Specially crafted RPM packages could have caused memory
corruption in rpm when verifying signatures
(CVE-2011-3378). This has been fixed.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
SUSE Linux Enterprise Server | 10.4 | s390x | rpm | < 4.4.2-43.42.2 | rpm-4.4.2-43.42.2.s390x.rpm |
SLE SDK | 10.4 | x86_64 | rpm-devel | < 4.4.2-43.42.2 | rpm-devel-4.4.2-43.42.2.x86_64.rpm |
SUSE Linux Enterprise Server | 10.4 | x86_64 | popt-devel | < 1.7-271.42.2 | popt-devel-1.7-271.42.2.x86_64.rpm |
SUSE Linux Enterprise Server | 10.3 | i586 | popt | < 1.7-271.37.38.7 | popt-1.7-271.37.38.7.i586.rpm |
SUSE Linux Enterprise Server | 10.3 | ia64 | rpm-devel | < 4.4.2-43.38.38.7 | rpm-devel-4.4.2-43.38.38.7.ia64.rpm |
SLE SDK | 10.3 | ia64 | rpm-devel | < 4.4.2-43.38.38.7 | rpm-devel-4.4.2-43.38.38.7.ia64.rpm |
SUSE Linux Enterprise Server | 10.4 | s390x | rpm-python | < 4.4.2-43.42.2 | rpm-python-4.4.2-43.42.2.s390x.rpm |
SUSE Linux Enterprise Desktop | 10.4 | x86_64 | rpm-python | < 4.4.2-43.42.2 | rpm-python-4.4.2-43.42.2.x86_64.rpm |
SUSE Linux Enterprise Server | 10.4 | s390x | popt-devel-32bit | < 1.7-271.42.2 | popt-devel-32bit-1.7-271.42.2.s390x.rpm |
SUSE Linux Enterprise Server | 10.4 | s390x | popt | < 1.7-271.42.2 | popt-1.7-271.42.2.s390x.rpm |