Mageia alert MGASA-2012-0156 (openconnect)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0156: openconnect-3.02-1.1.mga1
 (1/core), openconnect-3.15-2.1.mga2 (2/core) 
Date:
    	     
 
Tue, 10 Jul 2012 13:55:32 +0200
Message-ID:
    	     
 
<20120710115532.GA28974@valstar.mageia.org>
Archive-link:
    	     
 
Article, Thread
              
MGASA-2012-0156
Date: 	July 10th, 2012
Affected releases: 	1, 2


Description:
Updated openconnect packages fix security vulnerability:

Heap-based buffer overflow in OpenConnect before 3.18 allows remote
servers to cause a denial of service via a crafted greeting banner
(CVE-2012-3291).


Updated Packages:
Mageia 1:
openconnect-3.02-1.1.mga1
openconnect-static-devel-3.02-1.1.mga1

Mageia 2:
openconnect-3.15-2.1.mga2
lib(64)openconnect1-3.15-2.1.mga2
lib(64)openconnect-devel-3.15-2.1.mga2


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3291
http://www.infradead.org/openconnect/changelog.html
http://www.debian.org/security/2012/dsa-2495
https://bugs.mageia.org/show_bug.cgi?id=6504
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...