systemtap-1.4-6.3.0.1.AXS4

SystemTap is an instrumentation system for systems running Linux 2.6. Developers can write instrumentation to collect data on the operation of the system.
Security issues fixed with this release:
CVE-2011-1769
SystemTap 1.4 and earlier, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs context variable access.
CVE-2011-1781
SystemTap 1.4, when unprivileged (aka stapusr) mode is enabled, allows local users to cause a denial of service (divide-by-zero error and OOPS) via a crafted ELF program with DWARF expressions that are not properly handled by a stap script that performs stack unwinding (aka backtracing).
CVE-2011-2502
CVE-2011-2503
No description available at the time of writing, please refer to the CVE links below.
Fixed bugs:
- SystemTap has been rebased on version 1.4. It includes several enhancements and bug fixes. This includes better diagnostics for backtracing, access to more kernel tracepoints, wildcards in process("/bin/*") probes, improved sys/sdt.h userspace markers, integrated compile-server client, and automatic pretty-printing of structures ($variable$).
- SystemTap would fail to remove the module directory created by the debugfs debugger when the system ran out of memeory in a module. SystemTap was thus unable to relaod the module unless the system was rebooted and it woudl sometimes lead to a kernel panic. This has been fixed.
- In some unusual situations, the probe module would send error and warning messages too fast for some buffers. Some of the messages could get lost and lead to a kernel panic. This has been fixed.