United States : 
Unknown Browser
www.ltdw.net 
Articles Sécurité Mandriva Security [Security Announce] [ MDVSA-2010:036 ] webmin
Articles Sécurité Mandriva Security [Security Announce] [ MDVSA-2010:036 ] webmin
| [Security Announce] [ MDVSA-2010:036 ] webmin |
 |
 |
 |
(0 Votes)| Écrit par Administrator |
| Dimanche, 14 Février 2010 10:12 |
|
_______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2010:036 http://www.mandriva.com/security/ _______________________________________________________________________ Package : webmin Date : February 12, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 _______________________________________________________________________ Problem Description: This advisory updates webmin to the latest version 1.500, fixing several bugs and a cross-site scripting issue which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors (CVE-2009-4568). Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4568 https://qa.mandriva.com/27789 https://qa.mandriva.com/57313 _______________________________________________________________________ Updated Packages: Mandriva Linux 2008.0: b88f1d3028ca388871749239e3e79cea 2008.0/i586/webmin-1.500-0.1mdv2008.0.noarch.rpm 34a5855e42db94562e5c761eafc670b2 2008.0/SRPMS/webmin-1.500-0.1mdv2008.0.src.rpm Mandriva Linux 2008.0/X86_64: 2d5291bb5442c731df295dd3069a0992 2008.0/x86_64/webmin-1.500-0.1mdv2008.0.noarch.rpm 34a5855e42db94562e5c761eafc670b2 2008.0/SRPMS/webmin-1.500-0.1mdv2008.0.src.rpm Mandriva Linux 2009.0: 66f4e3022e6a29251a2eb168ffc6a8f2 2009.0/i586/webmin-1.500-0.1mdv2009.0.noarch.rpm c4409738f348158e2ce658d0a15d7ec4 2009.0/SRPMS/webmin-1.500-0.1mdv2009.0.src.rpm Mandriva Linux 2009.0/X86_64: 787357fee03e87c947950a81810cd144 2009.0/x86_64/webmin-1.500-0.1mdv2009.0.noarch.rpm c4409738f348158e2ce658d0a15d7ec4 2009.0/SRPMS/webmin-1.500-0.1mdv2009.0.src.rpm Mandriva Linux 2009.1: 6223395569561fb4b6a672845cb8b65b 2009.1/i586/webmin-1.500-0.1mdv2009.1.noarch.rpm cf4acdf1d4f59dd6ab9aabb5b788eb27 2009.1/SRPMS/webmin-1.500-0.1mdv2009.1.src.rpm Mandriva Linux 2009.1/X86_64: b0d876823caf79b95a4d305f84c42a2f 2009.1/x86_64/webmin-1.500-0.1mdv2009.1.noarch.rpm cf4acdf1d4f59dd6ab9aabb5b788eb27 2009.1/SRPMS/webmin-1.500-0.1mdv2009.1.src.rpm Mandriva Linux 2010.0: 1e3ffa22a40379a6f118f30119240e8e 2010.0/i586/webmin-1.500-0.1mdv2010.0.noarch.rpm 2e88506b60faa5223e70b3585df61eb8 2010.0/SRPMS/webmin-1.500-0.1mdv2010.0.src.rpm Mandriva Linux 2010.0/X86_64: de1a0b9c0235b41883d687aa5fd0350a 2010.0/x86_64/webmin-1.500-0.1mdv2010.0.noarch.rpm 2e88506b60faa5223e70b3585df61eb8 2010.0/SRPMS/webmin-1.500-0.1mdv2010.0.src.rpm Corporate 4.0: 6d07714084dc6e0875611caddfdf246a corporate/4.0/i586/webmin-1.500-0.1.20060mlcs4.noarch.rpm 70112c7ab9c9daf264e4b3323205ce62 corporate/4.0/SRPMS/webmin-1.500-0.1.20060mlcs4.src.rpm Corporate 4.0/X86_64: 1b4c25195e933099b2600c1355640ed0 corporate/4.0/x86_64/webmin-1.500-0.1.20060mlcs4.noarch.rpm 70112c7ab9c9daf264e4b3323205ce62 corporate/4.0/SRPMS/webmin-1.500-0.1.20060mlcs4.src.rpm Mandriva Enterprise Server 5: b581fd765d6a315b4e4a8b0b7b28a900 mes5/i586/webmin-1.500-0.1mdvmes5.noarch.rpm e567172b5df7af353b6c58d9e49458cd mes5/SRPMS/webmin-1.500-0.1mdvmes5.src.rpm Mandriva Enterprise Server 5/X86_64: 7c49770e4de6369281ede8c9e0c1d7ce mes5/x86_64/webmin-1.500-0.1mdvmes5.noarch.rpm e567172b5df7af353b6c58d9e49458cd mes5/SRPMS/webmin-1.500-0.1mdvmes5.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ _______________________________________________________________________  Mandriva Linux Security Advisory                        MDVSA-2010:036 http://www.mandriva.com/security/ _______________________________________________________________________  Package : webmin Date   : February 12, 2010 Affected: 2008.0, 2009.0, 2009.1, 2010.0, Corporate 4.0, Enterprise Server 5.0 _______________________________________________________________________  Problem Description:  This advisory updates webmin to the latest version 1.500, fixing several bugs and a cross-site scripting issue which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors (CVE-2009-4568).  Packages for 2008.0 are provided for Corporate Desktop 2008.0 customers. _______________________________________________________________________  References:  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4568 _______________________________________________________________________ 
|