Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 446
Alerts This Week
Warning Icon 1 446

Fedora 23: RPM Update Notification For Sigsegv And Heap Read Issues

fedora
Calendar Grey April 26, 2016
Dist Fedora Esm H88
Fedora 24 package upgrades resolve significant concerns such as a stack overflow and an out-of-bounds stack write security flaw.
* Fix sigsegv in stringFormat() (rhbz:1316903) * Fix reading rpmtd behind its size in formatValue() (rhbz:1316896)

Summary

The RPM Package Manager (RPM) is a powerful command line driven

package management system capable of installing, uninstalling,

verifying, querying, and updating software packages. Each software

package consists of an archive of files along with information about

the package like its version, a description, etc.

Update Information:

* Fix sigsegv in stringFormat() (rhbz:1316903) * Fix reading rpmtd behind its size in formatValue() (rhbz:1316896)

Topics%20covered

Topics Covered

security advisory security issue buffer overflow Fedora rpm fix heap read sigsegv

Change Log

References


[ 1 ] Bug #1316903 - rpm: Null pointer dereference in rstrdup https://bugzilla.redhat.com/show_bug.cgi?id=1316903 [ 2 ] Bug #1316896 - rpm: Out-of-bounds heap read triggered by crafted RPM file https://bugzilla.redhat.com/show_bug.cgi?id=1316896

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update rpm' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: rpm
Product: Fedora 23
Version: 4.13.0
Release: 0.rc1.13.fc23
URL: http://rpm.org/
Summary: The RPM package management system

Topics%20covered

Topics Covered

security advisory security issue buffer overflow Fedora rpm fix heap read sigsegv

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.