IP-4.007-3.1mdvmes5.x86_64.rpm e70a61539ed6c5b15db46f2a5703675e mes5/SRPMS/mmc-wizard-1.0-12.2mdvmes5.src.rpm e744e00013d0e80d377475cc6f220cf1 mes5/SRPMS/perl-NetAddr-IP-4.007-3.1mdvmes5.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ |



























































