newt-0.52.2-13AXS3

エラータID: AXSA:2009-404:02

Release date: 
Wednesday, September 30, 2009 - 14:22
Subject: 
newt-0.52.2-13AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

Newt is a programming library for color text mode, widget based user interfaces. Newt can be used to add stacked windows, entry widgets, checkboxes, radio buttons, labels, plain text fields, scrollbars, etc., to text mode user interfaces. This package also contains the shared library needed by programs built with newt, as well as a /usr/bin/dialog replacement called whiptail. Newt is based on the slang library.
Security bugs fixed with this release:
CVE-2009-2905
No description available at the time of writing, see CVE link below.

Solution: 

Update packages.

CVEs: 
CVE-2009-2905
Heap-based buffer overflow in textbox.c in newt 0.51.5, 0.51.6, and 0.52.2 allows local users to cause a denial of service (application crash) or possibly execute arbitrary code via a request to display a crafted text dialog box.


Additional Info: 

N/A

Download: 

SRPMS
  1. newt-0.52.2-13AXS3.src.rpm
    MD5: 04eb75d8e3c6907218a764ed92973b6e
    SHA-256: 85f16fcf83b2415668d9c703f0bcc2f574a193d2500b0bcbbfd1106aef97ad5c
    Size: 280.25 kB

Asianux Server 3 for x86
  1. newt-0.52.2-13AXS3.i386.rpm
    MD5: dfcb4bf149d2fad0ee5680f2f97d97b6
    SHA-256: 1a68265dbc79b87b33a1f4871f74d7a5fb8b343134ffecff7195089e9190bf2e
    Size: 107.49 kB
  2. newt-devel-0.52.2-13AXS3.i386.rpm
    MD5: d89ba61dc2a215be79a39e66d63dc66f
    SHA-256: cd9195b6105e8a6e9156e4acba2e4e5f8b349ccfc3ec1ebd4068cb365337d0bc
    Size: 75.63 kB

Asianux Server 3 for x86_64
  1. newt-0.52.2-13AXS3.x86_64.rpm
    MD5: 6c5409568a379a8b4bb6cb87bd163d88
    SHA-256: c681235049b828e7ca75ded3b22b9dc3434e38c31a78a3f1514e176f63d0aca0
    Size: 109.43 kB
  2. newt-devel-0.52.2-13AXS3.x86_64.rpm
    MD5: 5440d0e29a8cbeae125204ae8ba20fdb
    SHA-256: b1817513a7861d8e40abacf0e1699dfacea8c34d077b43eb29247734db1dfbd5
    Size: 77.36 kB