ID de Prueba:	1.3.6.1.4.1.25623.1.0.831467
Categoría:	Mandrake Local Security Checks
Título:	Mandriva Update for rpm MDVA-2011:057 (rpm)
Resumen:	The remote host is missing an update for the 'rpm'; package(s) announced via the referenced advisory.
Descripción:	Summary: The remote host is missing an update for the 'rpm' package(s) announced via the referenced advisory. Vulnerability Insight: It was discovered the xz v5.0.0 (lzma) changes in MDVSA-2011:143 were incomplete. This advisory upgrades the xz package to the 5.0.3 version and the spec-helper package to the 0.30.5 version to be able to handle lzma files. Packages for 2009.0 are provided as of the Extended Maintenance Program. Affected Software/OS: rpm on Mandriva Linux 2009.0, Mandriva Linux 2009.0/X86_64, Mandriva Enterprise Server 5, Mandriva Enterprise Server 5/X86_64 Solution: Please Install the Updated Packages. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3378 MDVSA-2011:143 http://www.mandriva.com/security/advisories?name=MDVSA-2011:143 RHSA-2011:1349 http://www.redhat.com/support/errata/RHSA-2011-1349.html SUSE-SU-2011:1140 http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00002.html USN-1695-1 http://www.ubuntu.com/usn/USN-1695-1 [oss-security] 20110927 rpm/librpm/rpm-python memory corruption pre-verification http://www.openwall.com/lists/oss-security/2011/09/27/3 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691 http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=11a7e5d95a8ca8c7d4eaff179094afd8bb74fc3f http://rpm.org/gitweb?p=rpm.git%3Ba=commitdiff%3Bh=a48f0e20cbe2ababc88b2fc52fb7a281d6fc1656 http://rpm.org/wiki/Releases/4.9.1.2#Security https://bugzilla.redhat.com/show_bug.cgi?id=741606 https://bugzilla.redhat.com/show_bug.cgi?id=741612 openSUSE-SU-2011:1203 http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00000.html
Copyright	Copyright (C) 2011 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.