Subject: | |
From: | |
Reply To: | |
Date: | Wed, 29 Jun 2011 09:22:13 -0500 |
Content-Type: | text/plain |
Parts/Attachments: |
|
|
Synopsis: Moderate: systemtap security update
Issue Date: 2011-05-31
CVE Numbers: CVE-2011-1769
CVE-2011-1781
SystemTap is an instrumentation system for systems running the Linux
kernel, version 2.6. Developers can write scripts to collect data on the
operation of the system.
Two divide-by-zero flaws were found in the way SystemTap handled
malformed debugging information in DWARF format. When SystemTap
unprivileged mode was enabled, an unprivileged user in the stapusr group
could use these flaws to crash the system. Additionally, a privileged
user (root, or a member of the stapdev group) could trigger these flaws
when tricked into instrumenting a specially-crafted ELF binary, even
when unprivileged mode was not enabled. (CVE-2011-1769, CVE-2011-1781)
SystemTap users should upgrade to these updated packages, which contain
a backported patch to correct these issues.
SL6:
i386
systemtap-1.4-6.el6_1.1.i686.rpm
systemtap-testsuite-1.4-6.el6_1.1.i686.rpm
systemtap-server-1.4-6.el6_1.1.i686.rpm
systemtap-sdt-devel-1.4-6.el6_1.1.i686.rpm
systemtap-runtime-1.4-6.el6_1.1.i686.rpm
systemtap-initscript-1.4-6.el6_1.1.i686.rpm
systemtap-grapher-1.4-6.el6_1.1.i686.rpm
systemtap-client-1.4-6.el6_1.1.i686.rpm
Dependancies:
elfutils-0.152-1.el6.i686.rpm
elfutils-devel-0.152-1.el6.i686.rpm
elfutils-devel-static-0.152-1.el6.i686.rpm
elfutils-libelf-0.152-1.el6.i686.rpm
elfutils-libelf-devel-0.152-1.el6.i686.rpm
elfutils-libelf-devel-static-0.152-1.el6.i686.rpm
elfutils-libs-0.152-1.el6.i686.rpm
x86_64
systemtap-server-1.4-6.el6_1.1.x86_64.rpm
systemtap-sdt-devel-1.4-6.el6_1.1.x86_64.rpm
systemtap-sdt-devel-1.4-6.el6_1.1.i686.rpm
systemtap-runtime-1.4-6.el6_1.1.x86_64.rpm
systemtap-initscript-1.4-6.el6_1.1.x86_64.rpm
systemtap-grapher-1.4-6.el6_1.1.x86_64.rpm
systemtap-client-1.4-6.el6_1.1.x86_64.rpm
systemtap-1.4-6.el6_1.1.x86_64.rpm
systemtap-testsuite-1.4-6.el6_1.1.x86_64.rpm
Dependancies:
elfutils-0.152-1.el6.x86_64.rpm
elfutils-devel-0.152-1.el6.i686.rpm
elfutils-devel-0.152-1.el6.x86_64.rpm
elfutils-devel-static-0.152-1.el6.x86_64.rpm
elfutils-libelf-0.152-1.el6.i686.rpm
elfutils-libelf-0.152-1.el6.x86_64.rpm
elfutils-libelf-devel-0.152-1.el6.i686.rpm
elfutils-libelf-devel-0.152-1.el6.x86_64.rpm
elfutils-libelf-devel-static-0.152-1.el6.x86_64.rpm
elfutils-libs-0.152-1.el6.i686.rpm
elfutils-libs-0.152-1.el6.x86_64.rpm
- Scientific Linux Development Team
|
|
|