Mandriva Linux Security Advisory 2015-001 - Several vulnerabilities were found in c-icap, which could allow a remote attacker to cause c-icap to crash, or have other, unspecified impacts.
0f1dea29e268a7f4a77c6e776111c3f9721118763c213c2c9168cb99163161a7
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
_______________________________________________________________________
Mandriva Linux Security Advisory MDVSA-2015:001
http://www.mandriva.com/en/support/security/
_______________________________________________________________________
Package : c-icap
Date : January 5, 2015
Affected: Business Server 1.0
_______________________________________________________________________
Problem Description:
Updated c-icap packages fix security vulnerabilities:
Several vulnerabilities were found in c-icap, which could allow a
remote attacker to cause c-icap to crash, or have other, unspecified
impacts (CVE-2013-7401, CVE-2013-7402).
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7401
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7402
http://advisories.mageia.org/MGASA-2014-0530.html
_______________________________________________________________________
Updated Packages:
Mandriva Business Server 1/X86_64:
1809f259a8c7933a825bc3ec203dab30 mbs1/x86_64/c-icap-client-0.1.7-4.1.mbs1.x86_64.rpm
3dda12f87e3ab036ae448f1faf3a31d7 mbs1/x86_64/c-icap-modules-0.1.7-4.1.mbs1.x86_64.rpm
d0f7c50174f6de3eb77bd108fca67e11 mbs1/x86_64/c-icap-server-0.1.7-4.1.mbs1.x86_64.rpm
100723c5b3e2115bc4e0687d896afa47 mbs1/x86_64/lib64c-icap0-0.1.7-4.1.mbs1.x86_64.rpm
672cede59f012834511bbbc27e0086cc mbs1/x86_64/lib64c-icap-devel-0.1.7-4.1.mbs1.x86_64.rpm
096afdbb3e12fff3159b8747ed8557d6 mbs1/SRPMS/c-icap-0.1.7-4.1.mbs1.src.rpm
_______________________________________________________________________
To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.
All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:
gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98
You can view other update advisories for Mandriva Linux at:
http://www.mandriva.com/en/support/security/advisories/
If you want to report vulnerabilities, please contact
security_(at)_mandriva.com
_______________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iD8DBQFUqmXUmqjQ0CJFipgRArj5AKDPqnhm2KpriM8iuUVCGcaC+Erl+ACg67JH
4qDT/E3i5xnxLjnh8N7wdMQ=
=mqN2
-----END PGP SIGNATURE-----