Nom du paquet
bip
Date
2013-04-08
Advisory ID
MDVSA-2013:063
Affected versions
MBS1 x86_64

Problem description

Updated bip package fixes security vulnerability:

Buffer overflow in Bip 0.8.8 and earlier might allow remote
authenticated users to execute arbitrary code via vectors involving
a series of TCP connections that triggers use of many open file
descriptors (CVE-2012-0806).

Updated packages

MBS1 x86_64

 a2909e9e50beec83ae001bf64a5af1cc  mbs1/x86_64/bip-0.8.8-6.1.mbs1.x86_64.rpm 
 9e97212c437f83eec31ec9566f771177  mbs1/SRPMS/bip-0.8.8-6.1.mbs1.src.rpm

References