Уведомление безопасности DSA-1947

Средняя (2.6)

(AV:N/AC:H/Au:N/C:N/I:P/A:N)

Debian

libapache2-mod-shib (any) libapache2-mod-shib2 (any) libsaml2 (any) libsaml2-dev (any) libsaml2-doc (any) libshib6 (any) libshib-dev (any) libshibsp1 (any) libshibsp-dev (any) libshibsp-doc (any) libshib-target5 (any) opensaml2-schemas (any) opensaml2-tools (any) shibboleth-sp2-schemas (any)

Уведомление безопасности об уязвимостях libshib6, libsaml2-dev, shibboleth-sp2-schemas, libshib-dev, libshibsp1, libapache2-mod-shib2, libshibsp-doc, libsaml2, opensaml2-schemas, libapache2-mod-shib, libsaml2-doc, opensaml2-tools, libshibsp-dev, libshib-target5

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
s390x:
libapache2-mod-shib - 1.3f.dfsg1-2+etch2
libshib-dev - 1.3f.dfsg1-2+etch2
libshib-target5 - 1.3f.dfsg1-2+etch2
libshib6 - 1.3f.dfsg1-2+etch2
i686:
libshib-dev - 1.3f.dfsg1-2+etch2
libshib6 - 1.3f.dfsg1-2+etch2
libshib-target5 - 1.3f.dfsg1-2+etch2
libapache2-mod-shib - 1.3f.dfsg1-2+etch2
arm:
libshib-dev - 1.3f.dfsg1-2+etch2
libshib-target5 - 1.3f.dfsg1-2+etch2
libshib6 - 1.3f.dfsg1-2+etch2
libapache2-mod-shib - 1.3f.dfsg1-2+etch2
sparc:
libapache2-mod-shib - 1.3f.dfsg1-2+etch2
libshib6 - 1.3f.dfsg1-2+etch2
libshib-dev - 1.3f.dfsg1-2+etch2
libshib-target5 - 1.3f.dfsg1-2+etch2
x86-64:
libshib-dev - 1.3f.dfsg1-2+etch2
libshib6 - 1.3f.dfsg1-2+etch2
libapache2-mod-shib - 1.3f.dfsg1-2+etch2
libshib-target5 - 1.3f.dfsg1-2+etch2
ia64:
libapache2-mod-shib - 1.3f.dfsg1-2+etch2
libshib-target5 - 1.3f.dfsg1-2+etch2
libshib-dev - 1.3f.dfsg1-2+etch2
libshib6 - 1.3f.dfsg1-2+etch2
alpha:
libshib-dev - 1.3f.dfsg1-2+etch2
libshib-target5 - 1.3f.dfsg1-2+etch2
libshib6 - 1.3f.dfsg1-2+etch2
libapache2-mod-shib - 1.3f.dfsg1-2+etch2
mipsel:
libshib-target5 - 1.3f.dfsg1-2+etch2
libapache2-mod-shib - 1.3f.dfsg1-2+etch2
libshib-dev - 1.3f.dfsg1-2+etch2
libshib6 - 1.3f.dfsg1-2+etch2
hppa:
libshib6 - 1.3f.dfsg1-2+etch2
libapache2-mod-shib - 1.3f.dfsg1-2+etch2
libshib-target5 - 1.3f.dfsg1-2+etch2
libshib-dev - 1.3f.dfsg1-2+etch2
Debian GNU/Linux 5:
ppc:
libshib-target5 - 1.3.1.dfsg1-3+lenny2
libshib-dev - 1.3.1.dfsg1-3+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
s390x:
libsaml2 - 2.0-2+lenny2
libshib-dev - 1.3.1.dfsg1-3+lenny2
libshib-target5 - 1.3.1.dfsg1-3+lenny2
libsaml2-dev - 2.0-2+lenny2
libshibsp1 - 2.0.dfsg1-4+lenny2
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libapache2-mod-shib2 - 2.0.dfsg1-4+lenny2
libshibsp-dev - 2.0.dfsg1-4+lenny2
opensaml2-tools - 2.0-2+lenny2
i686:
libshibsp-dev - 2.0.dfsg1-4+lenny2
libshibsp1 - 2.0.dfsg1-4+lenny2
libsaml2 - 2.0-2+lenny2
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
libsaml2-dev - 2.0-2+lenny2
libshib-target5 - 1.3.1.dfsg1-3+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libapache2-mod-shib2 - 2.0.dfsg1-4+lenny2
opensaml2-tools - 2.0-2+lenny2
libshib-dev - 1.3.1.dfsg1-3+lenny2
hppa:
libsaml2-dev - 2.0-2+lenny2
libshibsp1 - 2.0.dfsg1-4+lenny2
libsaml2 - 2.0-2+lenny2
opensaml2-tools - 2.0-2+lenny2
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
libshib-target5 - 1.3.1.dfsg1-3+lenny2
libshib-dev - 1.3.1.dfsg1-3+lenny2
libapache2-mod-shib2 - 2.0.dfsg1-4+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libshibsp-dev - 2.0.dfsg1-4+lenny2
sparc:
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
opensaml2-tools - 2.0-2+lenny2
libshibsp-dev - 2.0.dfsg1-4+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libsaml2-dev - 2.0-2+lenny2
libshib-target5 - 1.3.1.dfsg1-3+lenny2
libapache2-mod-shib2 - 2.0.dfsg1-4+lenny2
libsaml2 - 2.0-2+lenny2
libshibsp1 - 2.0.dfsg1-4+lenny2
libshib-dev - 1.3.1.dfsg1-3+lenny2
x86-64:
libapache2-mod-shib2 - 2.0.dfsg1-4+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libsaml2-dev - 2.0-2+lenny2
libshibsp1 - 2.0.dfsg1-4+lenny2
libshib-target5 - 1.3.1.dfsg1-3+lenny2
libshibsp-dev - 2.0.dfsg1-4+lenny2
opensaml2-tools - 2.0-2+lenny2
libshib-dev - 1.3.1.dfsg1-3+lenny2
libsaml2 - 2.0-2+lenny2
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
armel:
libapache2-mod-shib2 - 2.0.dfsg1-4+lenny2
libshib-dev - 1.3.1.dfsg1-3+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libshibsp1 - 2.0.dfsg1-4+lenny2
libsaml2-dev - 2.0-2+lenny2
opensaml2-tools - 2.0-2+lenny2
libsaml2 - 2.0-2+lenny2
libshibsp-dev - 2.0.dfsg1-4+lenny2
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
libshib-target5 - 1.3.1.dfsg1-3+lenny2
alpha:
libshib-dev - 1.3.1.dfsg1-3+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libshib-target5 - 1.3.1.dfsg1-3+lenny2
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
libapache2-mod-shib2 - 2.0.dfsg1-4+lenny2
libshibsp1 - 2.0.dfsg1-4+lenny2
libshibsp-dev - 2.0.dfsg1-4+lenny2
ia64:
libshibsp1 - 2.0.dfsg1-4+lenny2
libshib-dev - 1.3.1.dfsg1-3+lenny2
libshibsp-dev - 2.0.dfsg1-4+lenny2
libsaml2-dev - 2.0-2+lenny2
libshib-target5 - 1.3.1.dfsg1-3+lenny2
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
libapache2-mod-shib2 - 2.0.dfsg1-4+lenny2
opensaml2-tools - 2.0-2+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libsaml2 - 2.0-2+lenny2
mips:
libsaml2-dev - 2.0-2+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libsaml2 - 2.0-2+lenny2
libshib-dev - 1.3.1.dfsg1-3+lenny2
libshibsp-dev - 2.0.dfsg1-4+lenny2
libapache2-mod-shib2 - 2.0.dfsg1-4+lenny2
opensaml2-tools - 2.0-2+lenny2
libshib-target5 - 1.3.1.dfsg1-3+lenny2
libshibsp1 - 2.0.dfsg1-4+lenny2
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
noarch:
libsaml2-doc - 2.0-2+lenny2
opensaml2-schemas - 2.0-2+lenny2
libshibsp-doc - 2.0.dfsg1-4+lenny2
shibboleth-sp2-schemas - 2.0.dfsg1-4+lenny2
mipsel:
libshib-target5 - 1.3.1.dfsg1-3+lenny2
opensaml2-tools - 2.0-2+lenny2
libapache2-mod-shib2 - 2.0.dfsg1-4+lenny2
libshibsp1 - 2.0.dfsg1-4+lenny2
libshibsp-dev - 2.0.dfsg1-4+lenny2
libsaml2-dev - 2.0-2+lenny2
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
libshib-dev - 1.3.1.dfsg1-3+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libsaml2 - 2.0-2+lenny2
arm:
libapache2-mod-shib2 - 2.0.dfsg1-4+lenny2
libshib-dev - 1.3.1.dfsg1-3+lenny2
libshib6 - 1.3.1.dfsg1-3+lenny2
libapache2-mod-shib - 1.3.1.dfsg1-3+lenny2
libsaml2-dev - 2.0-2+lenny2
libshib-target5 - 1.3.1.dfsg1-3+lenny2
opensaml2-tools - 2.0-2+lenny2
libshibsp-dev - 2.0.dfsg1-4+lenny2
libsaml2 - 2.0-2+lenny2
libshibsp1 - 2.0.dfsg1-4+lenny2

http://www.debian.org/security/dsa-1947/

Источник: CVE
Наименование: CVE-2009-3300
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3300