Get the LinuxSecurity news you want faster with RSS
Powered By
Mandriva: 2013:023: coreutils
Posted by Benjamin D. Thomas
Multiple vulnerabilities has been found and corrected in coreutils:
Long line inputs could trigger a segfault in the sort, uniq and join
utilities (CVE-2013-0221, CVE-2013-0222, CVE-2013-0223).
[More...]
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2013:023
http://www.mandriva.com/en/support/security/
_______________________________________________________________________
Package : coreutils
Date : March 13, 2013
Affected: Enterprise Server 5.0
_______________________________________________________________________
Problem Description:
Multiple vulnerabilities has been found and corrected in coreutils:
Long line inputs could trigger a segfault in the sort, uniq and join
utilities (CVE-2013-0221, CVE-2013-0222, CVE-2013-0223).
The updated packages have been patched to correct these issues.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0221
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0222
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0223
https://bugzilla.novell.com/show_bug.cgi?id=798538
https://bugzilla.novell.com/show_bug.cgi?id=796243
https://bugzilla.novell.com/show_bug.cgi?id=798541
_______________________________________________________________________
Updated Packages:
Mandriva Enterprise Server 5:
e119161cd57b34c1faa1116167fd2dee mes5/i586/coreutils-6.12-2.6mdvmes5.2.i586.rpm
dd979ecd771a2703e881595814e6eb17 mes5/i586/coreutils-doc-6.12-2.6mdvmes5.2.i586.rpm
9861a796e1eaaa130e175e9660ad0711 mes5/SRPMS/coreutils-6.12-2.6mdvmes5.2.src.rpm
Mandriva Enterprise Server 5/X86_64:
64f630d1e0fc0f97aec572a1f1f6f48f mes5/x86_64/coreutils-6.12-2.6mdvmes5.2.x86_64.rpm
c3a94ab9eaebfad4bd1cbffe8f3cb10b mes5/x86_64/coreutils-doc-6.12-2.6mdvmes5.2.x86_64.rpm
9861a796e1eaaa130e175e9660ad0711 mes5/SRPMS/coreutils-6.12-2.6mdvmes5.2.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/en/support/security/advisories/
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________