ALT Linux Community general discussions
 help / color / mirror / Atom feed
* [mdk-re] Linux-Mandrake RE Spring 2001 is not vulnurable to RPM PGP/GnuPG Verification Bug
@ 2001-03-27 16:44 Dmitry V. Levin
  2001-03-27 20:17 ` Aleksey Novodvorsky
  0 siblings, 1 reply; 41+ messages in thread
From: Dmitry V. Levin @ 2001-03-27 16:44 UTC (permalink / raw)
  To: security-announce, mandrake-russian

[-- Attachment #1: Type: text/plain, Size: 1136 bytes --]

Greetings!

15 марта 2001 г. SecurityPortal.com опубликовал Security Advisory
SPSA-2001-0001 о потенциальной уязвимости в реализации проверки подписи
RPM-пакетов (http://www.securityportal.com/articles/advisory20010001.html).

В этом сообщении авторы демонстрируют метод, с помощью которого
потенциальный взломщик может подменить подписанные RPM-пакеты в случае,
когда публичный ключ, используемый для подписи, не известен системе на
момент установки нового RPM-пакета.

Однако в состав дистрибутива Linux-Mandrake RE Spring 2001 входят все
публичные ключи, используемые ALT Linux Team для подписи RPM-пакетов, в
предустановленном виде, вследствие чего Linux-Mandrake RE Spring 2001 не
подвержен атакам этого типа при установке пакетов от ALT Linux Team.


Regards,
	Dmitry

+-------------------------------------------------------------------------+
Dmitry V. Levin     mailto://ldv@alt-linux.org
ALT Linux Team      http://www.altlinux.ru/
Fandra Project      http://www.fandra.org/
+-------------------------------------------------------------------------+
UNIX is user friendly. It's just very selective about who its friends are.

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]

^ permalink raw reply	[flat|nested] 41+ messages in thread

end of thread, other threads:[~2001-04-09 21:46 UTC | newest]

Thread overview: 41+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2001-03-27 16:44 [mdk-re] Linux-Mandrake RE Spring 2001 is not vulnurable to RPM PGP/GnuPG Verification Bug Dmitry V. Levin
2001-03-27 20:17 ` Aleksey Novodvorsky
2001-03-28 22:34   ` [mdk-re] куда подевались мои мегабайты? Roman Shumikhin
2001-03-28 23:08     ` Sergey Vlasov
2001-03-30 13:06       ` [mdk-re] " cornet
2001-04-05 16:11   ` [mdk-re] деньги--->>болеро---->>MDK spring 2001??? Roman Shumikhin
2001-04-05 16:33     ` [mdk-re] " Vladimir Motov
2001-04-05 16:50       ` [mdk-re] " Alex Ryabchikov
2001-04-05 18:15         ` [mdk-re] Re: [mdk-re] Re: [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Serge Skorokhodov
2001-04-05 18:32           ` [mdk-re] Re: [mdk-re] Re: [mdk-re] деньги--->>болеро---->>MDK " cornet
2001-04-05 18:39             ` [mdk-re] Re[2]: " Sergey Krivulja
2001-04-05 18:56             ` [mdk-re] " Kataev Andrey
2001-04-05 19:32               ` Igor Solovyov
2001-04-05 19:38                 ` Aleksey Novodvorsky
2001-04-06  0:01                   ` [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Roman S
2001-04-06  3:30                     ` [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re]деньги--->>болеро---->>MDK " Aleksey Novodvorsky
2001-04-06 12:16                   ` [mdk-re] Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] деньги--->>болеро---->>MDK " LoNeR
2001-04-06 10:34                 ` cornet
2001-04-06 20:18                   ` Igor Solovyov
2001-04-06 20:32                     ` [mdk-re] " Vladimir Antonoff
2001-04-07 15:56                     ` Anton Farygin
2001-04-07 17:54                       ` Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Serge Skorokhodov
2001-04-07 23:47                         ` [mdk-re] Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] деньги--->>болеро---->>MDK " Ivan Zakharyaschev
2001-04-08  1:41                           ` [mdk-re] Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Serge Skorokhodov
2001-04-08 14:22                             ` [mdk-re] Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] деньги--->>болеро---->>MDK " Anton Farygin
2001-04-09 10:53                             ` cornet
2001-04-06 12:17                 ` [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] деньги--->>бо?еро---->>MDK " Murat H.Dymov
2001-04-06 20:34                   ` Igor Solovyov
2001-04-09 13:54                     ` Murat H.Dymov
2001-04-09 21:46                       ` Igor Solovyov
2001-04-05 18:57             ` Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Roman Mediakov
2001-04-05 16:53       ` îÁ: " Evgeni Kobzev
2001-04-05 16:45     ` [mdk-re] деньги--->>болеро---->>MDK " Aleksey Novodvorsky
2001-04-05 16:48     ` Artem K. Jouravsky
2001-04-05 17:03     ` [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Ivan Kudryashov
2001-04-06 15:01     ` [mdk-re] Re: [mdk-re] деньги--->>болеро---->>MDK " sam
2001-04-06 15:31       ` [mdk-re] Re: [mdk-re] деньги--->>болеро----> >MDK " Aleksey Novodvorsky
2001-04-06 16:52         ` Artem K. Jouravsky
2001-04-06 17:55           ` [mdk-re] Re[2]: " Maksim Otstavnov
2001-04-06 18:09             ` Artem K. Jouravsky
2001-04-06 16:50       ` Vyt

ALT Linux Community general discussions

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
		mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
	public-inbox-index community

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.community


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git