Synopsis: Low: mcstrans security and bug fix update
Issue date: 2007-11-07
CVE Names: CVE-2007-4570
An algorithmic complexity weakness was found in the way the mcstrans
daemon handled ranges of compartments in sensitivity labels. A local
user could trigger this flaw causing mctransd to temporarily stop
responding to other requests; a partial denial of service. (CVE-2007-4570)
This update also fixes a problem where the mcstrans daemon was
preventing SSH connections into an SELinux box, that was running a
Multi-Level Security (MLS) Policy with multiple categories
SL 5.x
SRPMS:
mcstrans-0.2.6-1.el5.src.rpm
i386:
mcstrans-0.2.6-1.el5.i386.rpm
x86_64:
mcstrans-0.2.6-1.el5.x86_64.rpm
-Connie Sieh
-Troy Dawson