From: "Dmitry V. Levin" <ldv@alt-linux.org>
To: security-announce@altlinux.ru, mandrake-russian@altlinux.ru
Subject: [mdk-re] Linux-Mandrake RE Spring 2001 is not vulnurable to RPM PGP/GnuPG Verification Bug
Date: Tue Mar 27 16:44:15 2001
Message-ID: <20010327164926.A3058@ldv.office.alt-linux.org> (raw)
[-- Attachment #1: Type: text/plain, Size: 1136 bytes --]
Greetings!
15 марта 2001 г. SecurityPortal.com опубликовал Security Advisory
SPSA-2001-0001 о потенциальной уязвимости в реализации проверки подписи
RPM-пакетов (http://www.securityportal.com/articles/advisory20010001.html).
В этом сообщении авторы демонстрируют метод, с помощью которого
потенциальный взломщик может подменить подписанные RPM-пакеты в случае,
когда публичный ключ, используемый для подписи, не известен системе на
момент установки нового RPM-пакета.
Однако в состав дистрибутива Linux-Mandrake RE Spring 2001 входят все
публичные ключи, используемые ALT Linux Team для подписи RPM-пакетов, в
предустановленном виде, вследствие чего Linux-Mandrake RE Spring 2001 не
подвержен атакам этого типа при установке пакетов от ALT Linux Team.
Regards,
Dmitry
+-------------------------------------------------------------------------+
Dmitry V. Levin mailto://ldv@alt-linux.org
ALT Linux Team http://www.altlinux.ru/
Fandra Project http://www.fandra.org/
+-------------------------------------------------------------------------+
UNIX is user friendly. It's just very selective about who its friends are.
[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]
next reply other threads:[~2001-03-27 16:44 UTC|newest]
Thread overview: 41+ messages / expand[flat|nested] mbox.gz Atom feed top
2001-03-27 16:44 Dmitry V. Levin [this message]
2001-03-27 20:17 ` Aleksey Novodvorsky
2001-03-28 22:34 ` [mdk-re] куда подевались мои мегабайты? Roman Shumikhin
2001-03-28 23:08 ` Sergey Vlasov
2001-03-30 13:06 ` [mdk-re] " cornet
2001-04-05 16:11 ` [mdk-re] деньги--->>болеро---->>MDK spring 2001??? Roman Shumikhin
2001-04-05 16:33 ` [mdk-re] " Vladimir Motov
2001-04-05 16:50 ` [mdk-re] " Alex Ryabchikov
2001-04-05 18:15 ` [mdk-re] Re: [mdk-re] Re: [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Serge Skorokhodov
2001-04-05 18:32 ` [mdk-re] Re: [mdk-re] Re: [mdk-re] деньги--->>болеро---->>MDK " cornet
2001-04-05 18:39 ` [mdk-re] Re[2]: " Sergey Krivulja
2001-04-05 18:56 ` [mdk-re] " Kataev Andrey
2001-04-05 19:32 ` Igor Solovyov
2001-04-05 19:38 ` Aleksey Novodvorsky
2001-04-06 0:01 ` [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Roman S
2001-04-06 3:30 ` [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re]деньги--->>болеро---->>MDK " Aleksey Novodvorsky
2001-04-06 12:16 ` [mdk-re] Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] деньги--->>болеро---->>MDK " LoNeR
2001-04-06 10:34 ` cornet
2001-04-06 20:18 ` Igor Solovyov
2001-04-06 20:32 ` [mdk-re] " Vladimir Antonoff
2001-04-07 15:56 ` Anton Farygin
2001-04-07 17:54 ` Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Serge Skorokhodov
2001-04-07 23:47 ` [mdk-re] Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] деньги--->>болеро---->>MDK " Ivan Zakharyaschev
2001-04-08 1:41 ` [mdk-re] Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Serge Skorokhodov
2001-04-08 14:22 ` [mdk-re] Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] деньги--->>болеро---->>MDK " Anton Farygin
2001-04-09 10:53 ` cornet
2001-04-06 12:17 ` [mdk-re] Re: [mdk-re] Re: [mdk-re] Re: [mdk-re] деньги--->>бо?еро---->>MDK " Murat H.Dymov
2001-04-06 20:34 ` Igor Solovyov
2001-04-09 13:54 ` Murat H.Dymov
2001-04-09 21:46 ` Igor Solovyov
2001-04-05 18:57 ` Re[2]: [mdk-re] Re: [mdk-re] Re: [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Roman Mediakov
2001-04-05 16:53 ` îÁ: " Evgeni Kobzev
2001-04-05 16:45 ` [mdk-re] деньги--->>болеро---->>MDK " Aleksey Novodvorsky
2001-04-05 16:48 ` Artem K. Jouravsky
2001-04-05 17:03 ` [mdk-re] ÄÅÎØÇÉ--->>ÂÏÌÅÒÏ---->>MDK " Ivan Kudryashov
2001-04-06 15:01 ` [mdk-re] Re: [mdk-re] деньги--->>болеро---->>MDK " sam
2001-04-06 15:31 ` [mdk-re] Re: [mdk-re] деньги--->>болеро----> >MDK " Aleksey Novodvorsky
2001-04-06 16:52 ` Artem K. Jouravsky
2001-04-06 17:55 ` [mdk-re] Re[2]: " Maksim Otstavnov
2001-04-06 18:09 ` Artem K. Jouravsky
2001-04-06 16:50 ` Vyt
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20010327164926.A3058@ldv.office.alt-linux.org \
--to=ldv@alt-linux.org \
--cc=mandrake-russian@altlinux.ru \
--cc=security-announce@altlinux.ru \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux Community general discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
public-inbox-index community
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.community
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git