Scientific Linux: CVE-2005-4889 Moderate: rpm Security Issue For SL4.x

Date: Tue, 7 Sep 2010 13:50:13 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: FASTBUGS for SL 5.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

The following FASTBUGS have been uploaded to

 i386:
expat-1.95.8-8.3.el5_5.3.i386.rpm
expat-devel-1.95.8-8.3.el5_5.3.i386.rpm
oddjob-0.27-11.el5.i386.rpm
oddjob-devel-0.27-11.el5.i386.rpm
oddjob-libs-0.27-11.el5.i386.rpm
openmotif-2.3.1-4.el5.i386.rpm
openmotif-devel-2.3.1-4.el5.i386.rpm

 x86_64:
expat-1.95.8-8.3.el5_5.3.i386.rpm
expat-1.95.8-8.3.el5_5.3.x86_64.rpm
expat-devel-1.95.8-8.3.el5_5.3.i386.rpm
expat-devel-1.95.8-8.3.el5_5.3.x86_64.rpm
oddjob-0.27-11.el5.x86_64.rpm
oddjob-devel-0.27-11.el5.i386.rpm
oddjob-devel-0.27-11.el5.x86_64.rpm
oddjob-libs-0.27-11.el5.i386.rpm
oddjob-libs-0.27-11.el5.x86_64.rpm
openmotif-2.3.1-4.el5.i386.rpm
openmotif-2.3.1-4.el5.x86_64.rpm
openmotif-devel-2.3.1-4.el5.i386.rpm
openmotif-devel-2.3.1-4.el5.x86_64.rpm

-Connie Sieh
-Troy Dawson
Date: Wed, 8 Sep 2010 15:39:57 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Moderate: rpm on SL4.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Moderate: rpm security update
Issue date:	2010-09-07
CVE Names:	CVE-2005-4889 CVE-2010-2059

It was discovered that RPM did not remove setuid and setgid bits set on
binaries when upgrading or removing packages. A local attacker able to
create hard links to binaries could use this flaw to keep those binaries
on the system, at a specific version level and with the setuid or setgid
bit set, even if the package providing them was upgraded or removed by a
system administrator. This could have security implications if a package
was upgraded or removed because of a security flaw in a setuid or setgid
program. (CVE-2005-4889, CVE-2010-2059)

SL 4.x

 SRPMS:
rpm-4.3.3-33_nonptl.el4_8.1.src.rpm
 i386:
popt-1.9.1-33_nonptl.el4_8.1.i386.rpm
rpm-4.3.3-33_nonptl.el4_8.1.i386.rpm
rpm-build-4.3.3-33_nonptl.el4_8.1.i386.rpm
rpm-devel-4.3.3-33_nonptl.el4_8.1.i386.rpm
rpm-libs-4.3.3-33_nonptl.el4_8.1.i386.rpm
rpm-python-4.3.3-33_nonptl.el4_8.1.i386.rpm

 x86_64:
popt-1.9.1-33_nonptl.el4_8.1.i386.rpm
popt-1.9.1-33_nonptl.el4_8.1.x86_64.rpm
rpm-4.3.3-33_nonptl.el4_8.1.x86_64.rpm
rpm-build-4.3.3-33_nonptl.el4_8.1.x86_64.rpm
rpm-devel-4.3.3-33_nonptl.el4_8.1.x86_64.rpm
rpm-libs-4.3.3-33_nonptl.el4_8.1.i386.rpm
rpm-libs-4.3.3-33_nonptl.el4_8.1.x86_64.rpm
rpm-python-4.3.3-33_nonptl.el4_8.1.x86_64.rpm

-Connie Sieh
-Troy Dawson