Scientific Linux: Moderate SystemTap Update for SL6.x Systems

Date: Wed, 29 Jun 2011 09:22:13 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Moderate: systemtap on SL6.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 
MIME-Version: 1.0

Synopsis: Moderate: systemtap security update
Issue Date: 2011-05-31
CVE Numbers: CVE-2011-1769
 CVE-2011-1781

SystemTap is an instrumentation system for systems running the Linux
kernel, version 2.6. Developers can write scripts to collect data on the
operation of the system.

Two divide-by-zero flaws were found in the way SystemTap handled
malformed debugging information in DWARF format. When SystemTap
unprivileged mode was enabled, an unprivileged user in the stapusr group
could use these flaws to crash the system. Additionally, a privileged
user (root, or a member of the stapdev group) could trigger these flaws
when tricked into instrumenting a specially-crafted ELF binary, even
when unprivileged mode was not enabled. (CVE-2011-1769, CVE-2011-1781)

SystemTap users should upgrade to these updated packages, which contain
a backported patch to correct these issues.

SL6:
 i386
 systemtap-1.4-6.el6_1.1.i686.rpm
 systemtap-testsuite-1.4-6.el6_1.1.i686.rpm
 systemtap-server-1.4-6.el6_1.1.i686.rpm
 systemtap-sdt-devel-1.4-6.el6_1.1.i686.rpm
 systemtap-runtime-1.4-6.el6_1.1.i686.rpm
 systemtap-initscript-1.4-6.el6_1.1.i686.rpm
 systemtap-grapher-1.4-6.el6_1.1.i686.rpm
 systemtap-client-1.4-6.el6_1.1.i686.rpm
 Dependancies:
elfutils-0.152-1.el6.i686.rpm
elfutils-devel-0.152-1.el6.i686.rpm
elfutils-devel-static-0.152-1.el6.i686.rpm
elfutils-libelf-0.152-1.el6.i686.rpm
elfutils-libelf-devel-0.152-1.el6.i686.rpm
elfutils-libelf-devel-static-0.152-1.el6.i686.rpm
elfutils-libs-0.152-1.el6.i686.rpm

 x86_64
 systemtap-server-1.4-6.el6_1.1.x86_64.rpm
 systemtap-sdt-devel-1.4-6.el6_1.1.x86_64.rpm
 systemtap-sdt-devel-1.4-6.el6_1.1.i686.rpm
 systemtap-runtime-1.4-6.el6_1.1.x86_64.rpm
 systemtap-initscript-1.4-6.el6_1.1.x86_64.rpm
 systemtap-grapher-1.4-6.el6_1.1.x86_64.rpm
 systemtap-client-1.4-6.el6_1.1.x86_64.rpm
 systemtap-1.4-6.el6_1.1.x86_64.rpm
 systemtap-testsuite-1.4-6.el6_1.1.x86_64.rpm
 Dependancies:
elfutils-0.152-1.el6.x86_64.rpm
elfutils-devel-0.152-1.el6.i686.rpm
elfutils-devel-0.152-1.el6.x86_64.rpm
elfutils-devel-static-0.152-1.el6.x86_64.rpm
elfutils-libelf-0.152-1.el6.i686.rpm
elfutils-libelf-0.152-1.el6.x86_64.rpm
elfutils-libelf-devel-0.152-1.el6.i686.rpm
elfutils-libelf-devel-0.152-1.el6.x86_64.rpm
elfutils-libelf-devel-static-0.152-1.el6.x86_64.rpm
elfutils-libs-0.152-1.el6.i686.rpm
elfutils-libs-0.152-1.el6.x86_64.rpm

- Scientific Linux Development Team