Уведомление безопасности DSA-1768

Критичная (10.0)

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Debian

libopenafs-dev (any) libpam-openafs-kaserver (any) openafs-client (any) openafs-dbg (any) openafs-dbserver (any) openafs-doc (any) openafs-fileserver (any) openafs-kpasswd (any) openafs-krb5 (any) openafs-modules-source (any)

Уведомление безопасности об уязвимостях openafs-client, openafs-doc, openafs-dbserver, openafs-dbg, openafs-fileserver, libpam-openafs-kaserver, openafs-krb5, openafs-kpasswd, libopenafs-dev, openafs-modules-source

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
Debian GNU/Linux 4:
ppc:
openafs-dbserver - 1.4.2-6etch2
openafs-kpasswd - 1.4.2-6etch2
openafs-fileserver - 1.4.2-6etch2
libpam-openafs-kaserver - 1.4.2-6etch2
openafs-dbg - 1.4.2-6etch2
openafs-client - 1.4.2-6etch2
openafs-krb5 - 1.4.2-6etch2
libopenafs-dev - 1.4.2-6etch2
s390x:
openafs-fileserver - 1.4.2-6etch2
openafs-kpasswd - 1.4.2-6etch2
openafs-dbserver - 1.4.2-6etch2
libpam-openafs-kaserver - 1.4.2-6etch2
openafs-dbg - 1.4.2-6etch2
openafs-krb5 - 1.4.2-6etch2
openafs-client - 1.4.2-6etch2
libopenafs-dev - 1.4.2-6etch2
i686:
libpam-openafs-kaserver - 1.4.2-6etch2
openafs-client - 1.4.2-6etch2
libopenafs-dev - 1.4.2-6etch2
openafs-dbg - 1.4.2-6etch2
openafs-krb5 - 1.4.2-6etch2
openafs-fileserver - 1.4.2-6etch2
openafs-dbserver - 1.4.2-6etch2
openafs-kpasswd - 1.4.2-6etch2
sparc:
openafs-dbg - 1.4.2-6etch2
openafs-krb5 - 1.4.2-6etch2
libopenafs-dev - 1.4.2-6etch2
libpam-openafs-kaserver - 1.4.2-6etch2
openafs-fileserver - 1.4.2-6etch2
openafs-kpasswd - 1.4.2-6etch2
openafs-dbserver - 1.4.2-6etch2
openafs-client - 1.4.2-6etch2
x86-64:
openafs-kpasswd - 1.4.2-6etch2
openafs-dbserver - 1.4.2-6etch2
openafs-dbg - 1.4.2-6etch2
openafs-fileserver - 1.4.2-6etch2
openafs-krb5 - 1.4.2-6etch2
libopenafs-dev - 1.4.2-6etch2
libpam-openafs-kaserver - 1.4.2-6etch2
openafs-client - 1.4.2-6etch2
ia64:
openafs-kpasswd - 1.4.2-6etch2
libopenafs-dev - 1.4.2-6etch2
openafs-client - 1.4.2-6etch2
openafs-krb5 - 1.4.2-6etch2
openafs-fileserver - 1.4.2-6etch2
openafs-dbg - 1.4.2-6etch2
openafs-dbserver - 1.4.2-6etch2
libpam-openafs-kaserver - 1.4.2-6etch2
alpha:
openafs-dbg - 1.4.2-6etch2
openafs-fileserver - 1.4.2-6etch2
libpam-openafs-kaserver - 1.4.2-6etch2
openafs-client - 1.4.2-6etch2
openafs-krb5 - 1.4.2-6etch2
libopenafs-dev - 1.4.2-6etch2
openafs-dbserver - 1.4.2-6etch2
openafs-kpasswd - 1.4.2-6etch2
noarch:
openafs-doc - 1.4.2-6etch2
openafs-modules-source - 1.4.2-6etch2
hppa:
openafs-client - 1.4.2-6etch2
openafs-krb5 - 1.4.2-6etch2
openafs-fileserver - 1.4.2-6etch2
libpam-openafs-kaserver - 1.4.2-6etch2
libopenafs-dev - 1.4.2-6etch2
openafs-dbg - 1.4.2-6etch2
openafs-kpasswd - 1.4.2-6etch2
openafs-dbserver - 1.4.2-6etch2
Debian GNU/Linux 5:
ppc:
libpam-openafs-kaserver - 1.4.7.dfsg1-6+lenny1
openafs-fileserver - 1.4.7.dfsg1-6+lenny1
libopenafs-dev - 1.4.7.dfsg1-6+lenny1
openafs-krb5 - 1.4.7.dfsg1-6+lenny1
openafs-dbg - 1.4.7.dfsg1-6+lenny1
openafs-client - 1.4.7.dfsg1-6+lenny1
openafs-dbserver - 1.4.7.dfsg1-6+lenny1
openafs-kpasswd - 1.4.7.dfsg1-6+lenny1
s390x:
openafs-client - 1.4.7.dfsg1-6+lenny1
libpam-openafs-kaserver - 1.4.7.dfsg1-6+lenny1
openafs-dbserver - 1.4.7.dfsg1-6+lenny1
openafs-dbg - 1.4.7.dfsg1-6+lenny1
openafs-kpasswd - 1.4.7.dfsg1-6+lenny1
openafs-fileserver - 1.4.7.dfsg1-6+lenny1
libopenafs-dev - 1.4.7.dfsg1-6+lenny1
openafs-krb5 - 1.4.7.dfsg1-6+lenny1
i686:
libopenafs-dev - 1.4.7.dfsg1-6+lenny1
openafs-krb5 - 1.4.7.dfsg1-6+lenny1
openafs-fileserver - 1.4.7.dfsg1-6+lenny1
openafs-dbg - 1.4.7.dfsg1-6+lenny1
openafs-client - 1.4.7.dfsg1-6+lenny1
openafs-kpasswd - 1.4.7.dfsg1-6+lenny1
openafs-dbserver - 1.4.7.dfsg1-6+lenny1
libpam-openafs-kaserver - 1.4.7.dfsg1-6+lenny1
sparc:
openafs-client - 1.4.7.dfsg1-6+lenny1
libpam-openafs-kaserver - 1.4.7.dfsg1-6+lenny1
libopenafs-dev - 1.4.7.dfsg1-6+lenny1
openafs-dbg - 1.4.7.dfsg1-6+lenny1
openafs-krb5 - 1.4.7.dfsg1-6+lenny1
openafs-kpasswd - 1.4.7.dfsg1-6+lenny1
openafs-dbserver - 1.4.7.dfsg1-6+lenny1
openafs-fileserver - 1.4.7.dfsg1-6+lenny1
x86-64:
openafs-dbg - 1.4.7.dfsg1-6+lenny1
libpam-openafs-kaserver - 1.4.7.dfsg1-6+lenny1
openafs-fileserver - 1.4.7.dfsg1-6+lenny1
openafs-krb5 - 1.4.7.dfsg1-6+lenny1
libopenafs-dev - 1.4.7.dfsg1-6+lenny1
openafs-dbserver - 1.4.7.dfsg1-6+lenny1
openafs-kpasswd - 1.4.7.dfsg1-6+lenny1
openafs-client - 1.4.7.dfsg1-6+lenny1
armel:
openafs-kpasswd - 1.4.7.dfsg1-6+lenny1
openafs-dbserver - 1.4.7.dfsg1-6+lenny1
openafs-krb5 - 1.4.7.dfsg1-6+lenny1
libpam-openafs-kaserver - 1.4.7.dfsg1-6+lenny1
libopenafs-dev - 1.4.7.dfsg1-6+lenny1
openafs-client - 1.4.7.dfsg1-6+lenny1
openafs-fileserver - 1.4.7.dfsg1-6+lenny1
openafs-dbg - 1.4.7.dfsg1-6+lenny1
ia64:
openafs-dbserver - 1.4.7.dfsg1-6+lenny1
openafs-kpasswd - 1.4.7.dfsg1-6+lenny1
libpam-openafs-kaserver - 1.4.7.dfsg1-6+lenny1
openafs-fileserver - 1.4.7.dfsg1-6+lenny1
openafs-dbg - 1.4.7.dfsg1-6+lenny1
libopenafs-dev - 1.4.7.dfsg1-6+lenny1
openafs-client - 1.4.7.dfsg1-6+lenny1
openafs-krb5 - 1.4.7.dfsg1-6+lenny1
alpha:
libpam-openafs-kaserver - 1.4.7.dfsg1-6+lenny1
openafs-dbserver - 1.4.7.dfsg1-6+lenny1
openafs-kpasswd - 1.4.7.dfsg1-6+lenny1
openafs-fileserver - 1.4.7.dfsg1-6+lenny1
libopenafs-dev - 1.4.7.dfsg1-6+lenny1
openafs-krb5 - 1.4.7.dfsg1-6+lenny1
openafs-client - 1.4.7.dfsg1-6+lenny1
openafs-dbg - 1.4.7.dfsg1-6+lenny1
noarch:
openafs-modules-source - 1.4.7.dfsg1-6+lenny1
openafs-doc - 1.4.7.dfsg1-6+lenny1
arm:
openafs-dbserver - 1.4.7.dfsg1-6+lenny1
openafs-kpasswd - 1.4.7.dfsg1-6+lenny1
openafs-krb5 - 1.4.7.dfsg1-6+lenny1
libopenafs-dev - 1.4.7.dfsg1-6+lenny1
openafs-dbg - 1.4.7.dfsg1-6+lenny1
openafs-fileserver - 1.4.7.dfsg1-6+lenny1
openafs-client - 1.4.7.dfsg1-6+lenny1
libpam-openafs-kaserver - 1.4.7.dfsg1-6+lenny1

http://www.debian.org/security/dsa-1768/

Источник: CVE
Наименование: CVE-2009-1250
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1250

Источник: CVE
Наименование: CVE-2009-1251
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1251