Thank you for information!
--
Andy Smith kovacs.end...@upcmail.hu
2009. 01. 25, vasárnap keltezéssel 21.26-kor Steffen Joeris ezt írta:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
-
Debian Security Advisory DSA-1710-1 secur...@debian.org
http://www.debian.org/security/ Steffen Joeris
January 25, 2009 http://www.debian.org/security/faq
-
Package: ganglia-monitor-core
Vulnerability : buffer overflow
Problem type : remote
Debian-specific: no
CVE Id : CVE-2009-0241
Spike Spiegel discovered a stack-based buffer overflow in gmetad, the
meta-daemon for the ganglia cluster monitoring toolkit, which could be
triggered via a request with long path names and might enable
arbitrary code execution.
For the stable distribution (etch), this problem has been fixed in
version 2.5.7-3.1etch1.
For the unstable distribution (sid) this problem has been fixed in
version 2.5.7-5.
For the testing distribution (lenny), this problem will be fixed soon.
We recommend that you upgrade your ganglia-monitor-core packages.
Upgrade instructions
-
wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
apt-get update
will update the internal database
apt-get upgrade
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 4.0 alias etch
- ---
Source archives:
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/ganglia-monitor-core_2.5.7.orig.tar.gz
Size/MD5 checksum: 508535 7b312d76d3f2d0cfe0bafee876337040
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/ganglia-monitor-core_2.5.7-3.1etch1.diff.gz
Size/MD5 checksum: 316476 052c6ae45b1d114616ae8a4d04530cfe
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/ganglia-monitor-core_2.5.7-3.1etch1.dsc
Size/MD5 checksum: 759 cf4c7357786fd423ee1c04a936dfc389
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/libganglia1-dev_2.5.7-3.1etch1_alpha.deb
Size/MD5 checksum: 150882 e0450d50127c267dbb97d3f27b41603a
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/gmetad_2.5.7-3.1etch1_alpha.deb
Size/MD5 checksum: 111420 5050aa958bd47ca0202f782989a3f662
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/libganglia1_2.5.7-3.1etch1_alpha.deb
Size/MD5 checksum: 106024 204e913ca281f7698d94c28e0b53fa7d
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/ganglia-monitor_2.5.7-3.1etch1_alpha.deb
Size/MD5 checksum: 168450 5476515111a428a8e13c27437ef9f18c
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/gmetad_2.5.7-3.1etch1_amd64.deb
Size/MD5 checksum: 102418 e4f43cb6911e3b8ebcd38dd400698c70
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/libganglia1-dev_2.5.7-3.1etch1_amd64.deb
Size/MD5 checksum: 132094 ea40ef93a55598d06bbebd6ca297371b
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/libganglia1_2.5.7-3.1etch1_amd64.deb
Size/MD5 checksum:98228 c7694aad20a0c47144fcf9ed3a8c7005
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/ganglia-monitor_2.5.7-3.1etch1_amd64.deb
Size/MD5 checksum: 153468 c3b2b87c5ccc506aa5294ca7fe4c5c65
arm architecture (ARM)
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/gmetad_2.5.7-3.1etch1_arm.deb
Size/MD5 checksum:92476 58bbe3b2bab165d03c0b4042152b558c
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/libganglia1_2.5.7-3.1etch1_arm.deb
Size/MD5 checksum:88620 7eeb57376971a530a8630a31d428f63f
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/libganglia1-dev_2.5.7-3.1etch1_arm.deb
Size/MD5 checksum: 119844 8b79fdc26c8d936ae851e3eae7782644
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/ganglia-monitor_2.5.7-3.1etch1_arm.deb
Size/MD5 checksum: 138300 60bd39e5a8c5591d2c81e450a6b410ad
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/libganglia1_2.5.7-3.1etch1_i386.deb
Size/MD5 checksum:93078 93bcce44d781f9b6338e563f335487a5
http://security.debian.org/pool/updates/main/g/ganglia-monitor-core/gmetad_2.5.7-3.1etch1_i386.deb
Size/MD5 checksum:95864 364689bae05cead30438b1f58ed39254