[ubuntu/oneiric-updates] rpm 4.9.0-7ubuntu0.1 (Accepted)

[Ubuntu Archive Robot]

rpm (4.9.0-7ubuntu0.1) oneiric-security; urgency=low

  * SECURITY UPDATE: denial of service and possible code execution via
    crafted headers
    - debian/patches/CVE-2011-3378.patch: properly validate values in
      lib/header.c.
    - CVE-2011-3378
  * SECURITY UPDATE: denial of service and possible code execution via
    invalid region tag
    - debian/patches/CVE-2012-0060.patch: validate region tags in
      lib/header.c, lib/package.c, lib/signature.c.
    - CVE-2012-0060
  * SECURITY UPDATE: denial of service and possible code execution via
    large region size
    - debian/patches/CVE-2012-0061.patch: check length in lib/header.c.
    - CVE-2012-0061
  * SECURITY UPDATE: denial of service and possible code execution via
    negative value in region offset
    - debian/patches/CVE-2012-0815.patch: properly handle negative values
      in lib/header.c, lib/package.c, lib/signature.c.
    - CVE-2012-0815

Date: 2013-01-17 17:40:25.709144+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/oneiric/+source/rpm/4.9.0-7ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.