MDVSA-2009:060-1
- Package name
- nfs-utils
- Date
- 2009-03-19
- Advisory ID
- MDVSA-2009:060-1
- Affected versions
- CS4.0 x86_64 , CS4.0 i586
Problem description
A security vulnerability has been identified and fixed in nfs-utils,
which caused TCP Wrappers to ignore netgroups and allows remote
attackers to bypass intended access restrictions (CVE-2008-4552).
The updated packages have been patched to prevent this.
Update:
The Corporate Server 4 packages had the wrong release number (lower
than before) which prevented the update packages from being installed
automatically. This problem has now been solved with new packages
with the correct release number.
Updated packages
CS4.0 x86_64
433180096c5ec6346b205d5892fc19e6 corporate/4.0/x86_64/nfs-utils-1.0.9-1.1.20060mlcs4.x86_64.rpm 40c5eccc5e8d6aa4bdab94737df05f10 corporate/4.0/x86_64/nfs-utils-clients-1.0.9-1.1.20060mlcs4.x86_64.rpm 945c778a1301d0b403eca96100327328 corporate/4.0/SRPMS/nfs-utils-1.0.9-1.1.20060mlcs4.src.rpm
CS4.0 i586
1bb92fc5f96eed86f9fbb3ae3261de37 corporate/4.0/i586/nfs-utils-1.0.9-1.1.20060mlcs4.i586.rpm 226ce45a4dc354996b6868410ac05591 corporate/4.0/i586/nfs-utils-clients-1.0.9-1.1.20060mlcs4.i586.rpm 945c778a1301d0b403eca96100327328 corporate/4.0/SRPMS/nfs-utils-1.0.9-1.1.20060mlcs4.src.rpm