-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2008:073 http://www.mandriva.com/security/ _______________________________________________________________________ Package : perl-Net-DNS Date : March 20, 2008 Affected: 2007.0, 2007.1, 2008.0, Corporate 3.0, Corporate 4.0 _______________________________________________________________________ Problem Description: A vulnerability in the Net::DNS perl module was found that could allow remote attackers to cause a denial of service via a crafted DNS response. The updated packages have been patched to correct this issue. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6341 _______________________________________________________________________ Updated Packages: Mandriva Linux 2007.0: 1cf2397dcfe207d625bd24d1d7fc744a 2007.0/i586/perl-Net-DNS-0.58-1.2mdv2007.0.i586.rpm 434fdd9456118124117a26509c6d1674 2007.0/SRPMS/perl-Net-DNS-0.58-1.2mdv2007.0.src.rpm Mandriva Linux 2007.0/X86_64: 374101d8c50675d8032c5695dfb0866f 2007.0/x86_64/perl-Net-DNS-0.58-1.2mdv2007.0.x86_64.rpm 434fdd9456118124117a26509c6d1674 2007.0/SRPMS/perl-Net-DNS-0.58-1.2mdv2007.0.src.rpm Mandriva Linux 2007.1: 8ff35127ae1c20c0b4e4cf3734b41d78 2007.1/i586/perl-Net-DNS-0.59-1.2mdv2007.1.i586.rpm 0630c817a581736750b3aa3a36330442 2007.1/SRPMS/perl-Net-DNS-0.59-1.2mdv2007.1.src.rpm Mandriva Linux 2007.1/X86_64: 2db71882e00490ed228d3544e73d5dfa 2007.1/x86_64/perl-Net-DNS-0.59-1.2mdv2007.1.x86_64.rpm 0630c817a581736750b3aa3a36330442 2007.1/SRPMS/perl-Net-DNS-0.59-1.2mdv2007.1.src.rpm Mandriva Linux 2008.0: 46454d0d2ffbccc32875d38428f5dbb7 2008.0/i586/perl-Net-DNS-0.61-1.1mdv2008.0.i586.rpm 0dd436fba91470dbd4cc4a5371cfa909 2008.0/SRPMS/perl-Net-DNS-0.61-1.1mdv2008.0.src.rpm Mandriva Linux 2008.0/X86_64: 3724958b2631242743be3d24ed463e5f 2008.0/x86_64/perl-Net-DNS-0.61-1.1mdv2008.0.x86_64.rpm 0dd436fba91470dbd4cc4a5371cfa909 2008.0/SRPMS/perl-Net-DNS-0.61-1.1mdv2008.0.src.rpm Corporate 3.0: 34228478b5f31c0a2c9beb80de8a004b corporate/3.0/i586/perl-Net-DNS-0.39-2.2.C30mdk.i586.rpm 8846ab7ae3ecf66ee93666e4551e091b corporate/3.0/SRPMS/perl-Net-DNS-0.39-2.2.C30mdk.src.rpm Corporate 3.0/X86_64: 9d62397d900754063b46a1f6a7dcae9c corporate/3.0/x86_64/perl-Net-DNS-0.39-2.2.C30mdk.x86_64.rpm 8846ab7ae3ecf66ee93666e4551e091b corporate/3.0/SRPMS/perl-Net-DNS-0.39-2.2.C30mdk.src.rpm Corporate 4.0: 57bb9572548a1727cdfde07176a55fc2 corporate/4.0/i586/perl-Net-DNS-0.52-1.2.20060mlcs4.i586.rpm cd1731f072ad841c1244b6e873226422 corporate/4.0/SRPMS/perl-Net-DNS-0.52-1.2.20060mlcs4.src.rpm Corporate 4.0/X86_64: 454f468cd925c1fccdf20751ac884dd9 corporate/4.0/x86_64/perl-Net-DNS-0.52-1.2.20060mlcs4.x86_64.rpm cd1731f072ad841c1244b6e873226422 corporate/4.0/SRPMS/perl-Net-DNS-0.52-1.2.20060mlcs4.src.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (GNU/Linux) iD8DBQFH4p/ImqjQ0CJFipgRAjg7AJ94BiQLAcokF5ttd9yHBSDBtDE08ACgys4V HlrGqAi2vzXL0Oc7eQ7AX2g= =CA0R -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/