Mageia alert MGASA-2012-0234-2 (udisks)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2012-0234-2: udisks-1.0.2-3.2.mga1
 (1/core) 
Date:
    	     
 
Thu, 30 Aug 2012 12:00:04 +0200
Message-ID:
    	     
 
<20120830100004.GA28393@valstar.mageia.org>

MGASA-2012-0234-2
Date: 	August 30th, 2012
Affected releases: 	1


Description:
Updated udisks packages fix security vulnerability:

Sebastian Krahmer reported that the udisks service (via D-BUS) could
be used to load arbitrary Linux kernel modules (CVE-2010-4661).

Update August 30th, 2012:
The earlier fix for this CVE broke support for ntfs mounting,
which this update now corrects.


Updated Packages:
udisks-1.0.2-3.2.mga1
udisks-devel-1.0.2-3.2.mga1


References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4661
http://lists.opensuse.org/opensuse-updates/2011-04/msg000...
https://bugs.mageia.org/show_bug.cgi?id=7073
https://bugs.mageia.org/show_bug.cgi?id=7221
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-...