Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 499
Alerts This Week
Warning Icon 1 499

Fedora Core 4: 2005-770 Moderate: Slocate Incomplete Database Issue

fedora
Calendar Grey August 22, 2005
Scroller Fedora
This patch resolves slocate's database issues stemming from specific directory configurations. Discover additional details about the solution.
A carefully prepared directory structure could stop the updatedb file system scan, resulting in an incomplete slocate database

Summary

Slocate is a security-enhanced version of locate. Just like locate,

slocate searches through a central database (which is updated nightly)

for files that match a given pattern. Slocate allows you to quickly

find files anywhere on your system.

A carefully prepared directory structure could stop the

updatedb file system scan, resulting in an incomplete slocate

database. The Common Vulnerabilities and Exposures project has

assigned the name CAN-2005-2499 to this issue.

- Replace sl_fs.[ch] by glibc-derived versions

- Skip subtrees with paths longer than 32k

be933a409ee095e558d20b56e6c3aac5 SRPMS/slocate-2.7-22.fc4.1.src.rpm

4456c2873f2cc9a75afa6a9989445d4e ppc/slocate-2.7-22.fc4.1.ppc.rpm

7cb7dfde2ee74b9b282b4ff002d3eb8c ppc/debug/slocate-debuginfo-2.7-22.fc4.1.ppc.rpm

76bddbbc65171d8060a6f2c1a8bfa62d x86_64/slocate-2.7-22.fc4.1.x86_64.rpm

856ef7ffcef6e41eef0e93f23fc57998 x86_64/debug/slocate-debuginfo-2.7-22.fc4.1.x86_64.rpm

50b3461440c9efe25d55f34d79a0272a i386/slocate-2.7-22.fc4.1.i386.rpm

b35ba3b183c2e37773ddf07147b1a98d i386/debug/slocate-debuginfo-2.7-22.fc4.1.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Name: slocate
Version: 2.7
Release: 22.fc4.1
Summary: Finds files on a system via a central database.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.