Skip to navigation

Security Advisory dump security update

Advisory: RHSA-2005:583-09
Type: Security Advisory
Severity: Low
Issued on: 2005-08-03
Last updated on: 2005-08-03
Affected Products: Red Hat Enterprise Linux AS (v. 2.1)
Red Hat Enterprise Linux ES (v. 2.1)
Red Hat Enterprise Linux WS (v. 2.1)
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor
CVEs (cve.mitre.org): CVE-2002-1914

Details

Updated dump packages that address two security issues are now available
for Red Hat Enterprise Linux 2.1.

This update has been rated as having low security impact by the Red Hat
Security Response Team.

Dump examines files in a file system, determines which ones need to be
backed up, and copies those files to a specified disk, tape, or other
storage medium.

A flaw was found with dump file locking. A malicious local user could
manipulate the file lock in such a way as to prevent dump from running.
The Common Vulnerabilities and Exposures project (cve.mitre.org) assigned
the name CAN-2002-1914 to this issue.

Users of dump should upgrade to these erratum packages, which contain a
patch to resolve this issue.


Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Updated packages

Red Hat Enterprise Linux AS (v. 2.1)

SRPMS:
dump-0.4b25-1.72.2.src.rpm
File outdated by:  RHBA-2007:0039
    MD5: a2105338ff2279973bcec74ea8dd96dd
 
IA-32:
dump-0.4b25-1.72.2.i386.rpm
File outdated by:  RHBA-2007:0039
    MD5: b14ad2aef495fd52b2bfa8501147a86c
rmt-0.4b25-1.72.2.i386.rpm
File outdated by:  RHBA-2007:0039
    MD5: 1d658c6130d9b317456b56b6e21acd42
 
IA-64:
dump-0.4b25-1.72.2.ia64.rpm
File outdated by:  RHBA-2007:0039
    MD5: ace0b517d6b4d26fdfc40744368053cd
rmt-0.4b25-1.72.2.ia64.rpm
File outdated by:  RHBA-2007:0039
    MD5: f6ed788f99e81abdde859cbb4dabe1fb
 
Red Hat Enterprise Linux ES (v. 2.1)

SRPMS:
dump-0.4b25-1.72.2.src.rpm
File outdated by:  RHBA-2007:0039
    MD5: a2105338ff2279973bcec74ea8dd96dd
 
IA-32:
dump-0.4b25-1.72.2.i386.rpm
File outdated by:  RHBA-2007:0039
    MD5: b14ad2aef495fd52b2bfa8501147a86c
rmt-0.4b25-1.72.2.i386.rpm
File outdated by:  RHBA-2007:0039
    MD5: 1d658c6130d9b317456b56b6e21acd42
 
Red Hat Enterprise Linux WS (v. 2.1)

SRPMS:
dump-0.4b25-1.72.2.src.rpm
File outdated by:  RHBA-2007:0039
    MD5: a2105338ff2279973bcec74ea8dd96dd
 
IA-32:
dump-0.4b25-1.72.2.i386.rpm
File outdated by:  RHBA-2007:0039
    MD5: b14ad2aef495fd52b2bfa8501147a86c
rmt-0.4b25-1.72.2.i386.rpm
File outdated by:  RHBA-2007:0039
    MD5: 1d658c6130d9b317456b56b6e21acd42
 
Red Hat Linux Advanced Workstation 2.1 for the Itanium Processor

SRPMS:
dump-0.4b25-1.72.2.src.rpm
File outdated by:  RHBA-2007:0039
    MD5: a2105338ff2279973bcec74ea8dd96dd
 
IA-64:
dump-0.4b25-1.72.2.ia64.rpm
File outdated by:  RHBA-2007:0039
    MD5: ace0b517d6b4d26fdfc40744368053cd
rmt-0.4b25-1.72.2.ia64.rpm
File outdated by:  RHBA-2007:0039
    MD5: f6ed788f99e81abdde859cbb4dabe1fb
 

Bugs fixed (see bugzilla for more information)

162903 - CAN-2002-1914 dump denial of service


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/