It was discovered that OpenIPMI, the Intelligent Platform Management Interface library and tools, used too wide permissions PID file, which allows local users to kill arbitrary processes by writing to this file. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2376-2
This errata changes the default directory used forPID files to /var/run.. ` --------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: Updated stunnel packages available for Red Hat Linux 7 Advisory ID: RHSA-2000:137-04 Issue date: 2000-12-20 Updated on: 2000-12-21 Product: Red Hat Linux Keywords: daemon pid file Cross references: RHSA-2000:129 Obsoletes --------------------------------------------------------------------- 1. Topic: Updated stunnel packages are available for Red Hat Linux 7. 2. Relevant releases/architectures: Red Hat Linux 7.0 - alpha, i386 3. Problem description: When invoked in daemon mode (that is, without the -l or -f flags), stunnel will attempt to log its process ID to a file in the /var/stunnel directory, which does not exist. This errata changes the default directory used for PID files to /var/run. 4. Solution: For each RPM for your particular architecture, run: rpm -Fvh [filename] where filename is the name of the RPM. 5. Bug IDs fixed ( for more info): 22623 - wring path with updates stunnel-3.9-1 6. RPMs required: Red Hat Linux 7.0: SRPMS: alpha: i386: 7. Verification: MD5 sum Package Name -------------------------------------------------------------------------- 0e943be9f9a0ff7a217519a499a48520 7.0/alpha/stunnel-3.10-2.alpha.rpm e9acfce5f6d708d2e648e0b13381a977 7.0/i386/stunnel-3.10-2.i386.rpm f64584ec8d028508e32ad593b5687712 7.0/SRPMS/stunnel-3.10-2.src.rpm These packages are GPG signed by Red Hat, Inc. for security. Our key is available at: You can verify each package with the following command: rpm --checksig If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command: rpm --checksig --nogpg 8. References: Copyright(c) 2000 Red Hat, Inc. `. Updated stunnelpackages for Red Hat Linux 7 rectify issues with PID file management, enhancing system security.. Red Hat Linux, Stunnel Update, Process Management, Security Fix. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.