securitymandriva.com
Date: Wed Jul 29 2009 - 05:51:00 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________

 Mandriva Linux Security Advisory MDVSA-2009:176
 http://www.mandriva.com/security/
 _______________________________________________________________________

 Package : git
 Date : July 29, 2009
 Affected: Enterprise Server 5.0
 _______________________________________________________________________

 Problem Description:

 A vulnerability has been found and corrected in git:
 
 git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to
 cause a denial of service (infinite loop and CPU consumption) via a
 request containing extra unrecognized arguments (CVE-2009-2108).
 
 This update provides fixes for this vulnerability.
 _______________________________________________________________________

 References:

 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2108
 _______________________________________________________________________

 Updated Packages:

 Mandriva Enterprise Server 5:
 12264c9724568a641a2f73ac9ea5893d mes5/i586/git-1.6.0.6-0.1mdvmes5.i586.rpm
 f4855794596052fd21b102078ecfbd24 mes5/i586/git-arch-1.6.0.6-0.1mdvmes5.i586.rpm
 eff76dc25ebaa2894cf675b3846a005b mes5/i586/git-core-1.6.0.6-0.1mdvmes5.i586.rpm
 bf1b3d3a0b32203383c976cde6c9a71c mes5/i586/git-core-oldies-1.6.0.6-0.1mdvmes5.i586.rpm
 6bddb82834ea49bc591b39be6848d1ab mes5/i586/git-cvs-1.6.0.6-0.1mdvmes5.i586.rpm
 5518e31af017d9cc2cdd7ac24fde5f7e mes5/i586/git-email-1.6.0.6-0.1mdvmes5.i586.rpm
 6948989d6d6e268e7837511fca78337d mes5/i586/gitk-1.6.0.6-0.1mdvmes5.i586.rpm
 8a642fb53eaab819c21005cf6ce855e3 mes5/i586/git-svn-1.6.0.6-0.1mdvmes5.i586.rpm
 0d895d128ae30db3c346c0d8717736c2 mes5/i586/gitview-1.6.0.6-0.1mdvmes5.i586.rpm
 ad8683ec4c819b7045946c31e4dcc8d2 mes5/i586/gitweb-1.6.0.6-0.1mdvmes5.i586.rpm
 781f43d77170635a3a3b6c82b1da4c87 mes5/i586/libgit-devel-1.6.0.6-0.1mdvmes5.i586.rpm
 f2da4280e6b0a6b1c0d0d02d415ad92b mes5/i586/perl-Git-1.6.0.6-0.1mdvmes5.i586.rpm
 2141d03fd7e15670ec997a7c54e7fd8a mes5/SRPMS/git-1.6.0.6-0.1mdvmes5.src.rpm

 Mandriva Enterprise Server 5/X86_64:
 4ea19e1b57552a70afe989c5bccd835a mes5/x86_64/git-1.6.0.6-0.1mdvmes5.x86_64.rpm
 1c1568586c6f667e856d56e68440f0c7 mes5/x86_64/git-arch-1.6.0.6-0.1mdvmes5.x86_64.rpm
 585d86a660d47420ab88f8e3631ebb20 mes5/x86_64/git-core-1.6.0.6-0.1mdvmes5.x86_64.rpm
 d88542185ea8e25eead22f3638e4b1ce mes5/x86_64/git-core-oldies-1.6.0.6-0.1mdvmes5.x86_64.rpm
 bcb5c3dafc15e51e2012cddebaded84e mes5/x86_64/git-cvs-1.6.0.6-0.1mdvmes5.x86_64.rpm
 91ecd5ab7b4e96524e375926a7e4b959 mes5/x86_64/git-email-1.6.0.6-0.1mdvmes5.x86_64.rpm
 1a71d4678919ca9d1a844a97d09e4720 mes5/x86_64/gitk-1.6.0.6-0.1mdvmes5.x86_64.rpm
 e85fcebfe53bc0676ea1874d8a33f3be mes5/x86_64/git-svn-1.6.0.6-0.1mdvmes5.x86_64.rpm
 2e27c62f2854040f44177547bed50e4a mes5/x86_64/gitview-1.6.0.6-0.1mdvmes5.x86_64.rpm
 e8b87bef440f28fac9c104da7759f248 mes5/x86_64/gitweb-1.6.0.6-0.1mdvmes5.x86_64.rpm
 dc20524019e37fafa8e32ec215ff0b4b mes5/x86_64/lib64git-devel-1.6.0.6-0.1mdvmes5.x86_64.rpm
 45281984d1a055b1ff33068cb7f0514c mes5/x86_64/perl-Git-1.6.0.6-0.1mdvmes5.x86_64.rpm
 2141d03fd7e15670ec997a7c54e7fd8a mes5/SRPMS/git-1.6.0.6-0.1mdvmes5.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi. The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security. You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID Date User ID
 pub 1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFKb/9gmqjQ0CJFipgRAuc8AJ9A/vGFxj8NXAQeuSv7uiUP1B8i5wCgx3TW
ylo2C5LWr8AqavOYLHGimZk=
=Lu2Y
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]