sos-1.7-9.62.1.0.1.AXS3

エラータID: AXSA:2013-582:01

Release date: 
Thursday, August 1, 2013 - 12:01
Subject: 
sos-1.7-9.62.1.0.1.AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

Sos is a set of tools that gathers information about system hardware and configuration. The information can then be used for diagnostic purposes and debugging. Sos is commonly used to help support technicians and developers.

Security issues fixed with this release:

• CVE-2012-2664
The sosreport utility in the sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.

Solution: 

Update packages.

CVEs: 
CVE-2012-2664
The sosreport utility in the Red Hat sos package before 2.2-29 does not remove the root user password information from the Kickstart configuration file (/root/anaconda-ks.cfg) when creating an archive of debugging information, which might allow attackers to obtain passwords or password hashes.


Additional Info: 

N/A

Download: 

SRPMS
  1. sos-1.7-9.62.1.0.1.AXS3.src.rpm
    MD5: 8aa4153c0fc12222d6c5e25a1d98c166
    SHA-256: 0378cbe4ec23b02cb7bd35680d45f2cc4796295d94165ef5fac6fd84c02d4880
    Size: 195.18 kB

Asianux Server 3 for x86
  1. sos-1.7-9.62.1.0.1.AXS3.noarch.rpm
    MD5: ae8b2d4de6739eedcb29e8daf8d2d2fe
    SHA-256: 54c1575548e560d79efd85d86f9f088dcee40f651172847eeef6a511c7e58160
    Size: 165.95 kB

Asianux Server 3 for x86_64
  1. sos-1.7-9.62.1.0.1.AXS3.noarch.rpm
    MD5: 942652988d939d5515d9cb1287a225e4
    SHA-256: 24985c6bdbb69e72f7c6547f5bda72f30a6ef580b8b943064cb5724aa3bbd60a
    Size: 165.85 kB