systemtap-1.1-3.AXS3.3

エラータID: AXSA:2010-497:05

Release date: 
Monday, November 22, 2010 - 21:38
Subject: 
systemtap-1.1-3.AXS3.3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system.
Security issues fixed with this release:
CVE-2010-4170
CVE-2010-4171
No description available at the time of writing, see CVE links below.

Solution: 

Update packages.

CVEs: 
CVE-2010-4170
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.
CVE-2010-4171
The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).
Additional Info: 

N/A

Download: 

SRPMS
  1. systemtap-1.1-3.AXS3.3.src.rpm
    MD5: ef5b44696688db337ec5fff7a7923f12
    SHA-256: 1b9df449a2d86fbf5f743a33c886eb27ea1f81e34eb340c4d4bbb9a5056a1992
    Size: 2.95 MB

Asianux Server 3 for x86
  1. systemtap-1.1-3.AXS3.3.i386.rpm
    MD5: d68eb9b6657eadf20c063f5d79b60103
    SHA-256: 635c3a36f8786e712e675b3f3bbb3642234d6e0b2a9196045a15a76062aec602
    Size: 2.27 MB
  2. systemtap-runtime-1.1-3.AXS3.3.i386.rpm
    MD5: 9aaef4f79b093496733499b36afa2e5b
    SHA-256: 679ffeab19fe8afff474b36fe80f73bc2f732e9557b6e64433d72d88bccbfb77
    Size: 83.13 kB

Asianux Server 3 for x86_64
  1. systemtap-1.1-3.AXS3.3.x86_64.rpm
    MD5: 1781e5bb8c19b488c6434c0d9283dd5c
    SHA-256: 0d7aa764dc966952a6bcec5995a3d689b6368b2e759bf3d83303522c792e6bfc
    Size: 2.22 MB
  2. systemtap-runtime-1.1-3.AXS3.3.x86_64.rpm
    MD5: f1f608614e8132c8d3a479f389a08fcd
    SHA-256: 53a30dfedff8f45d9589900cdcacfdcf9bbf043afef2f433885540aec0e9e4b5
    Size: 85.44 kB