Technical Description

Mandriva has released updated packages to address a vulnerability identified in libksba. This flaw could be exploited by attackers to cause a denial of service. For additional information, see : VUPEN/ADV-2006-4075

Affected Products

Mandriva Linux 2006.0
Corporate 4.0

Solution

Upgrade the affected packages :

Mandriva Linux 2006.0:
8f3e8e56ed3cc75930ac17526e565e12 2006.0/i586/libksba8-0.9.11-2.1.20060mdk.i586.rpm
c3e82905d3281c6c32bf3689ad606866 2006.0/i586/libksba8-devel-0.9.11-2.1.20060mdk.i586.rpm
2e4266dd10459a85e466e0158d980b31 2006.0/SRPMS/libksba-0.9.11-2.1.20060mdk.src.rpm

Mandriva Linux 2006.0/X86_64:
34895ba2aef7cedd7463720a333e125c 2006.0/x86_64/lib64ksba8-0.9.11-2.1.20060mdk.x86_64.rpm
014585f62f3074d3bd6646eac7076d39 2006.0/x86_64/lib64ksba8-devel-0.9.11-2.1.20060mdk.x86_64.rpm
2e4266dd10459a85e466e0158d980b31 2006.0/SRPMS/libksba-0.9.11-2.1.20060mdk.src.rpm

Corporate 4.0:
cddf7be9c4bbf73b688cc0c95a6b77ce corporate/4.0/i586/libksba8-0.9.11-2.1.20060mlcs4.i586.rpm
d6252717330d573c24dea70899365e4d corporate/4.0/i586/libksba8-devel-0.9.11-2.1.20060mlcs4.i586.rpm
e8c7164eac4cc325120847f858944f2d corporate/4.0/SRPMS/libksba-0.9.11-2.1.20060mlcs4.src.rpm

Corporate 4.0/X86_64:
6e447266e8b71fa94dfc271613f1df43 corporate/4.0/x86_64/lib64ksba8-0.9.11-2.1.20060mlcs4.x86_64.rpm
6eab52fe9640a888f358ffa3e978cbea corporate/4.0/x86_64/lib64ksba8-devel-0.9.11-2.1.20060mlcs4.x86_64.rpm
e8c7164eac4cc325120847f858944f2d corporate/4.0/SRPMS/libksba-0.9.11-2.1.20060mlcs4.src.rpm

References

http://www.vupen.com/english/advisories/2006/4076
http://archives.mandrivalinux.com/security-announce/2006-10/msg00013.php

ChangeLog

2006-10-18 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.