红帽产品勘误 RHSA-2007:0675 - Security Advisory
发布：
2007-07-12
已更新：
2007-07-12

RHSA-2007:0675 - Security Advisory

概述

Moderate: perl-Net-DNS security update

类型/严重性

Security Advisory: Moderate

Red Hat Lightspeed patch analysis

识别并修复受此公告影响的系统。

查看受影响的系统

标题

An updated perl-Net-DNS package that corrects a security issue is now
available for Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

描述

Net::DNS is a collection of Perl modules that act as a Domain Name System
(DNS) resolver.

A flaw was found in the way Net::DNS generated the ID field in a DNS query.
This predictable ID field could be used by a remote attacker to return
invalid DNS data. (CVE-2007-3377)

Users of Net::DNS should upgrade to this updated package, which contains
backported patches to correct this issue.

解决方案

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

受影响的产品

  • Red Hat Enterprise Linux Server 4 x86_64
  • Red Hat Enterprise Linux Server 4 ia64
  • Red Hat Enterprise Linux Server 4 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.5 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.5 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.5 i386
  • Red Hat Enterprise Linux Workstation 4 x86_64
  • Red Hat Enterprise Linux Workstation 4 ia64
  • Red Hat Enterprise Linux Workstation 4 i386
  • Red Hat Enterprise Linux Desktop 4 x86_64
  • Red Hat Enterprise Linux Desktop 4 i386
  • Red Hat Enterprise Linux for IBM z Systems 4 s390x
  • Red Hat Enterprise Linux for IBM z Systems 4 s390
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.5 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.5 s390
  • Red Hat Enterprise Linux for Power, big endian 4 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.5 ppc

修复

  • BZ - 245466 - CVE-2007-3377 perl-net-DNS security issue

Red Hat Enterprise Linux Server 4

SRPM
perl-Net-DNS-0.48-2.el4.src.rpm SHA-256: e7cc1d5ff855bdce4ef11216495824722fa2ce4517a55f9f77efc467224c276f
x86_64
perl-Net-DNS-0.48-2.el4.x86_64.rpm SHA-256: 934164a013ab1518427616627d32067129892d6d80e15e1d0580d642d8a0895d
perl-Net-DNS-0.48-2.el4.x86_64.rpm SHA-256: 934164a013ab1518427616627d32067129892d6d80e15e1d0580d642d8a0895d
ia64
perl-Net-DNS-0.48-2.el4.ia64.rpm SHA-256: 46eeba98e875e3762a3e50be9368a9e39b3f5bb2cd2c694af647a98a15bb3bb1
perl-Net-DNS-0.48-2.el4.ia64.rpm SHA-256: 46eeba98e875e3762a3e50be9368a9e39b3f5bb2cd2c694af647a98a15bb3bb1
i386
perl-Net-DNS-0.48-2.el4.i386.rpm SHA-256: 2d7889199e0cf5f58be14a16c85c6289960f9b831536e0bfabd551bac960df31
perl-Net-DNS-0.48-2.el4.i386.rpm SHA-256: 2d7889199e0cf5f58be14a16c85c6289960f9b831536e0bfabd551bac960df31

Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.5

SRPM
perl-Net-DNS-0.48-2.el4.src.rpm SHA-256: e7cc1d5ff855bdce4ef11216495824722fa2ce4517a55f9f77efc467224c276f
x86_64
perl-Net-DNS-0.48-2.el4.x86_64.rpm SHA-256: 934164a013ab1518427616627d32067129892d6d80e15e1d0580d642d8a0895d
perl-Net-DNS-0.48-2.el4.x86_64.rpm SHA-256: 934164a013ab1518427616627d32067129892d6d80e15e1d0580d642d8a0895d
ia64
perl-Net-DNS-0.48-2.el4.ia64.rpm SHA-256: 46eeba98e875e3762a3e50be9368a9e39b3f5bb2cd2c694af647a98a15bb3bb1
perl-Net-DNS-0.48-2.el4.ia64.rpm SHA-256: 46eeba98e875e3762a3e50be9368a9e39b3f5bb2cd2c694af647a98a15bb3bb1
i386
perl-Net-DNS-0.48-2.el4.i386.rpm SHA-256: 2d7889199e0cf5f58be14a16c85c6289960f9b831536e0bfabd551bac960df31
perl-Net-DNS-0.48-2.el4.i386.rpm SHA-256: 2d7889199e0cf5f58be14a16c85c6289960f9b831536e0bfabd551bac960df31

Red Hat Enterprise Linux Workstation 4

SRPM
perl-Net-DNS-0.48-2.el4.src.rpm SHA-256: e7cc1d5ff855bdce4ef11216495824722fa2ce4517a55f9f77efc467224c276f
x86_64
perl-Net-DNS-0.48-2.el4.x86_64.rpm SHA-256: 934164a013ab1518427616627d32067129892d6d80e15e1d0580d642d8a0895d
ia64
perl-Net-DNS-0.48-2.el4.ia64.rpm SHA-256: 46eeba98e875e3762a3e50be9368a9e39b3f5bb2cd2c694af647a98a15bb3bb1
i386
perl-Net-DNS-0.48-2.el4.i386.rpm SHA-256: 2d7889199e0cf5f58be14a16c85c6289960f9b831536e0bfabd551bac960df31

Red Hat Enterprise Linux Desktop 4

SRPM
perl-Net-DNS-0.48-2.el4.src.rpm SHA-256: e7cc1d5ff855bdce4ef11216495824722fa2ce4517a55f9f77efc467224c276f
x86_64
perl-Net-DNS-0.48-2.el4.x86_64.rpm SHA-256: 934164a013ab1518427616627d32067129892d6d80e15e1d0580d642d8a0895d
i386
perl-Net-DNS-0.48-2.el4.i386.rpm SHA-256: 2d7889199e0cf5f58be14a16c85c6289960f9b831536e0bfabd551bac960df31

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
perl-Net-DNS-0.48-2.el4.src.rpm SHA-256: e7cc1d5ff855bdce4ef11216495824722fa2ce4517a55f9f77efc467224c276f
s390x
perl-Net-DNS-0.48-2.el4.s390x.rpm SHA-256: 4fedcad4f60b8336e9bb8798a5e066b38c6207df7bc457db0541376b65b7be1d
s390
perl-Net-DNS-0.48-2.el4.s390.rpm SHA-256: b30582026bd2eefac052d7fb2e37f58759ab27466e08a6f93a8fe560bd7f3a90

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.5

SRPM
perl-Net-DNS-0.48-2.el4.src.rpm SHA-256: e7cc1d5ff855bdce4ef11216495824722fa2ce4517a55f9f77efc467224c276f
s390x
perl-Net-DNS-0.48-2.el4.s390x.rpm SHA-256: 4fedcad4f60b8336e9bb8798a5e066b38c6207df7bc457db0541376b65b7be1d
s390
perl-Net-DNS-0.48-2.el4.s390.rpm SHA-256: b30582026bd2eefac052d7fb2e37f58759ab27466e08a6f93a8fe560bd7f3a90

Red Hat Enterprise Linux for Power, big endian 4

SRPM
perl-Net-DNS-0.48-2.el4.src.rpm SHA-256: e7cc1d5ff855bdce4ef11216495824722fa2ce4517a55f9f77efc467224c276f
ppc
perl-Net-DNS-0.48-2.el4.ppc.rpm SHA-256: 15526a903960528efb8924b13289aa3db405dc8fceeb63814cebe13ca5ada77e

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.5

SRPM
perl-Net-DNS-0.48-2.el4.src.rpm SHA-256: e7cc1d5ff855bdce4ef11216495824722fa2ce4517a55f9f77efc467224c276f
ppc
perl-Net-DNS-0.48-2.el4.ppc.rpm SHA-256: 15526a903960528efb8924b13289aa3db405dc8fceeb63814cebe13ca5ada77e

Red Hat 安全团队联络方式为 secalert@redhat.com。 更多联络细节请参考 https://access.redhat.com/security/team/contact/。