2014-04-29
ALT-BU-2014-2742-1
Branch sisyphus update bulletin.
Closed vulnerabilities
Published: 2015-10-29
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2015-5292
Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in System Security Services Daemon (SSSD) 1.10 before 1.13.1 allows remote authenticated users to cause a denial of service (memory consumption) via a large number of logins that trigger parsing of PAC blobs during Kerberos authentication.
Severity: MEDIUM (6.8)
References:
- FEDORA-2015-202c127199
- FEDORA-2015-202c127199
- FEDORA-2015-7b47df69d3
- FEDORA-2015-7b47df69d3
- FEDORA-2015-cdea5324a8
- FEDORA-2015-cdea5324a8
- [sssd-users] 20151021 A security bug in SSSD 1.10 and later (CVE-2015-5292)
- [sssd-users] 20151021 A security bug in SSSD 1.10 and later (CVE-2015-5292)
- RHSA-2015:2019
- RHSA-2015:2019
- RHSA-2015:2355
- RHSA-2015:2355
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html
- 77529
- 77529
- 1034038
- 1034038
- https://bugzilla.redhat.com/show_bug.cgi?id=1267580
- https://bugzilla.redhat.com/show_bug.cgi?id=1267580
- https://fedorahosted.org/sssd/attachment/ticket/2803/0001-Fix-memory-leak-in-sssdpac_verify.patch
- https://fedorahosted.org/sssd/attachment/ticket/2803/0001-Fix-memory-leak-in-sssdpac_verify.patch
- https://fedorahosted.org/sssd/ticket/2803
- https://fedorahosted.org/sssd/ticket/2803
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
- https://fedorahosted.org/sssd/wiki/Releases/Notes-1.13.1
Closed bugs
Проблема при обновлении
Closed vulnerabilities
Published: 2014-02-05
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2014-0019
Stack-based buffer overflow in socat 1.3.0.0 through 1.7.2.2 and 2.0.0-b1 through 2.0.0-b6 allows local users to cause a denial of service (segmentation fault) via a long server name in the PROXY-CONNECT address in the command line.
Severity: LOW (1.9)
References:
- FEDORA-2014-1811
- FEDORA-2014-1811
- FEDORA-2014-1795
- FEDORA-2014-1795
- openSUSE-SU-2015:0760
- openSUSE-SU-2015:0760
- 102612
- 102612
- [oss-security] 20140128 Socat security advisory 5 - PROXY-CONNECT address overflow
- [oss-security] 20140128 Socat security advisory 5 - PROXY-CONNECT address overflow
- http://www.dest-unreach.org/socat
- http://www.dest-unreach.org/socat
- http://www.dest-unreach.org/socat/contrib/socat-secadv5.txt
- http://www.dest-unreach.org/socat/contrib/socat-secadv5.txt
- MDVSA-2014:033
- MDVSA-2014:033
- 65201
- 65201
Closed bugs
Добавление пакета для libunrar