File _patchinfo of Package patchinfo.import5316
<patchinfo incident="radvd" version="5316"> <issue tracker="bnc" id="721968" /> <issue tracker="CVE" id="CVE-2011-3601" /> <issue tracker="CVE" id="CVE-2011-3602" /> <issue tracker="CVE" id="CVE-2011-3603" /> <issue tracker="CVE" id="CVE-2011-3604" /> <issue tracker="CVE" id="CVE-2011-3605" /> <category>security</category> <rating>low</rating> <summary>radvd: security issues fixed</summary> <description>This update of radvd fixes the following security flaws: - arbitrary file overwrite flaw through unsanitized interface names (CVE-2011-3602), - missing return value checks in privsep_init() which could cause radvd to keep running with root privileges (CVE-2011-3603), - buffer overread flaws in the process_ra() function (CVE-2011-3604), - temporary denial of service flaw triggered with a flood of ND_ROUTER_SOLICIT (CVE-2011-3605) </description> <packager>adrianSuSE</packager> </patchinfo>