USN-875-1: Red Hat Cluster Suite vulnerabilities

Packages

redhat-cluster -
redhat-cluster-suite -

Details

Multiple insecure temporary file handling vulnerabilities were discovered
in Red Hat Cluster. A local attacker could exploit these to overwrite
arbitrary local files via symlinks. (CVE-2008-4192, CVE-2008-4579,
CVE-2008-4580, CVE-2008-6552)

It was discovered that CMAN did not properly handle malformed configuration
files. An attacker could cause a denial of service (via CPU consumption and
memory corruption) in a node if the attacker were able to modify the
cluster configuration for the node. (CVE-2008-6560)

Multiple insecure temporary file handling vulnerabilities were discovered
in Red Hat Cluster. A local attacker could exploit these to overwrite
arbitrary local files via symlinks. (CVE-2008-4192, CVE-2008-4579,
CVE-2008-4580, CVE-2008-6552)

It was discovered that CMAN did not properly handle malformed configuration
files. An attacker could cause a denial of service (via CPU consumption and
memory corruption) in a node if the attacker were able to modify the
cluster configuration for the node. (CVE-2008-6560)

Update instructions

In general, a standard system upgrade is sufficient to effect the necessary changes.

Learn more about how to get the fixes.

Ubuntu Release	Package Version
8.10 intrepid	gfs2-tools – 2.20080826-0ubuntu1.3
	cman – 2.20080826-0ubuntu1.3
	rgmanager – 2.20080826-0ubuntu1.3
8.04 hardy	gfs2-tools – 2.20080227-0ubuntu1.3
	cman – 2.20080227-0ubuntu1.3
	rgmanager – 2.20080227-0ubuntu1.3
6.06 dapper	libcman1 – 1.20060222-0ubuntu6.3
	ccs – 1.20060222-0ubuntu6.3
	cman – 1.20060222-0ubuntu6.3
	fence – 1.20060222-0ubuntu6.3
	rgmanager – 1.20060222-0ubuntu6.3

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

Packages

Details

Update instructions

Reduce your security exposure

References