Skip to navigation

Security Advisory Moderate: libgtop2 security update

Advisory: RHSA-2007:0765-3
Type: Security Advisory
Severity: Moderate
Issued on: 2007-08-07
Last updated on: 2007-08-07
Affected Products: Red Hat Desktop (v. 4)
Red Hat Enterprise Linux AS (v. 4)
Red Hat Enterprise Linux AS (v. 4.5.z)
Red Hat Enterprise Linux ES (v. 4)
Red Hat Enterprise Linux ES (v. 4.5.z)
Red Hat Enterprise Linux WS (v. 4)
CVEs (cve.mitre.org): CVE-2007-0235

Details

An updated libgtop2 package that fixes a security issue and a functionality
bug is now available for Red Hat Enterprise Linux 4.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

The libgtop2 package contains a library for obtaining information about a
running system, such as cpu, memory and disk usage; active processes; and
PIDs.

A flaw was found in the way libgtop2 handled long filenames mapped
into the address space of a process. An attacker could execute arbitrary
code on behalf of the user running gnome-system-monitor by executing a
process and mapping a file with a specially crafted name into the
processes' address space. (CVE-2007-0235)

This update also fixes the following bug:

* when a version of libgtop2 compiled to run on a 32-bit architecture was
used to inspect a process running in 64-bit mode, it failed to report
certain information regarding address space mapping correctly.

All users of gnome-system-monitor are advised to upgrade to this updated
libgtop2 package, which contains backported patches that resolve these issues.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Updated packages

Red Hat Desktop (v. 4)

SRPMS:
libgtop2-2.8.0-1.0.2.src.rpm     MD5: 425c076a5c6159543fcfbc20b6fc9ac5
 
IA-32:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-devel-2.8.0-1.0.2.i386.rpm     MD5: 927a64489da48b73ea77de3f1edceae9
 
x86_64:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-2.8.0-1.0.2.x86_64.rpm     MD5: 00f38cfe4a283753806b330b42b89920
libgtop2-devel-2.8.0-1.0.2.x86_64.rpm     MD5: 3fa1bfa0abb082308d18a4e52e79f564
 
Red Hat Enterprise Linux AS (v. 4)

SRPMS:
libgtop2-2.8.0-1.0.2.src.rpm     MD5: 425c076a5c6159543fcfbc20b6fc9ac5
 
IA-32:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-devel-2.8.0-1.0.2.i386.rpm     MD5: 927a64489da48b73ea77de3f1edceae9
 
IA-64:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-2.8.0-1.0.2.ia64.rpm     MD5: 5b264d5218d336cd65ba94587f84ac9b
libgtop2-devel-2.8.0-1.0.2.ia64.rpm     MD5: 48c3900aa97a2b7ccc3e2ddb2ca2b873
 
PPC:
libgtop2-2.8.0-1.0.2.ppc.rpm     MD5: 52a4b97e907f6e6a090c1bd244d8e991
libgtop2-2.8.0-1.0.2.ppc64.rpm     MD5: 4a873066f7b56e010d70dfd0909842db
libgtop2-devel-2.8.0-1.0.2.ppc.rpm     MD5: 06bb7c0c7cfaaa0a853d678239c6e156
 
s390:
libgtop2-2.8.0-1.0.2.s390.rpm     MD5: 005d556948bc9d94f470a1ff94484261
libgtop2-devel-2.8.0-1.0.2.s390.rpm     MD5: 1e307e77ebd76463fd59a5c654d41b88
 
s390x:
libgtop2-2.8.0-1.0.2.s390.rpm     MD5: 005d556948bc9d94f470a1ff94484261
libgtop2-2.8.0-1.0.2.s390x.rpm     MD5: ad0bb6cc96630b89b32a37b1969aa7dc
libgtop2-devel-2.8.0-1.0.2.s390x.rpm     MD5: e80a1b3e4242255180db0c3347118d7a
 
x86_64:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-2.8.0-1.0.2.x86_64.rpm     MD5: 00f38cfe4a283753806b330b42b89920
libgtop2-devel-2.8.0-1.0.2.x86_64.rpm     MD5: 3fa1bfa0abb082308d18a4e52e79f564
 
Red Hat Enterprise Linux AS (v. 4.5.z)

SRPMS:
libgtop2-2.8.0-1.0.2.src.rpm     MD5: 425c076a5c6159543fcfbc20b6fc9ac5
 
IA-32:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-devel-2.8.0-1.0.2.i386.rpm     MD5: 927a64489da48b73ea77de3f1edceae9
 
IA-64:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-2.8.0-1.0.2.ia64.rpm     MD5: 5b264d5218d336cd65ba94587f84ac9b
libgtop2-devel-2.8.0-1.0.2.ia64.rpm     MD5: 48c3900aa97a2b7ccc3e2ddb2ca2b873
 
PPC:
libgtop2-2.8.0-1.0.2.ppc.rpm     MD5: 52a4b97e907f6e6a090c1bd244d8e991
libgtop2-2.8.0-1.0.2.ppc64.rpm     MD5: 4a873066f7b56e010d70dfd0909842db
libgtop2-devel-2.8.0-1.0.2.ppc.rpm     MD5: 06bb7c0c7cfaaa0a853d678239c6e156
 
s390:
libgtop2-2.8.0-1.0.2.s390.rpm     MD5: 005d556948bc9d94f470a1ff94484261
libgtop2-devel-2.8.0-1.0.2.s390.rpm     MD5: 1e307e77ebd76463fd59a5c654d41b88
 
s390x:
libgtop2-2.8.0-1.0.2.s390.rpm     MD5: 005d556948bc9d94f470a1ff94484261
libgtop2-2.8.0-1.0.2.s390x.rpm     MD5: ad0bb6cc96630b89b32a37b1969aa7dc
libgtop2-devel-2.8.0-1.0.2.s390x.rpm     MD5: e80a1b3e4242255180db0c3347118d7a
 
x86_64:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-2.8.0-1.0.2.x86_64.rpm     MD5: 00f38cfe4a283753806b330b42b89920
libgtop2-devel-2.8.0-1.0.2.x86_64.rpm     MD5: 3fa1bfa0abb082308d18a4e52e79f564
 
Red Hat Enterprise Linux ES (v. 4)

SRPMS:
libgtop2-2.8.0-1.0.2.src.rpm     MD5: 425c076a5c6159543fcfbc20b6fc9ac5
 
IA-32:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-devel-2.8.0-1.0.2.i386.rpm     MD5: 927a64489da48b73ea77de3f1edceae9
 
IA-64:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-2.8.0-1.0.2.ia64.rpm     MD5: 5b264d5218d336cd65ba94587f84ac9b
libgtop2-devel-2.8.0-1.0.2.ia64.rpm     MD5: 48c3900aa97a2b7ccc3e2ddb2ca2b873
 
x86_64:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-2.8.0-1.0.2.x86_64.rpm     MD5: 00f38cfe4a283753806b330b42b89920
libgtop2-devel-2.8.0-1.0.2.x86_64.rpm     MD5: 3fa1bfa0abb082308d18a4e52e79f564
 
Red Hat Enterprise Linux ES (v. 4.5.z)

SRPMS:
libgtop2-2.8.0-1.0.2.src.rpm     MD5: 425c076a5c6159543fcfbc20b6fc9ac5
 
IA-32:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-devel-2.8.0-1.0.2.i386.rpm     MD5: 927a64489da48b73ea77de3f1edceae9
 
IA-64:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-2.8.0-1.0.2.ia64.rpm     MD5: 5b264d5218d336cd65ba94587f84ac9b
libgtop2-devel-2.8.0-1.0.2.ia64.rpm     MD5: 48c3900aa97a2b7ccc3e2ddb2ca2b873
 
x86_64:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-2.8.0-1.0.2.x86_64.rpm     MD5: 00f38cfe4a283753806b330b42b89920
libgtop2-devel-2.8.0-1.0.2.x86_64.rpm     MD5: 3fa1bfa0abb082308d18a4e52e79f564
 
Red Hat Enterprise Linux WS (v. 4)

SRPMS:
libgtop2-2.8.0-1.0.2.src.rpm     MD5: 425c076a5c6159543fcfbc20b6fc9ac5
 
IA-32:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-devel-2.8.0-1.0.2.i386.rpm     MD5: 927a64489da48b73ea77de3f1edceae9
 
IA-64:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-2.8.0-1.0.2.ia64.rpm     MD5: 5b264d5218d336cd65ba94587f84ac9b
libgtop2-devel-2.8.0-1.0.2.ia64.rpm     MD5: 48c3900aa97a2b7ccc3e2ddb2ca2b873
 
x86_64:
libgtop2-2.8.0-1.0.2.i386.rpm     MD5: e13f014a83e4f9a4c1aab65b9b26dd49
libgtop2-2.8.0-1.0.2.x86_64.rpm     MD5: 00f38cfe4a283753806b330b42b89920
libgtop2-devel-2.8.0-1.0.2.x86_64.rpm     MD5: 3fa1bfa0abb082308d18a4e52e79f564
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

208265 - LTC27411-bad PROC_MAPS_FORMAT in libgtop2-devel
249884 - CVE-2007-0235 Stack overflow libgtop when pathname of mmap()-ed file is too long


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/