Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:29213
HistoryMar 24, 2013 - 12:00 a.m.

[ MDVSA-2013:023 ] coreutils

2013-03-2400:00:00
vulners.com
13

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Mandriva Linux Security Advisory MDVSA-2013:023
http://www.mandriva.com/en/support/security/


Package : coreutils
Date : March 13, 2013
Affected: Enterprise Server 5.0


Problem Description:

Multiple vulnerabilities has been found and corrected in coreutils:

Long line inputs could trigger a segfault in the sort, uniq and join
utilities (CVE-2013-0221, CVE-2013-0222, CVE-2013-0223).

The updated packages have been patched to correct these issues.


References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0221
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0222
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0223
https://bugzilla.novell.com/show_bug.cgi?id=798538
https://bugzilla.novell.com/show_bug.cgi?id=796243
https://bugzilla.novell.com/show_bug.cgi?id=798541


Updated Packages:

Mandriva Enterprise Server 5:
e119161cd57b34c1faa1116167fd2dee mes5/i586/coreutils-6.12-2.6mdvmes5.2.i586.rpm
dd979ecd771a2703e881595814e6eb17 mes5/i586/coreutils-doc-6.12-2.6mdvmes5.2.i586.rpm
9861a796e1eaaa130e175e9660ad0711 mes5/SRPMS/coreutils-6.12-2.6mdvmes5.2.src.rpm

Mandriva Enterprise Server 5/X86_64:
64f630d1e0fc0f97aec572a1f1f6f48f mes5/x86_64/coreutils-6.12-2.6mdvmes5.2.x86_64.rpm
c3a94ab9eaebfad4bd1cbffe8f3cb10b mes5/x86_64/coreutils-doc-6.12-2.6mdvmes5.2.x86_64.rpm
9861a796e1eaaa130e175e9660ad0711 mes5/SRPMS/coreutils-6.12-2.6mdvmes5.2.src.rpm


To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/en/support/security/advisories/

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com


Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFRQHMQmqjQ0CJFipgRAgRQAJ0W+wyHdG5tk7XAQGJsZL4KON0zCgCgvwf4
rZJBw2UBarl1PaG56D3eoqA=
=5ffG
-----END PGP SIGNATURE-----

Related for SECURITYVULNS:DOC:29213