udev-095-14.20AXS3

エラータID: AXSA:2009-45:01

Release date: 
Tuesday, April 28, 2009 - 15:51
Subject: 
udev-095-14.20AXS3
Affected Channels: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

The udev package contains an implementation of devfs in userspace using sysfs and netlink.
Fixed bugs:
CVE-2009-1185
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.

Solution: 

Update packages.

CVEs: 
CVE-2009-1185
udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space.


Additional Info: 

N/A

Download: 

SRPMS
  1. udev-095-14.20AXS3.src.rpm
    MD5: 86e15132cb8f39eac381cf3d04d54d5a
    SHA-256: b00d5f95e364d8ccfb1ee2dcf418c7bc104f1740f890b955b65e7f886034e8b8
    Size: 257.11 kB

Asianux Server 3 for x86
  1. libvolume_id-095-14.20AXS3.i386.rpm
    MD5: 923f70c2c819d27af6ed67a9ecdccd3f
    SHA-256: 5cf277b0721d5abb36733eb3ee0048c61fa09eadfe9c49f8407aeb1030685ab5
    Size: 39.96 kB
  2. udev-095-14.20AXS3.i386.rpm
    MD5: ba1ff4a6c0a1631c68ed3ce559f6aef8
    SHA-256: a619b3b0bac68d6e61a93c759ba4b39044cd69f34fceac233551e1df37fefbf9
    Size: 2.30 MB

Asianux Server 3 for x86_64
  1. libvolume_id-095-14.20AXS3.x86_64.rpm
    MD5: 325375a50de9dbec345bad1d957e1fa6
    SHA-256: 11a0773fbc123d262b1c5a2f3a11175535d1e97315303e74637413c05db753d7
    Size: 38.78 kB
  2. udev-095-14.20AXS3.x86_64.rpm
    MD5: cf0f7041563d6f76dedb415cd97b1708
    SHA-256: cd52b3af4aca66cfc2da6c4b7de89ab6e8ca6fc83e28618069da66e92a40e5e9
    Size: 2.37 MB