ELSA-2014-1976

ELSA-2014-1976 - rpm security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2014-12-09

Description

[4.11.1-18]
- Add check against malicious CPIO file name size (#1163060)
- Fixes CVE-2014-8118

[4.11.1-17]
- Fix race condidition where unchecked data is exposed in the file system
(#1163060)
- Fixes CVE-2013-6435

Related CVEs

CVE-2013-6435

CVE-2014-8118

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	rpm-4.11.1-18.el7_0.src.rpm	6e05f7900f23f2762c31f358c7df87d9e64e30ec70e4ad89b11612f9b5b0b555	ELBA-2024-12373	ol7_x86_64_latest_archive
	rpm-4.11.1-18.el7_0.src.rpm	6e05f7900f23f2762c31f358c7df87d9e64e30ec70e4ad89b11612f9b5b0b555	ELBA-2024-12373	ol7_x86_64_optional_archive
	rpm-4.11.1-18.el7_0.src.rpm	6e05f7900f23f2762c31f358c7df87d9e64e30ec70e4ad89b11612f9b5b0b555	ELBA-2024-12373	ol7_x86_64_u0_patch
	rpm-4.11.1-18.el7_0.x86_64.rpm	c2a32923f3404a9ddb7a833d310964a66fe032f48f24fcf79aa5de110e1ae986	ELBA-2024-12373	ol7_x86_64_latest_archive
	rpm-4.11.1-18.el7_0.x86_64.rpm	c2a32923f3404a9ddb7a833d310964a66fe032f48f24fcf79aa5de110e1ae986	ELBA-2024-12373	ol7_x86_64_u0_patch
	rpm-apidocs-4.11.1-18.el7_0.noarch.rpm	b4ae10e454e9d4c665a2f64646761070fc80276622ec2cf7ff726241552663e3	ELBA-2024-12373	ol7_x86_64_optional_archive
	rpm-build-4.11.1-18.el7_0.x86_64.rpm	037908e862c6205b71312d641e1bd3991eee0e06c49a79b252de427b6eeb480e	ELBA-2024-12373	ol7_x86_64_latest_archive
	rpm-build-4.11.1-18.el7_0.x86_64.rpm	037908e862c6205b71312d641e1bd3991eee0e06c49a79b252de427b6eeb480e	ELBA-2024-12373	ol7_x86_64_u0_patch
	rpm-build-libs-4.11.1-18.el7_0.i686.rpm	58d9327e379a6f5f7ab2b43069bcf006968ed3214901a3482784ee0151c31e60	ELBA-2024-12373	ol7_x86_64_latest_archive
	rpm-build-libs-4.11.1-18.el7_0.i686.rpm	58d9327e379a6f5f7ab2b43069bcf006968ed3214901a3482784ee0151c31e60	ELBA-2024-12373	ol7_x86_64_u0_patch
	rpm-build-libs-4.11.1-18.el7_0.x86_64.rpm	9ae8e52f42853b5cebb645415cc0491f94b5d8c80aeebd530feeef77176a9cf4	ELBA-2024-12373	ol7_x86_64_latest_archive
	rpm-build-libs-4.11.1-18.el7_0.x86_64.rpm	9ae8e52f42853b5cebb645415cc0491f94b5d8c80aeebd530feeef77176a9cf4	ELBA-2024-12373	ol7_x86_64_u0_patch
	rpm-cron-4.11.1-18.el7_0.noarch.rpm	ad0ba0177cf30f49ecd097865db8c607a7f26e61b744eff1a0da1f172bbf9e8c	ELBA-2024-12373	ol7_x86_64_optional_archive
	rpm-devel-4.11.1-18.el7_0.i686.rpm	00663d291c7a86ba9ffa0e94f317557c0f100937834fbc76d04b2133f51bc7e6	ELBA-2024-12373	ol7_x86_64_latest_archive
	rpm-devel-4.11.1-18.el7_0.i686.rpm	00663d291c7a86ba9ffa0e94f317557c0f100937834fbc76d04b2133f51bc7e6	ELBA-2024-12373	ol7_x86_64_u0_patch
	rpm-devel-4.11.1-18.el7_0.x86_64.rpm	600c12768a06d73a1915d738337112da0f5983ee7d4bfe44980c9e529170a680	ELBA-2024-12373	ol7_x86_64_latest_archive
	rpm-devel-4.11.1-18.el7_0.x86_64.rpm	600c12768a06d73a1915d738337112da0f5983ee7d4bfe44980c9e529170a680	ELBA-2024-12373	ol7_x86_64_u0_patch
	rpm-libs-4.11.1-18.el7_0.i686.rpm	cc7f3b18ff755597b3595cee972f53bf8c066ffe330028db22a5bc3c0c45347c	ELBA-2024-12373	ol7_x86_64_latest_archive
	rpm-libs-4.11.1-18.el7_0.i686.rpm	cc7f3b18ff755597b3595cee972f53bf8c066ffe330028db22a5bc3c0c45347c	ELBA-2024-12373	ol7_x86_64_u0_patch
	rpm-libs-4.11.1-18.el7_0.x86_64.rpm	6e0d3afd1487a6bfead4ee8542d298fc30960a98e9dff8fdeedb7c40dbc25642	ELBA-2024-12373	ol7_x86_64_latest_archive
	rpm-libs-4.11.1-18.el7_0.x86_64.rpm	6e0d3afd1487a6bfead4ee8542d298fc30960a98e9dff8fdeedb7c40dbc25642	ELBA-2024-12373	ol7_x86_64_u0_patch
	rpm-python-4.11.1-18.el7_0.x86_64.rpm	42ef3ec362b41091537735ab4249e48fd68e431b0bef968b1e0ae0fc89dc48ec	ELBA-2024-12373	ol7_x86_64_latest_archive
	rpm-python-4.11.1-18.el7_0.x86_64.rpm	42ef3ec362b41091537735ab4249e48fd68e431b0bef968b1e0ae0fc89dc48ec	ELBA-2024-12373	ol7_x86_64_u0_patch
	rpm-sign-4.11.1-18.el7_0.x86_64.rpm	4e944677b69db4ee313ea0d49e292e1646e80dd07d87cb3dd81eb09f3873cfb2	ELBA-2024-12373	ol7_x86_64_latest_archive
	rpm-sign-4.11.1-18.el7_0.x86_64.rpm	4e944677b69db4ee313ea0d49e292e1646e80dd07d87cb3dd81eb09f3873cfb2	ELBA-2024-12373	ol7_x86_64_u0_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team