Red Hat Security AdvisoryRHSA-2011:1349
rpm security update
Released 2011-10-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) rpm-4.4.2.3-22.el5_7.2, rpm-apidocs-4.4.2.3-22.el5_7.2, rpm-apidocs-4.4.2.3-22.el5_7.2.i386 +4
- Red Hat Enterprise Linux (v. 5 server) popt-1.10.2.3-22.el5_7.2, popt-1.10.2.3-22.el5_7.2.i386, popt-1.10.2.3-22.el5_7.2.ia64 +25
- Red Hat Enterprise Linux (v. 5.6.z server) popt-1.10.2.3-22.el5_6.2, popt-1.10.2.3-22.el5_6.2.i386, popt-1.10.2.3-22.el5_6.2.ia64 +25
- Red Hat Enterprise Linux AS (v. 3 ELS) popt-1.8.2-35_nonptl.i386, rpm-4.2.3-35_nonptl, rpm-4.2.3-35_nonptl.i386 +4
- Red Hat Enterprise Linux AS version 4 popt-1.9.1-35_nonptl.el4, popt-1.9.1-35_nonptl.el4.i386, popt-1.9.1-35_nonptl.el4.ia64 +21
- Red Hat Enterprise Linux Desktop (v. 5 client) popt-1.10.2.3-22.el5_7.2, popt-1.10.2.3-22.el5_7.2.i386, rpm-4.4.2.3-22.el5_7.2 +5
- Red Hat Enterprise Linux Desktop version 4 popt-1.9.1-35_nonptl.el4, popt-1.9.1-35_nonptl.el4.i386, rpm-4.3.3-35_nonptl.el4 +9
- Red Hat Enterprise Linux ES (v. 3 ELS) popt-1.8.2-35_nonptl.i386, rpm-4.2.3-35_nonptl, rpm-4.2.3-35_nonptl.i386 +4
- Red Hat Enterprise Linux ES version 4 popt-1.9.1-35_nonptl.el4, popt-1.9.1-35_nonptl.el4.i386, popt-1.9.1-35_nonptl.el4.ia64 +15
- Red Hat Enterprise Linux Long Life (v. 5.3 server) popt-1.10.2.3-9.el5_3.2, popt-1.10.2.3-9.el5_3.2.i386, popt-1.10.2.3-9.el5_3.2.ia64 +18
- Red Hat Enterprise Linux Server (v. 6) rpm-4.8.0-16.el6_1.1, rpm-build-4.8.0-16.el6_1.1, rpm-devel-4.8.0-16.el6_1.1 +4
- Red Hat Enterprise Linux Server EUS (v. 6.0) rpm-4.8.0-12.el6_0.1, rpm-build-4.8.0-12.el6_0.1, rpm-devel-4.8.0-12.el6_0.1 +4
- Red Hat Enterprise Linux Server Optional (v. 6) rpm-4.8.0-16.el6_1.1, rpm-apidocs-4.8.0-16.el6_1.1, rpm-cron-4.8.0-16.el6_1.1
- Red Hat Enterprise Linux Server Optional EUS (v. 6.0) rpm-4.8.0-12.el6_0.1, rpm-apidocs-4.8.0-12.el6_0.1, rpm-cron-4.8.0-12.el6_0.1
- Red Hat Enterprise Linux WS version 4 popt-1.9.1-35_nonptl.el4, popt-1.9.1-35_nonptl.el4.i386, popt-1.9.1-35_nonptl.el4.ia64 +15
Fixes 1 record
Priority MEDIUM 49
RPM 4.4.x through 4.9.x, probably before 4.9.1.2, allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via an rpm package with crafted headers and offsets that are…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05917 · Published 2011-12-24 · Fixed CWE-94
