Security update for vpnc (important)

2011-08-3109:08:13

lists.opensuse.org

0.011 Low

EPSS

Percentile

84.5%

JSON

This update of vpnc fixes a flaw in the
modify_resolvconf_suse script that could potentially allow
remote attackers to inject commands through specially
crafted DNS domains (CVE-2011-2660).

OSVersionArchitecturePackageVersionFilename
SLE SDK10.3x86_64vpnc< 0.5.1-1.7.1vpnc-0.5.1-1.7.1.x86_64.rpm
SUSE Linux Enterprise Desktop10.4x86_64vpnc< 0.5.1-1.7.1vpnc-0.5.1-1.7.1.x86_64.rpm
SLE SDK10.4ia64vpnc< 0.5.1-1.7.1vpnc-0.5.1-1.7.1.ia64.rpm
SLE SDK10.3ppcvpnc< 0.5.1-1.7.1vpnc-0.5.1-1.7.1.ppc.rpm
SLE SDK10.4ppcvpnc< 0.5.1-1.7.1vpnc-0.5.1-1.7.1.ppc.rpm
SUSE Linux Enterprise Desktop10.4i586vpnc< 0.5.1-1.7.1vpnc-0.5.1-1.7.1.i586.rpm
SLE SDK10.4x86_64vpnc< 0.5.1-1.7.1vpnc-0.5.1-1.7.1.x86_64.rpm
SLE SDK10.3ia64vpnc< 0.5.1-1.7.1vpnc-0.5.1-1.7.1.ia64.rpm
SLE SDK10.3s390xvpnc< 0.5.1-1.7.1vpnc-0.5.1-1.7.1.s390x.rpm
SLE SDK10.4i586vpnc< 0.5.1-1.7.1vpnc-0.5.1-1.7.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
SLE SDK	10.3	x86_64	vpnc	< 0.5.1-1.7.1	vpnc-0.5.1-1.7.1.x86_64.rpm
SUSE Linux Enterprise Desktop	10.4	x86_64	vpnc	< 0.5.1-1.7.1	vpnc-0.5.1-1.7.1.x86_64.rpm
SLE SDK	10.4	ia64	vpnc	< 0.5.1-1.7.1	vpnc-0.5.1-1.7.1.ia64.rpm
SLE SDK	10.3	ppc	vpnc	< 0.5.1-1.7.1	vpnc-0.5.1-1.7.1.ppc.rpm
SLE SDK	10.4	ppc	vpnc	< 0.5.1-1.7.1	vpnc-0.5.1-1.7.1.ppc.rpm
SUSE Linux Enterprise Desktop	10.4	i586	vpnc	< 0.5.1-1.7.1	vpnc-0.5.1-1.7.1.i586.rpm
SLE SDK	10.4	x86_64	vpnc	< 0.5.1-1.7.1	vpnc-0.5.1-1.7.1.x86_64.rpm
SLE SDK	10.3	ia64	vpnc	< 0.5.1-1.7.1	vpnc-0.5.1-1.7.1.ia64.rpm
SLE SDK	10.3	s390x	vpnc	< 0.5.1-1.7.1	vpnc-0.5.1-1.7.1.s390x.rpm
SLE SDK	10.4	i586	vpnc	< 0.5.1-1.7.1	vpnc-0.5.1-1.7.1.i586.rpm