Red Hat Security AdvisoryRHSA-2012:0451
rpm security update
Released 2012-04-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- RHEL Desktop Workstation (v. 5 client) rpm-4.4.2.3-28.el5_8, rpm-apidocs-4.4.2.3-28.el5_8, rpm-apidocs-4.4.2.3-28.el5_8.i386 +4
- Red Hat Enterprise Linux (v. 5 server) popt-1.10.2.3-28.el5_8, popt-1.10.2.3-28.el5_8.i386, popt-1.10.2.3-28.el5_8.ia64 +25
- Red Hat Enterprise Linux AS (v. 3 ELS) popt-1.8.2-36_nonptl.i386, rpm-4.2.3-36_nonptl, rpm-4.2.3-36_nonptl.i386 +4
- Red Hat Enterprise Linux AS (v. 4 ELS) popt-1.9.1-36_nonptl.el4, popt-1.9.1-36_nonptl.el4.i386, popt-1.9.1-36_nonptl.el4.ia64 +15
- Red Hat Enterprise Linux Desktop (v. 5 client) popt-1.10.2.3-28.el5_8, popt-1.10.2.3-28.el5_8.i386, rpm-4.4.2.3-28.el5_8 +5
- Red Hat Enterprise Linux Desktop (v. 6) rpm-4.8.0-19.el6_2.1, rpm-libs-4.8.0-19.el6_2.1, rpm-python-4.8.0-19.el6_2.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) rpm-4.8.0-19.el6_2.1, rpm-apidocs-4.8.0-19.el6_2.1, rpm-build-4.8.0-19.el6_2.1 +2
- Red Hat Enterprise Linux ES (v. 3 ELS) popt-1.8.2-36_nonptl.i386, rpm-4.2.3-36_nonptl, rpm-4.2.3-36_nonptl.i386 +4
- Red Hat Enterprise Linux ES (v. 4 ELS) popt-1.9.1-36_nonptl.el4, popt-1.9.1-36_nonptl.el4.i386, rpm-4.3.3-36_nonptl.el4 +9
- Red Hat Enterprise Linux EUS (v. 5.6 server) popt-1.10.2.3-22.el5_6.3, popt-1.10.2.3-22.el5_6.3.i386, popt-1.10.2.3-22.el5_6.3.ia64 +25
- Red Hat Enterprise Linux HPC Node (v. 6) rpm-4.8.0-19.el6_2.1, rpm-libs-4.8.0-19.el6_2.1, rpm-python-4.8.0-19.el6_2.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) rpm-4.8.0-19.el6_2.1, rpm-apidocs-4.8.0-19.el6_2.1, rpm-build-4.8.0-19.el6_2.1 +2
- Red Hat Enterprise Linux Long Life (v. 5.3 server) popt-1.10.2.3-9.el5_3.3, popt-1.10.2.3-9.el5_3.3.i386, popt-1.10.2.3-9.el5_3.3.ia64 +18
- Red Hat Enterprise Linux Server (v. 6) rpm-4.8.0-19.el6_2.1, rpm-build-4.8.0-19.el6_2.1, rpm-devel-4.8.0-19.el6_2.1 +4
- Red Hat Enterprise Linux Server EUS (v. 6.0) rpm-4.8.0-12.el6_0.2, rpm-build-4.8.0-12.el6_0.2, rpm-devel-4.8.0-12.el6_0.2 +4
- Red Hat Enterprise Linux Server EUS (v. 6.1) rpm-4.8.0-16.el6_1.2, rpm-build-4.8.0-16.el6_1.2, rpm-devel-4.8.0-16.el6_1.2 +4
- Red Hat Enterprise Linux Server Optional (v. 6) rpm-4.8.0-19.el6_2.1, rpm-apidocs-4.8.0-19.el6_2.1, rpm-cron-4.8.0-19.el6_2.1
- Red Hat Enterprise Linux Server Optional EUS (v. 6.0) rpm-4.8.0-12.el6_0.2, rpm-apidocs-4.8.0-12.el6_0.2, rpm-cron-4.8.0-12.el6_0.2
- Red Hat Enterprise Linux Server Optional EUS (v. 6.1) rpm-4.8.0-16.el6_1.2, rpm-apidocs-4.8.0-16.el6_1.2, rpm-cron-4.8.0-16.el6_1.2
- Red Hat Enterprise Linux Workstation (v. 6) rpm-4.8.0-19.el6_2.1, rpm-build-4.8.0-19.el6_2.1, rpm-devel-4.8.0-19.el6_2.1 +2
- Red Hat Enterprise Linux Workstation Optional (v. 6) rpm-4.8.0-19.el6_2.1, rpm-apidocs-4.8.0-19.el6_2.1, rpm-cron-4.8.0-19.el6_2.1
Fixes 3 records
Priority LOW 37
The headerVerifyInfo function in lib/header.c in RPM before 4.9.1.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative value in a region offset of a package he…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04233 · Published 2012-06-04 · Fixed CWE-189
Priority LOW 37
The headerLoad function in lib/header.c in RPM before 4.9.1.3 does not properly validate region tags, which allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code v…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04294 · Published 2012-06-04 · Fixed CWE-20
Priority LOW 37
RPM before 4.9.1.3 does not properly validate region tags, which allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an invalid region tag in a package header to the (1) h…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04294 · Published 2012-06-04 · Fixed CWE-20
THREATIST.IORead the docs