Mailinglist Archive: opensuse-bugs (7294 mails)

< Previous Next >
[Bug 408352] potential time shift vulnerability in Online Update
  • From: bugzilla_noreply@xxxxxxxxxx
  • Date: Thu, 19 Mar 2009 04:13:14 -0600 (MDT)
  • Message-id: <20090319101314.CB70ECC7D5@xxxxxxxxxxxxxxxxxxxxxx>
https://bugzilla.novell.com/show_bug.cgi?id=408352

User lnussel@xxxxxxxxxx added comment
https://bugzilla.novell.com/show_bug.cgi?id=408352#c5


Ludwig Nussel <lnussel@xxxxxxxxxx> changed:

What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution| |FIXED




--- Comment #5 from Ludwig Nussel <lnussel@xxxxxxxxxx> 2009-03-19 04:13:13 MST
---
Meta data now supports an expire tag so an attacker cannot withhold updates
forever:
http://en.opensuse.org/Standards/Rpm_Metadata#Outdated_Metadata_Hint

--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

< Previous Next >
This Thread
  • No further messages