Security update for RPM
SUSE Security Update: Security update for RPM
Multiple security vulnerabilities were reported in RPM
which could have been exploited via specially crafted RPM
files to cause a denial of service (application crash) or
potentially allow attackers to execute arbitrary code.
Additionally, a non-security issue was fixed that could
cause a division by zero in cycles calculation under rare
circumstances.
Security Issue references:
* CVE-2012-0815
>
* CVE-2012-0060
>
* CVE-2012-0061
>
http://support.novell.com/security/cve/CVE-2012-0060.html
http://support.novell.com/security/cve/CVE-2012-0061.html
http://support.novell.com/security/cve/CVE-2012-0815.html
https://bugzilla.novell.com/747225
https://bugzilla.novell.com/754281
https://bugzilla.novell.com/754284
https://bugzilla.novell.com/754285
http://download.suse.com/patch/finder/?keywords=3437ad480e640b7bf5a09b96d1218988
| Announcement ID: | SUSE-SU-2012:0880-1 |
| Rating: | moderate |
| References: | #747225 #754281 #754284 #754285 |
| Affected Products: |
An update that solves three vulnerabilities and has one errata is now available.
Description:
Multiple security vulnerabilities were reported in RPM
which could have been exploited via specially crafted RPM
files to cause a denial of service (application crash) or
potentially allow attackers to execute arbitrary code.
Additionally, a non-security issue was fixed that could
cause a division by zero in cycles calculation under rare
circumstances.
Security Issue references:
* CVE-2012-0815
* CVE-2012-0060
* CVE-2012-0061
Package List:
- SUSE Linux Enterprise Server 10 SP4 (i586):
- popt-1.7-271.46.16
- popt-devel-1.7-271.46.16
- rpm-4.4.2-43.46.16
- rpm-devel-4.4.2-43.46.16
- rpm-python-4.4.2-43.46.16
- SUSE Linux Enterprise Desktop 10 SP4 (i586):
- popt-1.7-271.46.16
- popt-devel-1.7-271.46.16
- rpm-4.4.2-43.46.16
- rpm-devel-4.4.2-43.46.16
- rpm-python-4.4.2-43.46.16
- SLE SDK 10 SP4 (i586):
- rpm-devel-4.4.2-43.46.16