systemtap security update

2011-05-3117:05:06

CentOS Project

lists.centos.org

CVSS2

1.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:N/I:N/A:P

EPSS

Percentile

5.1%

JSON

CentOS Errata and Security Advisory CESA-2011:0841

SystemTap is an instrumentation system for systems running the Linux
kernel, version 2.6. Developers can write scripts to collect data on the
operation of the system.

A divide-by-zero flaw was found in the way SystemTap handled malformed
debugging information in DWARF format. When SystemTap unprivileged mode was
enabled, an unprivileged user in the stapusr group could use this flaw to
crash the system. Additionally, a privileged user (root, or a member of the
stapdev group) could trigger this flaw when tricked into instrumenting a
specially-crafted ELF binary, even when unprivileged mode was not enabled.
(CVE-2011-1769)

SystemTap users should upgrade to these updated packages, which contain a
backported patch to correct this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2011-May/079763.html
https://lists.centos.org/pipermail/centos-announce/2011-May/079764.html

Affected packages:
systemtap
systemtap-client
systemtap-initscript
systemtap-runtime
systemtap-sdt-devel
systemtap-server
systemtap-testsuite

Upstream details at:
https://access.redhat.com/errata/RHSA-2011:0841

OSVersionArchitecturePackageVersionFilename
CentOS5i386systemtap< 1.3-4.el5_6.1systemtap-1.3-4.el5_6.1.i386.rpm
CentOS5i386systemtap-client< 1.3-4.el5_6.1systemtap-client-1.3-4.el5_6.1.i386.rpm
CentOS5i386systemtap-initscript< 1.3-4.el5_6.1systemtap-initscript-1.3-4.el5_6.1.i386.rpm
CentOS5i386systemtap-runtime< 1.3-4.el5_6.1systemtap-runtime-1.3-4.el5_6.1.i386.rpm
CentOS5i386systemtap-sdt-devel< 1.3-4.el5_6.1systemtap-sdt-devel-1.3-4.el5_6.1.i386.rpm
CentOS5i386systemtap-server< 1.3-4.el5_6.1systemtap-server-1.3-4.el5_6.1.i386.rpm
CentOS5i386systemtap-testsuite< 1.3-4.el5_6.1systemtap-testsuite-1.3-4.el5_6.1.i386.rpm
CentOS5x86_64systemtap< 1.3-4.el5_6.1systemtap-1.3-4.el5_6.1.x86_64.rpm
CentOS5x86_64systemtap-client< 1.3-4.el5_6.1systemtap-client-1.3-4.el5_6.1.x86_64.rpm
CentOS5x86_64systemtap-initscript< 1.3-4.el5_6.1systemtap-initscript-1.3-4.el5_6.1.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	5	i386	systemtap	< 1.3-4.el5_6.1	systemtap-1.3-4.el5_6.1.i386.rpm
CentOS	5	i386	systemtap-client	< 1.3-4.el5_6.1	systemtap-client-1.3-4.el5_6.1.i386.rpm
CentOS	5	i386	systemtap-initscript	< 1.3-4.el5_6.1	systemtap-initscript-1.3-4.el5_6.1.i386.rpm
CentOS	5	i386	systemtap-runtime	< 1.3-4.el5_6.1	systemtap-runtime-1.3-4.el5_6.1.i386.rpm
CentOS	5	i386	systemtap-sdt-devel	< 1.3-4.el5_6.1	systemtap-sdt-devel-1.3-4.el5_6.1.i386.rpm
CentOS	5	i386	systemtap-server	< 1.3-4.el5_6.1	systemtap-server-1.3-4.el5_6.1.i386.rpm
CentOS	5	i386	systemtap-testsuite	< 1.3-4.el5_6.1	systemtap-testsuite-1.3-4.el5_6.1.i386.rpm
CentOS	5	x86_64	systemtap	< 1.3-4.el5_6.1	systemtap-1.3-4.el5_6.1.x86_64.rpm
CentOS	5	x86_64	systemtap-client	< 1.3-4.el5_6.1	systemtap-client-1.3-4.el5_6.1.x86_64.rpm
CentOS	5	x86_64	systemtap-initscript	< 1.3-4.el5_6.1	systemtap-initscript-1.3-4.el5_6.1.x86_64.rpm