[ubuntu/lucid-security] rpm 4.7.2-1lubuntu0.1 (Accepted)

[Marc Deslauriers]

rpm (4.7.2-1lubuntu0.1) lucid-security; urgency=low

  * SECURITY UPDATE: denial of service and possible code execution via
    crafted headers
    - debian/patches/CVE-2011-3378.patch: properly validate values in
      lib/header.c.
    - CVE-2011-3378
  * SECURITY UPDATE: denial of service and possible code execution via
    invalid region tag
    - debian/patches/CVE-2012-0060.patch: validate region tags in
      lib/header.c, lib/package.c, lib/signature.c.
    - CVE-2012-0060
  * SECURITY UPDATE: denial of service and possible code execution via
    large region size
    - debian/patches/CVE-2012-0061.patch: check length in lib/header.c.
    - CVE-2012-0061
  * SECURITY UPDATE: denial of service and possible code execution via
    negative value in region offset
    - debian/patches/CVE-2012-0815.patch: properly handle negative values
      in lib/header.c, lib/package.c, lib/signature.c.
    - CVE-2012-0815

Date: 2013-01-17 17:45:38.014583+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/lucid/+source/rpm/4.7.2-1lubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.