drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Denial of Service in slocate
Name: |
Denial of Service in slocate
|
|
ID: |
RHSA-2005:747-02 |
|
Distribution: |
Red Hat |
|
Plattformen: |
Red Hat Enterprise Linux |
|
Datum: |
Di, 23. August 2005, 13:00 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2499 |
|
Applikationen: |
Secure Locate |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
--------------------------------------------------------------------- Red Hat Security Advisory
Synopsis: Low: slocate security update Advisory ID: RHSA-2005:747-02 Advisory URL: https://rhn.redhat.com/errata/RHSA-2005-747.html Issue date: 2005-08-22 Updated on: 2005-08-22 Product: Red Hat Enterprise Linux CVE Names: CAN-2005-2499 ---------------------------------------------------------------------
1. Summary:
An updated slocate package that fixes a denial of service issue is now available.
This update has been rated as having low security impact by the Red Hat Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64 Red Hat Linux Advanced Workstation 2.1 - ia64 Red Hat Enterprise Linux ES version 2.1 - i386 Red Hat Enterprise Linux WS version 2.1 - i386
3. Problem description:
Slocate is a security-enhanced version of locate. Like locate, slocate searches through a nightly-updated central database for files that match a given pattern.
A bug was found in the way slocate processes very long paths. A local user could create a carefully crafted directory structure that would prevent updatedb from completing its file system scan, resulting in an incomplete slocate database. The Common Vulnerabilities and Exposures project has assigned the name CAN-2005-2499 to this issue.
Users are advised to upgrade to this updated package, which includes a backported patch to resolve this issue.
4. Solution:
Before applying this update, make sure all previously released errata relevant to your system have been applied.
This update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command:
up2date
This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
5. Bug IDs fixed (http://bugzilla.redhat.com/):
165430 - CAN-2005-2499 slocate DOS
6. RPMs required:
Red Hat Enterprise Linux AS (Advanced Server) version 2.1:
SRPMS: slocate-2.7-1.el2.1.src.rpm 48bc2399648a71b9cdc6f7eee3457f5c slocate-2.7-1.el2.1.src.rpm
i386: 422f42516805c04797c817a4e8c4d333 slocate-2.7-1.el2.1.i386.rpm
ia64: 68f823b854a10eec8a180b05cca7a240 slocate-2.7-1.el2.1.ia64.rpm
Red Hat Linux Advanced Workstation 2.1:
SRPMS: slocate-2.7-1.el2.1.src.rpm 48bc2399648a71b9cdc6f7eee3457f5c slocate-2.7-1.el2.1.src.rpm
ia64: 68f823b854a10eec8a180b05cca7a240 slocate-2.7-1.el2.1.ia64.rpm
Red Hat Enterprise Linux ES version 2.1:
SRPMS: slocate-2.7-1.el2.1.src.rpm 48bc2399648a71b9cdc6f7eee3457f5c slocate-2.7-1.el2.1.src.rpm
i386: 422f42516805c04797c817a4e8c4d333 slocate-2.7-1.el2.1.i386.rpm
Red Hat Enterprise Linux WS version 2.1:
SRPMS: slocate-2.7-1.el2.1.src.rpm 48bc2399648a71b9cdc6f7eee3457f5c slocate-2.7-1.el2.1.src.rpm
i386: 422f42516805c04797c817a4e8c4d333 slocate-2.7-1.el2.1.i386.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2499
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact details at https://www.redhat.com/security/team/contact/
Copyright 2005 Red Hat, Inc.
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQFDCeA5XlSAg2UNWIIRAoS6AJ9Jic50A9zX3HHTbGiodEaG4N0HCgCgoygR AznF3V+gwnjw3LRKSiBMH0E= =v3Cf -----END PGP SIGNATURE-----
-- Enterprise-watch-list mailing list Enterprise-watch-list@redhat.com https://www.redhat.com/mailman/listinfo/enterprise-watch-list
|
|
|
|