SCIENTIFIC-LINUX-ERRATA Archives

December 2013

SCIENTIFIC-LINUX-ERRATA@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
Security ERRATA Low: coreutils on SL6.x i386/x86_64
From:
Pat Riehecky <[log in to unmask]>
Reply To:
[log in to unmask]
Date:
Mon, 9 Dec 2013 16:03:02 +0000
Content-Type:
text/plain
Parts/Attachments:
text/plain (26 lines) 
Synopsis:          Low: coreutils security, bug fix, and enhancement update
Advisory ID:       SLSA-2013:1652-2
Issue Date:        2013-11-21
CVE Numbers:       CVE-2013-0221
                   CVE-2013-0222
                   CVE-2013-0223
--

It was discovered that the sort, uniq, and join utilities did not properly
restrict the use of the alloca() function. An attacker could use this flaw
to crash those utilities by providing long input strings. (CVE-2013-0221,
CVE-2013-0222, CVE-2013-0223)
--

SL6
  x86_64
    coreutils-8.4-31.el6.x86_64.rpm
    coreutils-debuginfo-8.4-31.el6.x86_64.rpm
    coreutils-libs-8.4-31.el6.x86_64.rpm
  i386
    coreutils-8.4-31.el6.i686.rpm
    coreutils-debuginfo-8.4-31.el6.i686.rpm
    coreutils-libs-8.4-31.el6.i686.rpm

- Scientific Linux Development Team

ATOM RSS1 RSS2