full-disclosure - [ MDVSA-2008:073 ] - Updated perl-Net-DNS packages fix DoS vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-id: <E1JcRcQ-0007Du-Hv@artemis.annvix.ca>
Date: Thu, 20 Mar 2008 14:44:10 -0600
From: security@...driva.com
To: full-disclosure@...ts.grok.org.uk
Subject: [ MDVSA-2008:073 ] - Updated perl-Net-DNS
 packages fix DoS vulnerability


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________
 
 Mandriva Linux Security Advisory                         MDVSA-2008:073
 http://www.mandriva.com/security/
 _______________________________________________________________________
 
 Package : perl-Net-DNS
 Date    : March 20, 2008
 Affected: 2007.0, 2007.1, 2008.0, Corporate 3.0, Corporate 4.0
 _______________________________________________________________________
 
 Problem Description:
 
 A vulnerability in the Net::DNS perl module was found that could
 allow remote attackers to cause a denial of service via a crafted
 DNS response.
 
 The updated packages have been patched to correct this issue.
 _______________________________________________________________________

 References:
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6341
 _______________________________________________________________________
 
 Updated Packages:
 
 Mandriva Linux 2007.0:
 1cf2397dcfe207d625bd24d1d7fc744a  2007.0/i586/perl-Net-DNS-0.58-1.2mdv2007.0.i586.rpm 
 434fdd9456118124117a26509c6d1674  2007.0/SRPMS/perl-Net-DNS-0.58-1.2mdv2007.0.src.rpm

 Mandriva Linux 2007.0/X86_64:
 374101d8c50675d8032c5695dfb0866f  2007.0/x86_64/perl-Net-DNS-0.58-1.2mdv2007.0.x86_64.rpm 
 434fdd9456118124117a26509c6d1674  2007.0/SRPMS/perl-Net-DNS-0.58-1.2mdv2007.0.src.rpm

 Mandriva Linux 2007.1:
 8ff35127ae1c20c0b4e4cf3734b41d78  2007.1/i586/perl-Net-DNS-0.59-1.2mdv2007.1.i586.rpm 
 0630c817a581736750b3aa3a36330442  2007.1/SRPMS/perl-Net-DNS-0.59-1.2mdv2007.1.src.rpm

 Mandriva Linux 2007.1/X86_64:
 2db71882e00490ed228d3544e73d5dfa  2007.1/x86_64/perl-Net-DNS-0.59-1.2mdv2007.1.x86_64.rpm 
 0630c817a581736750b3aa3a36330442  2007.1/SRPMS/perl-Net-DNS-0.59-1.2mdv2007.1.src.rpm

 Mandriva Linux 2008.0:
 46454d0d2ffbccc32875d38428f5dbb7  2008.0/i586/perl-Net-DNS-0.61-1.1mdv2008.0.i586.rpm 
 0dd436fba91470dbd4cc4a5371cfa909  2008.0/SRPMS/perl-Net-DNS-0.61-1.1mdv2008.0.src.rpm

 Mandriva Linux 2008.0/X86_64:
 3724958b2631242743be3d24ed463e5f  2008.0/x86_64/perl-Net-DNS-0.61-1.1mdv2008.0.x86_64.rpm 
 0dd436fba91470dbd4cc4a5371cfa909  2008.0/SRPMS/perl-Net-DNS-0.61-1.1mdv2008.0.src.rpm

 Corporate 3.0:
 34228478b5f31c0a2c9beb80de8a004b  corporate/3.0/i586/perl-Net-DNS-0.39-2.2.C30mdk.i586.rpm 
 8846ab7ae3ecf66ee93666e4551e091b  corporate/3.0/SRPMS/perl-Net-DNS-0.39-2.2.C30mdk.src.rpm

 Corporate 3.0/X86_64:
 9d62397d900754063b46a1f6a7dcae9c  corporate/3.0/x86_64/perl-Net-DNS-0.39-2.2.C30mdk.x86_64.rpm 
 8846ab7ae3ecf66ee93666e4551e091b  corporate/3.0/SRPMS/perl-Net-DNS-0.39-2.2.C30mdk.src.rpm

 Corporate 4.0:
 57bb9572548a1727cdfde07176a55fc2  corporate/4.0/i586/perl-Net-DNS-0.52-1.2.20060mlcs4.i586.rpm 
 cd1731f072ad841c1244b6e873226422  corporate/4.0/SRPMS/perl-Net-DNS-0.52-1.2.20060mlcs4.src.rpm

 Corporate 4.0/X86_64:
 454f468cd925c1fccdf20751ac884dd9  corporate/4.0/x86_64/perl-Net-DNS-0.52-1.2.20060mlcs4.x86_64.rpm 
 cd1731f072ad841c1244b6e873226422  corporate/4.0/SRPMS/perl-Net-DNS-0.52-1.2.20060mlcs4.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)

iD8DBQFH4p/ImqjQ0CJFipgRAjg7AJ94BiQLAcokF5ttd9yHBSDBtDE08ACgys4V
HlrGqAi2vzXL0Oc7eQ7AX2g=
=CA0R
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/