The security update for CVE-2011-2483 broke changing blowfish passwords if compat mode was turned on (default). This update fixes the regression.

This update of yast2-core fixes security issues, bugs, and adds a debugging feature.

Several vulnerabilities have been discovered in PHP, the web scripting language. The Common Vulnerabilities and Exposures project identifies the following issues :

  - CVE-2011-1938     The UNIX socket handling allowed attackers to trigger a     buffer overflow via a long path name.

  - CVE-2011-2483     The crypt_blowfish function did not properly handle     8-bit characters, which made it easier for attackers to     determine a cleartext password by using knowledge of a     password hash.

  - CVE-2011-4566     When used on 32 bit platforms, the exif extension could     be used to trigger an integer overflow in the     exif_process_IFD_TAG function when processing a JPEG     file.

  - CVE-2011-4885     It was possible to trigger hash collisions predictably     when parsing form parameters, which allows remote     attackers to cause a denial of service by sending many     crafted parameters.

  - CVE-2012-0057     When applying a crafted XSLT transform, an attacker     could write files to arbitrary places in the filesystem.

NOTE: the fix for CVE-2011-2483 required changing the behaviour of this function: it is now incompatible with some old (wrongly) generated hashes for passwords containing 8-bit characters. See the package NEWS entry for details. This change has not been applied to the Lenny version of PHP.

The remote host is affected by the vulnerability described in GLSA-201110-22 (PostgreSQL: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in PostgreSQL. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote authenticated attacker could send a specially crafted SQL query       to a PostgreSQL server with the 'intarray' module enabled, possibly       resulting in the execution of arbitrary code with the privileges of the       PostgreSQL server process, or a Denial of Service condition. Furthermore,       a remote authenticated attacker could execute arbitrary Perl code, cause       a Denial of Service condition via different vectors, bypass LDAP       authentication, bypass X.509 certificate validation, gain database       privileges, exploit weak blowfish encryption and possibly cause other       unspecified impact.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
56018	SuSE 11.1 Security Update : libxcrypt (SAT Patch Number 5041)	Nessus	SuSE Local Security Checks	2011/8/31	2021/1/19	medium
56619	SuSE 10 Security Update : yast2-core (ZYPP Patch Number 7725)	Nessus	SuSE Local Security Checks	2011/10/24	2021/1/19	medium
57753	Debian DSA-2399-2 : php5 - several vulnerabilities	Nessus	Debian Local Security Checks	2012/2/1	2021/1/11	high
56626	GLSA-201110-22 : PostgreSQL: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2011/10/25	2021/1/6	high

检测

插件搜索

medium

medium

high

high