You are here

Home > Preporuke > Sigurnosni nedostatak programskih paketa libldb, libtalloc, libtdb i libtevent

Sigurnosni nedostatak programskih paketa libldb, libtalloc, libtdb i libtevent

Preporuke

by ncert - 18. prosinca 2015.0

Detalji os-a: WN7
Važnost: IMP
Operativni sustavi: L
Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2015-af140eefbc
2015-12-18 04:56:46.869191
——————————————————————————–

Name : libldb
Product : Fedora 22
Version : 1.1.24
Release : 1.fc22
URL : http://ldb.samba.org/
Summary : A schema-less, ldap like, API and database
Description :
An extensible library that implements an LDAP like API to access remote LDAP
servers, or use local tdb databases.

——————————————————————————–
Update Information:

Fixes CVE-2015-5330
——————————————————————————–
References:

[ 1 ] Bug #1292070 – CVE-2015-5330 libldb: samba: Remote memory read in Samba LDAP server [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1292070
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update libldb’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-af140eefbc
2015-12-18 04:56:46.869191
——————————————————————————–

Name : libtalloc
Product : Fedora 22
Version : 2.1.5
Release : 2.fc22
URL : http://talloc.samba.org/
Summary : The talloc library
Description :
A library that implements a hierarchical allocator with destructors.

——————————————————————————–
Update Information:

Fixes CVE-2015-5330
——————————————————————————–
References:

[ 1 ] Bug #1292070 – CVE-2015-5330 libldb: samba: Remote memory read in Samba LDAP server [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1292070
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update libtalloc’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-af140eefbc
2015-12-18 04:56:46.869191
——————————————————————————–

Name : libtdb
Product : Fedora 22
Version : 1.3.8
Release : 1.fc22
URL : http://tdb.samba.org/
Summary : The tdb library
Description :
A library that implements a trivial database.

——————————————————————————–
Update Information:

Fixes CVE-2015-5330
——————————————————————————–
References:

[ 1 ] Bug #1292070 – CVE-2015-5330 libldb: samba: Remote memory read in Samba LDAP server [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1292070
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update libtdb’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-af140eefbc
2015-12-18 04:56:46.869191
——————————————————————————–

Name : libtevent
Product : Fedora 22
Version : 0.9.26
Release : 1.fc22
URL : http://tevent.samba.org/
Summary : The tevent library
Description :
Tevent is an event system based on the talloc memory management library.
Tevent has support for many event types, including timers, signals, and
the classic file descriptor events.
Tevent also provide helpers to deal with asynchronous code providing the
tevent_req (Tevent Request) functions.

——————————————————————————–
Update Information:

Fixes CVE-2015-5330
——————————————————————————–
References:

[ 1 ] Bug #1292070 – CVE-2015-5330 libldb: samba: Remote memory read in Samba LDAP server [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1292070
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update libtevent’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-b960ca78bf
2015-12-18 04:57:24.069118
——————————————————————————–

Name : libldb
Product : Fedora 23
Version : 1.1.24
Release : 1.fc23
URL : http://ldb.samba.org/
Summary : A schema-less, ldap like, API and database
Description :
An extensible library that implements an LDAP like API to access remote LDAP
servers, or use local tdb databases.

——————————————————————————–
Update Information:

Fixes CVE-2015-5330
——————————————————————————–
References:

[ 1 ] Bug #1292070 – CVE-2015-5330 libldb: samba: Remote memory read in Samba LDAP server [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1292070
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update libldb’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-b960ca78bf
2015-12-18 04:57:24.069118
——————————————————————————–

Name : libtalloc
Product : Fedora 23
Version : 2.1.5
Release : 2.fc23
URL : http://talloc.samba.org/
Summary : The talloc library
Description :
A library that implements a hierarchical allocator with destructors.

——————————————————————————–
Update Information:

Fixes CVE-2015-5330
——————————————————————————–
References:

[ 1 ] Bug #1292070 – CVE-2015-5330 libldb: samba: Remote memory read in Samba LDAP server [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1292070
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update libtalloc’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-b960ca78bf
2015-12-18 04:57:24.069118
——————————————————————————–

Name : libtdb
Product : Fedora 23
Version : 1.3.8
Release : 1.fc23
URL : http://tdb.samba.org/
Summary : The tdb library
Description :
A library that implements a trivial database.

——————————————————————————–
Update Information:

Fixes CVE-2015-5330
——————————————————————————–
References:

[ 1 ] Bug #1292070 – CVE-2015-5330 libldb: samba: Remote memory read in Samba LDAP server [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1292070
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update libtdb’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-b960ca78bf
2015-12-18 04:57:24.069118
——————————————————————————–

Name : libtevent
Product : Fedora 23
Version : 0.9.26
Release : 1.fc23
URL : http://tevent.samba.org/
Summary : The tevent library
Description :
Tevent is an event system based on the talloc memory management library.
Tevent has support for many event types, including timers, signals, and
the classic file descriptor events.
Tevent also provide helpers to deal with asynchronous code providing the
tevent_req (Tevent Request) functions.

——————————————————————————–
Update Information:

Fixes CVE-2015-5330
——————————————————————————–
References:

[ 1 ] Bug #1292070 – CVE-2015-5330 libldb: samba: Remote memory read in Samba LDAP server [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1292070
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update libtevent’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

Autor	Marijo Plepelic
Cert id	NCERT-REF-2015-12-0033-ADV
Cve	CERT-CVE-DUMMY
ID izvornika	CERT-ORIGID-DUMMY
Proizvod	CERT-DUMMY-PRODUCT
Izvor	http://www.adobe.com/

ncert

Top

More in Preporuke

Ranjivosti jezgre operacijskog sustava

Otkrivene su ranjivosti u linux-lts-wily verziji jezgre za operacijski sustav Ubuntu 14.04 LTS. Ranjivosti zahvaćaju KVM svm hypervisor implementaciju, ppp...