BugTraq
[ MDVSA-2011:154 ] systemtap Oct 17 2011 06:08PM
security mandriva com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDVSA-2011:154
http://www.mandriva.com/security/
_______________________________________________________________________

Package : systemtap
Date : October 17, 2011
Affected: 2010.1
_______________________________________________________________________

Problem Description:

A vulnerability has been discovered and corrected in systemtap:

SystemTap 1.4 and earlier, when unprivileged (aka stapusr)
mode is enabled, allows local users to cause a denial of service
(divide-by-zero error and OOPS) via a crafted ELF program with DWARF
expressions that are not properly handled by a stap script that
performs context variable access (CVE-2011-1769).

The updated packages have been patched to correct this issue.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1769
_______________________________________________________________________

Updated Packages:

Mandriva Linux 2010.1:
2bd9ea17a67b24a30dc481dee77bf477 2010.1/i586/systemtap-1.2-1.1mdv2010.2.i586.rpm
49fec555976ce70b01e128b0c0909017 2010.1/SRPMS/systemtap-1.2-1.1mdv2010.2.src.rpm

Mandriva Linux 2010.1/X86_64:
d4e8de0f1481e83fa97e4454aa96afb7 2010.1/x86_64/systemtap-1.2-1.1mdv2010.2.x86_64.rpm
49fec555976ce70b01e128b0c0909017 2010.1/SRPMS/systemtap-1.2-1.1mdv2010.2.src.rpm
_______________________________________________________________________

To upgrade automatically use MandrivaUpdate or urpmi. The verification
of md5 checksums and GPG signatures is performed automatically for you.

All packages are signed by Mandriva for security. You can obtain the
GPG public key of the Mandriva Security Team by executing:

gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

You can view other update advisories for Mandriva Linux at:

http://www.mandriva.com/security/advisories

If you want to report vulnerabilities, please contact

security_(at)_mandriva.com
_______________________________________________________________________

Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Mandriva Security Team
<security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iD8DBQFOnEN6mqjQ0CJFipgRAsW+AKDMzC5temV9K6hBEUVQtZLpFZTiEgCgpjyN
xKE/KiBxBLDP+rvwbq0h9vg=
=x4mc
-----END PGP SIGNATURE-----

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus