Fedora alert FEDORA-2010-1373 (systemtap)

From:
    	     
 
updates@fedoraproject.org 
To:
    	     
 
package-announce@lists.fedoraproject.org 
Subject:
    	     
 
[SECURITY] Fedora 11 Update: systemtap-1.1-2.fc11 
Date:
    	     
 
Thu, 18 Feb 2010 22:23:27 +0000
Message-ID:
    	     
 
<20100218222327.A848610FC68@bastion02.phx2.fedoraproject.org>
Archive-link:
    	     
 
Article, Thread
              
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2010-1373
2010-02-18 17:07:31
--------------------------------------------------------------------------------

Name        : systemtap
Product     : Fedora 11
Version     : 1.1
Release     : 2.fc11
URL         : http://sourceware.org/systemtap/
Summary     : Instrumentation System
Description :
SystemTap is an instrumentation system for systems running Linux 2.6.
Developers can write instrumentation to collect data on the operation
of the system.

--------------------------------------------------------------------------------
Update Information:

- Add systemtap-1.1-cfi-cfa_ops-fixes.patch    - Resolves RHBZ #564429  - Add
systemtap-1.1-get_argv.patch    - Resolves CVE-2010-0411  - Add systemtap-1.1
-tighten-server-params.patch (excluding testsuite)    - Resolves CVE-2010-0412,
CVE-2009-4273
--------------------------------------------------------------------------------
ChangeLog:

* Mon Feb 15 2010 Mark Wielaard <mjw@redhat.com> - 1.1-2
- Add systemtap-1.1-cfi-cfa_ops-fixes.patch
  - Resolves RHBZ #564429
- Add systemtap-1.1-get_argv.patch
  - Resolves CVE-2010-0411
- Add systemtap-1.1-tighten-server-params.patch (excluding testsuite)
  - Resolves CVE-2010-0412, CVE-2009-4273
* Mon Dec 21 2009 David Smith <dsmith@redhat.com> - 1.1-1
- Upstream release.
* Tue Sep 22 2009 Josh Stone <jistone@redhat.com> - 1.0-1
- Upstream release.
* Tue Aug  4 2009 Josh Stone <jistone@redhat.com> - 0.9.9-1
- Upstream release.
* Thu Jun 11 2009 Josh Stone <jistone@redhat.com> - 0.9.8-1
- Upstream release.
* Thu Apr 23 2009 Josh Stone <jistone@redhat.com> - 0.9.7-1
- Upstream release.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #559719 - CVE-2010-0411 systemtap: Crash with systemtap script using __get_argv()
        https://bugzilla.redhat.com/show_bug.cgi?id=559719
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update systemtap' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-...