Technical Description

Multiple vulnerabilities have been identified in Trustix Secure Linux, which could be exploited by attackers to cause a denial of service. These issues are caused by errors in Fetchmail and Quagga. For additional information, see : VUPEN/ADV-2007-3032 - VUPEN/ADV-2007-3129

Affected Products

Trustix Secure Linux 2.2
Trustix Secure Linux 3.0
Trustix Secure Linux 3.0.5

Solution

Upgrade the affected packages :

http://http.trustix.org/pub/trustix/updates

95b2ba1599a97537ba2f83931e87bdf6 3.0.5/rpms/fetchmail-6.3.8-2tr.i586.rpm
09a74f684fe7defa895b1f74d4a7143b 3.0.5/rpms/quagga-0.99.9-1tr.i586.rpm
fb58f6d4fa0ca59d2f090890ff72062b 3.0.5/rpms/quagga-contrib-0.99.9-1tr.i586.rpm
37f166765e8f856293c5c158dd7f6b31 3.0.5/rpms/quagga-devel-0.99.9-1tr.i586.rpm
c723ea6a08142467e42863dbf5a093c9 3.0/rpms/fetchmail-6.3.8-2tr.i586.rpm
679540fb0bbeced75250a4525552e951 3.0/rpms/quagga-0.99.9-1tr.i586.rpm
f9d7a4574109eecf458325d0fc90f3bf 3.0/rpms/quagga-contrib-0.99.9-1tr.i586.rpm
31b16f3bbc442b400eb88a836369e1c1 3.0/rpms/quagga-devel-0.99.9-1tr.i586.rpm

References

http://www.vupen.com/english/advisories/2007/3299
http://lists.trustix.org/pipermail/tsl-announce/2007-September/000483.html

ChangeLog

2007-10-01 : Initial release

Vulnerability Management

Subscribe to VUPEN VNS and receive real-time alerts when new advisories or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.