postgresql-8.1.23-1.2.0.1.AXS3

エラータID: AXSA:2011-340:02

リリース日: 
2011/11/03 Thursday - 19:32
題名: 
postgresql-8.1.23-1.2.0.1.AXS3
影響のあるチャネル: 
Asianux Server 3 for x86_64
Asianux Server 3 for x86
Severity: 
High
Description: 

以下項目について対処しました。<br />
<br />
[Security Fix]<br />
- PHP で使用される crypt_blowfish は適切に 8 ビットのキャラクタを扱っておらず，パスワードハッシュの知識を利用することで，攻撃者が平文のパスワードを特定しやすくなる脆弱性があります。(CVE-2011-2483)<br />
<br />
一部CVEの翻訳文はJVNからの引用になります。<br />
http://jvndb.jvn.jp/

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2011-2483
crypt_blowfish before 1.1, as used in PHP before 5.3.7 on certain platforms, PostgreSQL before 8.4.9, and other products, does not properly handle 8-bit characters, which makes it easier for context-dependent attackers to determine a cleartext password by leveraging knowledge of a password hash.


追加情報: 

N/A

ダウンロード: 

SRPMS
  1. postgresql-8.1.23-1.2.0.1.AXS3.src.rpm
    MD5: 01e05207a2455c8471c65c15b3c4e5bc
    SHA-256: 5a86acc69f3d11c2ebe91b9d616493c64108abef0f0717be997660b7a7bdf1c9
    Size: 16.81 MB

Asianux Server 3 for x86
  1. postgresql-8.1.23-1.2.0.1.AXS3.i386.rpm
    MD5: 2b58389de4b1c66ed2f66459f6956016
    SHA-256: a13760c4e11b6abb5a376a0dc46ea72c738875b289d633b9fcf48bfba1d4bc9e
    Size: 2.94 MB
  2. postgresql-contrib-8.1.23-1.2.0.1.AXS3.i386.rpm
    MD5: c822fcbecf01f373b435b70bc1bde551
    SHA-256: e46ac93ef9b2d86a24cfc95f61da7d2820b6dea4f58341f9ad7cb7e2d549ca8c
    Size: 455.91 kB
  3. postgresql-devel-8.1.23-1.2.0.1.AXS3.i386.rpm
    MD5: 7c7266467d309740f5108115b0999055
    SHA-256: e6e99fb823ed88533eda18c67184debca6a7d687f994bfa38c0ecff41443c481
    Size: 1.18 MB
  4. postgresql-docs-8.1.23-1.2.0.1.AXS3.i386.rpm
    MD5: cd9be6763a876aa6853a84c5556b4b78
    SHA-256: b47af87f9625c56c89c15b229ef59cb8e333a9d5b821686885553438e67c6738
    Size: 5.58 MB
  5. postgresql-libs-8.1.23-1.2.0.1.AXS3.i386.rpm
    MD5: 29847d7e9874c91c451a5e62c6ee57c3
    SHA-256: 83a8dc583a99558cdf1de9a37dd890b81e2cd7ecf42c39d6be96cb1bb55ca743
    Size: 201.09 kB
  6. postgresql-pl-8.1.23-1.2.0.1.AXS3.i386.rpm
    MD5: 3012b22c8d55a2ebfb36af1504875763
    SHA-256: 17a56b7f515fe68e23342d4d6e625508b25dad54b4d83c032dfbad04cfd5de54
    Size: 73.19 kB
  7. postgresql-python-8.1.23-1.2.0.1.AXS3.i386.rpm
    MD5: ed0e39b217cda294e6d256704895f340
    SHA-256: f5a2bdc55c4b7486c76e7c17153c40fa5aae71a5c6af3fc79c6b0d0ea0e670f1
    Size: 55.54 kB
  8. postgresql-server-8.1.23-1.2.0.1.AXS3.i386.rpm
    MD5: 250ecf1eb53c29e4543ae71c18a565fe
    SHA-256: 6e9f8c529337b904fb126a72d82e3378178fbb9fee87ea94af436d626238061f
    Size: 3.93 MB
  9. postgresql-tcl-8.1.23-1.2.0.1.AXS3.i386.rpm
    MD5: bfa29c71de3f8c0cb4f87945f700a5dd
    SHA-256: bd5265e14a2181c1235a6d99df63ea015ff339bee4b6f1245a24a6316e97d668
    Size: 83.77 kB

Asianux Server 3 for x86_64
  1. postgresql-8.1.23-1.2.0.1.AXS3.x86_64.rpm
    MD5: 6f6e0667e710eca3eaea8b4cad71abf2
    SHA-256: 07c206e48b8e796e7dbcd99f4bdfc875085ff419844dd8e43ebb5ce0a34a52c1
    Size: 2.97 MB
  2. postgresql-contrib-8.1.23-1.2.0.1.AXS3.x86_64.rpm
    MD5: ce5df9f20f505e4ec76dc077fc02caad
    SHA-256: baa6ef1514e03ea2dbc2974e1f6938a6efba154e7fc1963ce37c96f23cc20432
    Size: 461.38 kB
  3. postgresql-devel-8.1.23-1.2.0.1.AXS3.x86_64.rpm
    MD5: 4e425fa2e1636d8fce3ab984c9f4a27f
    SHA-256: e2590544f5c45016453d7a4b684a7773d05371fb85f665cc2c13dc714f1f31c6
    Size: 1.21 MB
  4. postgresql-docs-8.1.23-1.2.0.1.AXS3.x86_64.rpm
    MD5: 270bf3d74834535814d38ef35aea532c
    SHA-256: 74a1229c5391c79d678001d50b690cc3f65e9ace9799d84f8b84ed177d97ceed
    Size: 5.58 MB
  5. postgresql-libs-8.1.23-1.2.0.1.AXS3.x86_64.rpm
    MD5: 1a95f02cee4159379329c910f5508b31
    SHA-256: b36ec5293376ffbf1b491480332fe31e7685c0ce0438237033ae63f72fd20605
    Size: 200.85 kB
  6. postgresql-pl-8.1.23-1.2.0.1.AXS3.x86_64.rpm
    MD5: bd7283e85449bb2810a084d639e98790
    SHA-256: c46c31564852b71364418b84aa1ecf191ae84db5dc425f4386d5e18d31abc6c9
    Size: 75.42 kB
  7. postgresql-python-8.1.23-1.2.0.1.AXS3.x86_64.rpm
    MD5: 89e1e9fe076425f2d97ffd7a4b4ab247
    SHA-256: da1d6dad468be4a232470dd7e2e565823bf873efaccf300c4a73859d9b494f87
    Size: 57.01 kB
  8. postgresql-server-8.1.23-1.2.0.1.AXS3.x86_64.rpm
    MD5: 513fc922eb520a7d777327c2b7344525
    SHA-256: 91c720e66ff21d97fcf7f43424f449873335274b8cd104d13b5029a3b5c040d7
    Size: 3.98 MB
  9. postgresql-tcl-8.1.23-1.2.0.1.AXS3.x86_64.rpm
    MD5: 58e77f7a9c0c05445816338ba18c10ad
    SHA-256: 96d29791d18f0112416d25db1b18d060dc235c23c4b7c962fa2e0842b96bfa91
    Size: 85.03 kB