[ MDVSA-2008:073 ] - Updated perl-Net-DNS packages fix DoS vulnerability
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2008:073
http://www.mandriva.com/security/
_______________________________________________________________________
Package : perl-Net-DNS
Date : March 20, 2008
Affected: 2007.0, 2007.1, 2008.0, Corporate 3.0, Corporate 4.0
_______________________________________________________________________
Problem Description:
A vulnerability in the Net::DNS perl module was found that could
allow remote attackers to cause a denial of service via a crafted
DNS response.
The updated packages have been patched to correct this issue.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6341
_______________________________________________________________________
Updated Packages:
Mandriva Linux 2007.0:
1cf2397dcfe207d625bd24d1d7fc744a
2007.0/i586/perl-Net-DNS-0.58-1.2mdv2007.0.i586.rpm
434fdd9456118124117a26509c6d1674
2007.0/SRPMS/perl-Net-DNS-0.58-1.2mdv2007.0.src.rpm
Mandriva Linux 2007.0/X86_64:
374101d8c50675d8032c5695dfb0866f
2007.0/x86_64/perl-Net-DNS-0.58-1.2mdv2007.0.x86_64.rpm
434fdd9456118124117a26509c6d1674
2007.0/SRPMS/perl-Net-DNS-0.58-1.2mdv2007.0.src.rpm
Mandriva Linux 2007.1:
8ff35127ae1c20c0b4e4cf3734b41d78
2007.1/i586/perl-Net-DNS-0.59-1.2mdv2007.1.i586.rpm
0630c817a581736750b3aa3a36330442
2007.1/SRPMS/perl-Net-DNS-0.59-1.2mdv2007.1.src.rpm
Mandriva Linux 2007.1/X86_64:
2db71882e00490ed228d3544e73d5dfa
2007.1/x86_64/perl-Net-DNS-0.59-1.2mdv2007.1.x86_64.rpm
0630c817a581736750b3aa3a36330442
2007.1/SRPMS/perl-Net-DNS-0.59-1.2mdv2007.1.src.rpm
Mandriva Linux 2008.0:
46454d0d2ffbccc32875d38428f5dbb7
2008.0/i586/perl-Net-DNS-0.61-1.1mdv2008.0.i586.rpm
0dd436fba91470dbd4cc4a5371cfa909
2008.0/SRPMS/perl-Net-DNS-0.61-1.1mdv2008.0.src.rpm
Mandriva Linux 2008.0/X86_64:
3724958b2631242743be3d24ed463e5f
2008.0/x86_64/perl-Net-DNS-0.61-1.1mdv2008.0.x86_64.rpm
0dd436fba91470dbd4cc4a5371cfa909
2008.0/SRPMS/perl-Net-DNS-0.61-1.1mdv2008.0.src.rpm
Corporate 3.0:
34228478b5f31c0a2c9beb80de8a004b
corporate/3.0/i586/perl-Net-DNS-0.39-2.2.C30mdk.i586.rpm
8846ab7ae3ecf66ee93666e4551e091b
corporate/3.0/SRPMS/perl-Net-DNS-0.39-2.2.C30mdk.src.rpm
Corporate 3.0/X86_64:
9d62397d900754063b46a1f6a7dcae9c
corporate/3.0/x86_64/perl-Net-DNS-0.39-2.2.C30mdk.x86_64.rpm
8846ab7ae3ecf66ee93666e4551e091b
corporate/3.0/SRPMS/perl-Net-DNS-0.39-2.2.C30mdk.src.rpm
Corporate 4.0:
57bb9572548a1727cdfde07176a55fc2
corporate/4.0/i586/perl-Net-DNS-0.52-1.2.20060mlcs4.i586.rpm
cd1731f072ad841c1244b6e873226422
corporate/4.0/SRPMS/perl-Net-DNS-0.52-1.2.20060mlcs4.src.rpm
Corporate 4.0/X86_64:
454f468cd925c1fccdf20751ac884dd9
corporate/4.0/x86_64/perl-Net-DNS-0.52-1.2.20060mlcs4.x86_64.rpm
cd1731f072ad841c1244b6e873226422
corporate/4.0/SRPMS/perl-Net-DNS-0.52-1.2.20060mlcs4.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/security/advisories
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
iD8DBQFH4p/ImqjQ0CJFipgRAjg7AJ94BiQLAcokF5ttd9yHBSDBtDE08ACgys4V
HlrGqAi2vzXL0Oc7eQ7AX2g=
=CA0R
-----END PGP SIGNATURE-----