ELSA-2014-1976

ELSA-2014-1976 - rpm security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2014-12-09

Description

[4.11.1-18]
- Add check against malicious CPIO file name size (#1163060)
- Fixes CVE-2014-8118

[4.11.1-17]
- Fix race condidition where unchecked data is exposed in the file system
(#1163060)
- Fixes CVE-2013-6435

Related CVEs

CVE-2013-6435

CVE-2014-8118

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (x86_64)	rpm-4.11.1-18.el7_0.src.rpm	a1bd36edced6573776e9983c26a9f614	ELBA-2020-4038
	rpm-4.11.1-18.el7_0.x86_64.rpm	0c7dfdc0684c7789db45ca3cec13086a	ELBA-2020-4038
	rpm-apidocs-4.11.1-18.el7_0.noarch.rpm	b60bc87840c5fe2ebd4c70ce907300a5	ELBA-2020-4038
	rpm-build-4.11.1-18.el7_0.x86_64.rpm	a4315eb2735389c57d59a08382b467e9	ELBA-2020-4038
	rpm-build-libs-4.11.1-18.el7_0.i686.rpm	3a142a8635bebc57c451e632d687169d	ELBA-2020-4038
	rpm-build-libs-4.11.1-18.el7_0.x86_64.rpm	98ee3ecd3a796e8bdabf4b4b9a2d73f1	ELBA-2020-4038
	rpm-cron-4.11.1-18.el7_0.noarch.rpm	7f6b46684c321a4e6d2d33489f72bd64	ELBA-2020-4038
	rpm-devel-4.11.1-18.el7_0.i686.rpm	8e6950a4b28283264e5445dbda5b2224	ELBA-2020-4038
	rpm-devel-4.11.1-18.el7_0.x86_64.rpm	5bf239deb2c2438aa8ac2b8648182f5a	ELBA-2020-4038
	rpm-libs-4.11.1-18.el7_0.i686.rpm	cd1ce332fa6abd6b67d45a12d4792d40	ELBA-2020-4038
	rpm-libs-4.11.1-18.el7_0.x86_64.rpm	48047a888b023670bac5a717173847ce	ELBA-2020-4038
	rpm-python-4.11.1-18.el7_0.x86_64.rpm	1fca6b4f3889139b00e9055069f613d3	ELBA-2020-4038
	rpm-sign-4.11.1-18.el7_0.x86_64.rpm	a9cd4ad1ea0289e80d491d1fa7b9eee1	ELBA-2020-4038

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team