Scientific Linux alert SL-syst-20110531 (systemtap)

From:
    	     
 
Troy Dawson <dawson@fnal.gov> 
To:
    	     
 
"scientific-linux-errata@fnal.gov" <scientific-linux-errata@fnal.gov> 
Subject:
    	     
 
Security ERRATA Moderate: systemtap on SL6.x i386/x86_64 
Date:
    	     
 
Wed, 29 Jun 2011 09:22:13 -0500
Message-ID:
    	     
 
<4E0B3515.7090701@fnal.gov>

Synopsis:    Moderate: systemtap security update
Issue Date:  2011-05-31
CVE Numbers: CVE-2011-1769
              CVE-2011-1781


SystemTap is an instrumentation system for systems running the Linux
kernel, version 2.6. Developers can write scripts to collect data on the
operation of the system.

Two divide-by-zero flaws were found in the way SystemTap handled 
malformed debugging information in DWARF format. When SystemTap 
unprivileged mode was enabled, an unprivileged user in the stapusr group 
could use these flaws to crash the system. Additionally, a privileged 
user (root, or a member of the stapdev group) could trigger these flaws 
when tricked into instrumenting a specially-crafted ELF binary, even 
when unprivileged mode was not enabled. (CVE-2011-1769, CVE-2011-1781)

SystemTap users should upgrade to these updated packages, which contain 
a backported patch to correct these issues.

SL6:
   i386
      systemtap-1.4-6.el6_1.1.i686.rpm
      systemtap-testsuite-1.4-6.el6_1.1.i686.rpm
      systemtap-server-1.4-6.el6_1.1.i686.rpm
      systemtap-sdt-devel-1.4-6.el6_1.1.i686.rpm
      systemtap-runtime-1.4-6.el6_1.1.i686.rpm
      systemtap-initscript-1.4-6.el6_1.1.i686.rpm
      systemtap-grapher-1.4-6.el6_1.1.i686.rpm
      systemtap-client-1.4-6.el6_1.1.i686.rpm
   Dependancies:
elfutils-0.152-1.el6.i686.rpm
elfutils-devel-0.152-1.el6.i686.rpm
elfutils-devel-static-0.152-1.el6.i686.rpm
elfutils-libelf-0.152-1.el6.i686.rpm
elfutils-libelf-devel-0.152-1.el6.i686.rpm
elfutils-libelf-devel-static-0.152-1.el6.i686.rpm
elfutils-libs-0.152-1.el6.i686.rpm

   x86_64
      systemtap-server-1.4-6.el6_1.1.x86_64.rpm
      systemtap-sdt-devel-1.4-6.el6_1.1.x86_64.rpm
      systemtap-sdt-devel-1.4-6.el6_1.1.i686.rpm
      systemtap-runtime-1.4-6.el6_1.1.x86_64.rpm
      systemtap-initscript-1.4-6.el6_1.1.x86_64.rpm
      systemtap-grapher-1.4-6.el6_1.1.x86_64.rpm
      systemtap-client-1.4-6.el6_1.1.x86_64.rpm
      systemtap-1.4-6.el6_1.1.x86_64.rpm
      systemtap-testsuite-1.4-6.el6_1.1.x86_64.rpm
   Dependancies:
elfutils-0.152-1.el6.x86_64.rpm
elfutils-devel-0.152-1.el6.i686.rpm
elfutils-devel-0.152-1.el6.x86_64.rpm
elfutils-devel-static-0.152-1.el6.x86_64.rpm
elfutils-libelf-0.152-1.el6.i686.rpm
elfutils-libelf-0.152-1.el6.x86_64.rpm
elfutils-libelf-devel-0.152-1.el6.i686.rpm
elfutils-libelf-devel-0.152-1.el6.x86_64.rpm
elfutils-libelf-devel-static-0.152-1.el6.x86_64.rpm
elfutils-libs-0.152-1.el6.i686.rpm
elfutils-libs-0.152-1.el6.x86_64.rpm

- Scientific Linux Development Team