netcf-0.2.8-1.el7

エラータID: AXSA:2015-621:01

Release date: 
Friday, November 20, 2015 - 20:51
Subject: 
netcf-0.2.8-1.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

Netcf is a library used to modify the network configuration of a
system. Network configurations are expressed in a platform-independent
XML format, which netcf translates into changes to the system's
'native' network configuration files.

Security issues fixed with this release:

CVE-2014-8119
** RESERVED **
This candidate has been reserved by an organization or individual that
will use it when announcing a new security problem. When the
candidate has been publicized, the details for this candidate will be
provided.

Solution: 

Update packages.

CVEs: 
CVE-2014-8119
The find_ifcfg_path function in netcf before 0.2.7 might allow attackers to cause a denial of service (application crash) via vectors involving augeas path expressions.
Additional Info: 

N/A

Download: 

SRPMS
  1. netcf-0.2.8-1.el7.src.rpm
    MD5: 89075ba4b203f96a185838dd3bcb9c7b
    SHA-256: 9e32cdacd2069997918a75e1e5ac12b6f11b1b9a0b02afea62ce7dd97d91b242
    Size: 1.14 MB

Asianux Server 7 for x86_64
  1. netcf-libs-0.2.8-1.el7.x86_64.rpm
    MD5: f6af0531d12c400445a465654f67d861
    SHA-256: d7fca1d5dc96a6347cd8acadfe32ea689401cc270aa11bb5ae06218aa1a4c3fe
    Size: 68.46 kB
  2. netcf-libs-0.2.8-1.el7.i686.rpm
    MD5: 37c84abc203b27faf1bec299be595287
    SHA-256: c7595afd4f04f55c7d41a79ce33669bc0fd5daa4a040c54d4d29e8b30f0c30ba
    Size: 68.67 kB