drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Denial of Service in sysklogd
Name: |
Denial of Service in sysklogd
|
|
ID: |
SSA:2004-124-02 |
|
Distribution: |
Slackware |
|
Plattformen: |
Slackware -current, Slackware 8.1, Slackware 9.0, Slackware 9.1 |
|
Datum: |
Di, 4. Mai 2004, 13:00 |
|
Referenzen: |
Keine Angabe |
|
Applikationen: |
sysklogd |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
[slackware-security] sysklogd update (SSA:2004-124-02)
New sysklogd packages are available for Slackware 8.1, 9.0, 9.1, and -current to fix a security issue where a user could cause syslogd to crash. Thanks to Steve Grubb who researched the issue.
Here are the details from the Slackware 9.1 ChangeLog: +--------------------------+ Sun May 2 17:16:41 PDT 2004 patches/packages/sysklogd-1.4.1-i486-9.tgz: Patched a bug which could allow a user to cause syslogd to write to unallocated memory and crash. Thanks to Steve Grubb for finding the bug, and Solar Designer for refining the patch. (* Security fix *) +--------------------------+
Where to find the new packages: +-----------------------------+
Updated package for Slackware 8.1: sysklogd-1.4.1-i386-7.tgz
Updated package for Slackware 9.0: sysklogd-1.4.1-i386-9.tgz
Updated package for Slackware 9.1: sysklogd-1.4.1-i486-9.tgz
Updated package for Slackware -current: sysklogd-1.4.1-i486-9.tgz
MD5 signatures: +-------------+
Slackware 8.1 package: 4bcd73db9029567f73d7131f63421cdd sysklogd-1.4.1-i386-7.tgz
Slackware 9.0 package: 8e7563c3c060641acc2307b0ab8c1402 sysklogd-1.4.1-i386-9.tgz
Slackware 9.1 package: f97b852f2202af2ed775a2e0c584bc26 sysklogd-1.4.1-i486-9.tgz
Slackware -current package: 5820b02d24994c1b5fff7a62b59dada0 sysklogd-1.4.1-i486-9.tgz
Installation instructions: +------------------------+
First, stop syslogd/klogd: # . /etc/rc.d/rc.syslog stop
Next, upgrade the package as root: # upgradepkg sysklogd-1.4.1-i486-9.tgz
Finally, restart the logging system: # . /etc/rc.d/rc.syslog start
+-----+
Slackware Linux Security Team http://slackware.com/gpg-key security@slackware.com
+------------------------------------------------------------------------+ | To leave the slackware-security mailing list: | +------------------------------------------------------------------------+ | Send an email to majordomo@slackware.com with this text in the body of | | the email message: | | | | unsubscribe slackware-security | | | | You will get a confirmation message back containing instructions to | | complete the process. Please do not reply to this email address. | +------------------------------------------------------------------------+
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFAlqIpakRjwEAQIjMRAqG2AJ0TfBJ0P668pqrAavmP22Kyy6JeZACeIFFQ tUnQUODYj4t/dWVN8YKUq8k= =iQRP -----END PGP SIGNATURE-----
|
|
|
|