Horms
horms****@verge*****
2006年 8月 14日 (月) 17:20:13 JST
heartbeat update (1.2.3.cvs.20050927-1bpo3 / 1.2.3.cvs.20050927-1.rh.el.um.3) An archive of this announcement is available at http://www.ultramonkey.org/news_archive.shtml#2006081400 New heartbeat packages have been made available for Ultra Monkey 3 on both [1]Red Hat Enterprise Linux 3 [offsite] and [2]Debian Sarge [offsite] in order to address the security flaw, CVE-2006-3821. [3]CVE-2006-3815 is a remotely exploitable denail of service resulting from incorrect parsing of data read from the network. The result is that anyone who can send a packet to heartbeat can cause it to segmentation fault. All users whose heartbeat machines are not protected from hostile users by a firewall are recommended to upgrade. The updated packages are available in the [4]download directory * [5]Packages for Red Hat Enterprise Linux 3 + [6]Binary Packages o [7]heartbeat-1.2.3.cvs.20050927-1.rh.el.um.3.i386.rpm Size: 1694175 MD5 Checksum: 8caa31496162cebef0f4a9104b3fc30a474ec8d6 SHA1 Checksum: b2c2667ff00f568cce694801f8e513ef o [8]heartbeat-ldirectord-1.2.3.cvs.20050927-1.rh.el.um.3. i386.rpm Size: 77228 MD5 Checksum: 95f0d5a66e99b8601c6afc543b7c46526a35b358 SHA1 Checksum: f3801f4b7fb8ad49c7f3cb799e78a28d o [9]heartbeat-pils-1.2.3.cvs.20050927-1.rh.el.um.3.i386.r pm Size: 161391 MD5 Checksum: 982f6337e268b19ac6cbce1f8836e2ee6ec02c19 SHA1 Checksum: c60fb9158c91795c9edda25ce4f60c28 o [10]heartbeat-stonith-1.2.3.cvs.20050927-1.rh.el.um.3.i3 86.rpm Size: 793243 MD5 Checksum: 7507d67edc235447992989d92f0dae85f23576c3 SHA1 Checksum: 9bf9cec364a986700986ec019ed14a1c + [11]Source Package o [12]heartbeat-1.2.3.cvs.20050927-1.rh.el.um.3.src.rpm Size: 1935954 MD5 Checksum: b71129745483eafec9b3a32a90236a741d3fb58e SHA1 Checksum: 9cf6d0c294b2ba02a714275e98bd86cc o [13]heartbeat-1.2.3.cvs.20050927-1.rh.el.um.3.ChangeLog Size: 37691 MD5 Checksum: dff894c5f8f452410152e52f46c65d471df691ae SHA1 Checksum: 4c50f0292d8004f03df5c532a81b475f + [14]Debian Packages o [15]Binary Packages # [16]heartbeat-dev_1.2.3.cvs.20050927-1bpo3_i386.deb Size: 121002 MD5 Checksum: 6f3e60fa71bc755891f4abf5914330f54df6555a SHA1 Checksum: 1e13b9546b4bdebcac0c3aae27bf85aa # [17]heartbeat_1.2.3.cvs.20050927-1bpo3_i386.deb Size: 495026 MD5 Checksum: 167ebc287605ddcc0634ba9651c04c0290d84b92 SHA1 Checksum: 25b2e85e7dadbde7848fe6b6ddabcbcd # [18]ldirectord_1.2.3.cvs.20050927-1bpo3_all.deb Size: 48428 MD5 Checksum: 5b5546c9b50724cfe80fa8f706528a68110acbf5 SHA1 Checksum: 5e0efb77d20d21d4076b102492693cf1 # [19]libpils-dev_1.2.3.cvs.20050927-1bpo3_i386.deb Size: 59838 MD5 Checksum: a182d85d0c15c487341563989d997a82e9d33d59 SHA1 Checksum: f0deb63f9d6cd9881cdfca9db57cba89 # [20]libpils0_1.2.3.cvs.20050927-1bpo3_i386.deb Size: 49022 MD5 Checksum: fd1960da49cedf05049787194f338460c15020e7 SHA1 Checksum: 28897de6ff9ec918c1d0edba6bfbcafe # [21]libstonith-dev_1.2.3.cvs.20050927-1bpo3_i386.de b Size: 30752 MD5 Checksum: 6d2dba0acda9292b9209ea11780de0bd1c176cd1 SHA1 Checksum: 3ee7a2d42fc860d2c5d6b55136db8a03 # [22]libstonith0_1.2.3.cvs.20050927-1bpo3_i386.deb Size: 91710 MD5 Checksum: 5d6818b01e3bcfac6f4b66227ccc3ad7e8d73b43 SHA1 Checksum: be2ba44e90392d91269055c7b50f11e6 # [23]stonith_1.2.3.cvs.20050927-1bpo3_i386.deb Size: 37592 MD5 Checksum: 862b492888b52aaa7391871810100ccac1336194 SHA1 Checksum: d99998bae2bb305570d2facc398be1cb o [24]Source # [25]heartbeat_1.2.3.cvs.20050927-1bpo3.dsc Size: 924 MD5 Checksum: 82298b1b64ee1ab047c50a90e16224ecbd68e2ad SHA1 Checksum: 3091e143cecdff18d913f5f0430a3261 # [26]heartbeat_1.2.3.cvs.20050927.orig.tar.gz Size: 1885563 MD5 Checksum: 9fd30339cadc1a385a69a5b2b7fc4d9fca1016da SHA1 Checksum: 3959814e66251626904d14493f2155e6 # [27]heartbeat_1.2.3.cvs.20050927-1bpo3.diff.gz Size: 74124 MD5 Checksum: de0dca3db401c2e1cd7659545221bc930a632b1a SHA1 Checksum: e9e72f4c494147aaceb52a0545b10ff8 + [28]Unpacked Source o [29]heartbeat-1.2.4-CVE-2006-3121.patch Size: 245 MD5 Checksum: 7c28de7d49fd467e425eefa977a277c2 SHA1 Checksum: 0b6f7055c286e3dfa09524adf35675b2da9df9b0 1. http://www.redhat.com/ 2. http://www.debian.org>/ 3. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3821 4. file://localhost/download/3/ 5. file://localhost/download/3/rh.el.3/ 6. file://localhost/download/3/rh.el.3/RPMS/ 7. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/rh.el.3/RPMS/heartbeat-1.2.3.cvs.20050927-1.rh.el.um.3.i386.rpm 8. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/rh.el.3/RPMS/heartbeat-ldirectord-1.2.3.cvs.20050927-1.rh.el.um.3.i386.rpm 9. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/rh.el.3/RPMS/heartbeat-pils-1.2.3.cvs.20050927-1.rh.el.um.3.i386.rpm 10. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/rh.el.3/RPMS/heartbeat-stonith-1.2.3.cvs.20050927-1.rh.el.um.3.i386.rpm 11. file://localhost/download/3/rh.el.3/SRPMS/ 12. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/rh.el.3/SRPMS/heartbeat-1.2.3.cvs.20050927-1.rh.el.um.3.src.rpm 13. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/rh.el.3/SRPMS/heartbeat-1.2.3.cvs.20050927-1.rh.el.um.3.ChangeLog 14. file://localhost/download/3/debian.sarge/ 15. file://localhost/download/3/debian.sarge/heartbeat 16. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/debian.sarge/heartbeat/heartbeat-dev_1.2.3.cvs.20050927-1bpo3_i386.deb 17. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/debian.sarge/heartbeat/heartbeat_1.2.3.cvs.20050927-1bpo3_i386.deb 18. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/debian.sarge/heartbeat/ldirectord_1.2.3.cvs.20050927-1bpo3_all.deb 19. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/debian.sarge/heartbeat/libpils-dev_1.2.3.cvs.20050927-1bpo3_i386.deb 20. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/debian.sarge/heartbeat/libpils0_1.2.3.cvs.20050927-1bpo3_i386.deb 21. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/debian.sarge/heartbeat/libstonith-dev_1.2.3.cvs.20050927-1bpo3_i386.deb 22. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/debian.sarge/heartbeat/libstonith0_1.2.3.cvs.20050927-1bpo3_i386.deb 23. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/debian.sarge/heartbeat/stonith_1.2.3.cvs.20050927-1bpo3_i386.deb 24. file://localhost/download/3/debian.sarge/heartbeat 25. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/debian.sarge/heartbeat/heartbeat_1.2.3.cvs.20050927-1bpo3.dsc 26. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/debian.sarge/heartbeat/heartbeat_1.2.3.cvs.20050927.orig.tar.gz 27. file://localhost/home/horms/public_html/linux/ultramonkey/news/download/3/debian.sarge/heartbeat/heartbeat_1.2.3.cvs.20050927-1bpo3.diff.gz 28. file://localhost/download/3/source/ 29. file://localhost/download/3/source/heartbeat-1.2.4-CVE-2006-3121.patch