util-linux: information leak in the login program [LWN.net]

Package(s):

util-linux

CVE #(s):

CAN-2004-0080

Created:

February 3, 2004

Updated:

April 8, 2004

Description:

The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function.

In some situations, the login program could use a pointer that had been freed and reallocated. This could cause unintentional data leakage.

Alerts:

Netwosix	NW-2004-0010	2004-04-08
Gentoo	200404-06	2004-04-07
Fedora-Legacy	FLSA:1256	2004-03-04
Whitebox	WBSA-2004:056-01	2004-02-12
Red Hat	RHSA-2004:056-01	2004-02-02

(Log in to post comments)

util-linux: information leak in the login program

Posted Feb 5, 2004 18:25 UTC (Thu) by kenmoffat (subscriber, #4807) [Link]

And when you read it, the updates are for 2.11f. Umm, excuse me ? I know that the instructions in util-linux recommend against using the source because it might overwrite your distro's changes, but when the hell was 2.11f ever close to current, except in this flavour of RH ?

Or is this just an example of how long code-auditing takes ;)