Уведомление безопасности SUSE-SA:2011:035

Средняя (5.0)

(AV:N/AC:L/Au:N/C:P/I:N/A:N)

SUSE

glibc (any) glibc-32bit (any) glibc-64bit (any) glibc-dceext (any) glibc-dceext-32bit (any) glibc-dceext-64bit (any) glibc-dceext-x86 (any) glibc-debuginfo (any) glibc-devel (any) glibc-devel-32bit (any) glibc-devel-64bit (any) glibc-html (any) glibc-i18ndata (any) glibc-info (any) glibc-locale (any) glibc-locale-32bit (any) glibc-locale-64bit (any) glibc-locale-x86 (any) glibc-obsolete (any) glibc-profile (any) glibc-profile-32bit (any) glibc-profile-64bit (any) glibc-profile-x86 (any) glibc-x86 (any) libxcrypt (any) libxcrypt-32bit (any) libxcrypt-64bit (any) libxcrypt-devel (any) libxcrypt-x86 (any) nscd (any) pam-modules (any) pam-modules-10 (any) pam-modules-11 (any) pam-modules-32bit (any) pam-modules-64bit (any) pam-modules-9 (any) pam-modules-x86-10 (any) pam-modules-x86-11 (any) pwdutils (any) pwdutils-plugin-audit (any) pwdutils-rpasswd (any) pwdutils-rpasswd-32bit (any) timezone (any)

Уведомление безопасности об уязвимостях openSUSE 11.3, openSUSE 11.4, SUSE SLES 9, Open Enterprise Server, Novell Linux POS 9, SLE SDK 10 SP3, SUSE Linux Enterprise Server 10 SP3, SUSE Linux Enterprise Software Development Kit 11 SP1, SUSE Linux Enterprise Desktop 11 SP1, SUSE Linux Enterprise Server 11 SP1, SUSE Linux Enterprise Desktop 10 SP4, SLE SDK 10 SP4, SUSE Linux Enterprise Server 10 SP4

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
openSUSE 11.3:
i686:
glibc-devel - 2.11.2-3.5.1
glibc - 2.11.2-3.5.1
SUSE Linux Enterprise Software Development Kit 10 SP3:
ia64:
glibc-dceext - 2.4-31.77.86.1
glibc-dceext-x86 - 2.4-31.77.86.1
glibc-html - 2.4-31.77.86.1
glibc-profile - 2.4-31.77.86.1
glibc-profile-x86 - 2.4-31.77.86.1
libxcrypt-devel - 2.4-12.9.4
pwdutils-plugin-audit - 3.0.7.1-17.34.36.3
SUSE Linux Enterprise Software Development Kit 11 SP1:
ppc64:
libxcrypt-devel - 3.0.3-0.4.1
SUSE Linux Enterprise Server 11 SP1:
ia64:
glibc - 2.11.1-0.32.1
glibc-devel - 2.11.1-0.32.1
glibc-html - 2.11.1-0.32.1
glibc-i18ndata - 2.11.1-0.32.1
glibc-info - 2.11.1-0.32.1
glibc-locale - 2.11.1-0.32.1
glibc-locale-x86 - 2.11.1-0.32.1
glibc-profile - 2.11.1-0.32.1
glibc-profile-x86 - 2.11.1-0.32.1
glibc-x86 - 2.11.1-0.32.1
libxcrypt - 3.0.3-0.4.1
libxcrypt-x86 - 3.0.3-0.4.1
nscd - 2.11.1-0.32.1
pam-modules-11 - 1.18.1
pam-modules-x86-11 - 1.18.1
pwdutils - 3.2.8-0.4.1
pwdutils-plugin-audit - 3.2.8-0.4.1
SUSE Linux Enterprise Software Development Kit 10 SP4:
i586:
glibc-dceext - 2.4-31.93.1
glibc-html - 2.4-31.93.1
glibc-profile - 2.4-31.93.1
libxcrypt-devel - 2.4-12.9.4
pwdutils-plugin-audit - 3.0.7.1-17.36.2
openSUSE 11.4:
i686:
glibc-devel - 2.11.3-12.17.1
glibc - 2.11.3-12.17.1
SUSE Linux Enterprise Server 11 SP1 for VMware:
i686:
glibc - 2.11.1-0.32.1
glibc-devel - 2.11.1-0.32.1
SUSE Linux Enterprise Server 9:
ia64:
glibc - 2.3.3-98.123
glibc-devel - 2.3.3-98.123
glibc-html - 2.3.3-98.123
glibc-i18ndata - 2.3.3-98.123
glibc-info - 2.3.3-98.123
glibc-locale - 2.3.3-98.123
glibc-locale-x86 - 9-201107291651
glibc-profile - 2.3.3-98.123
glibc-x86 - 9-201108011005
libxcrypt - 2.1.90-61.6
libxcrypt-devel - 2.1.90-61.6
libxcrypt-x86 - 9-201107291733
nscd - 2.3.3-98.123
pam-modules-9 - 18.21
pam-modules-x86 - 9-201107291830
pwdutils - 2.6.4-2.34
timezone - 2.3.3-98.123
SUSE Linux Enterprise Server 10 SP3:
ia64:
glibc - 2.4-31.77.86.1
glibc-devel - 2.4-31.77.86.1
glibc-html - 2.4-31.77.86.1
glibc-i18ndata - 2.4-31.77.86.1
glibc-info - 2.4-31.77.86.1
glibc-locale - 2.4-31.77.86.1
glibc-locale-x86 - 2.4-31.77.86.1
glibc-profile - 2.4-31.77.86.1
glibc-profile-x86 - 2.4-31.77.86.1
glibc-x86 - 2.4-31.77.86.1
libxcrypt - 2.4-12.9.4
libxcrypt-devel - 2.4-12.9.4
libxcrypt-x86 - 2.4-12.9.4
nscd - 2.4-31.77.86.1
pam-modules-10 - 2.17.4
pam-modules-x86-10 - 2.17.4
pwdutils - 3.0.7.1-17.34.36.3
pwdutils-plugin-audit - 3.0.7.1-17.34.36.3
glibc-debuginfo - 2.4-31.77.86.1
SUSE Linux Enterprise Desktop 11 SP1:
i686:
glibc - 2.11.1-0.32.1
glibc-devel - 2.11.1-0.32.1
Novell Linux Point of Service 9:
i686:
glibc - 2.3.3-98.123
glibc-devel - 2.3.3-98.123
Novell Open Enterprise Server (OES):
i686:
glibc - 2.3.3-98.123
glibc-devel - 2.3.3-98.123
SUSE Linux Enterprise Desktop 10 SP4:
i686:
glibc - 2.4-31.93.1
glibc-devel - 2.4-31.93.1
SUSE Linux Enterprise Server 10 SP4:
ia64:
glibc - 2.4-31.93.1
glibc-devel - 2.4-31.93.1
glibc-html - 2.4-31.93.1
glibc-i18ndata - 2.4-31.93.1
glibc-info - 2.4-31.93.1
glibc-locale - 2.4-31.93.1
glibc-locale-x86 - 2.4-31.93.1
glibc-profile - 2.4-31.93.1
glibc-profile-x86 - 2.4-31.93.1
glibc-x86 - 2.4-31.93.1
libxcrypt - 2.4-12.9.4
libxcrypt-devel - 2.4-12.9.4
libxcrypt-x86 - 2.4-12.9.4
nscd - 2.4-31.93.1
pam-modules-10 - 2.17.4
pam-modules-x86-10 - 2.17.4
pwdutils - 3.0.7.1-17.36.2
pwdutils-plugin-audit - 3.0.7.1-17.36.2
glibc-debuginfo - 2.4-31.93.1

https://www.suse.com/support/security/advisories/2011_35_blowfish.html

Источник: CVE
Наименование: CVE-2011-2483
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2483