RHSA-2011:0841: Moderate: systemtap security update

Published May 31, 2011
·
Updated

SystemTap is an instrumentation system for systems running the Linuxkernel, version 2.6. Developers can write scripts to collect data on theoperation of the system.A divide-by-zero flaw was found in the way SystemTap handled malformeddebugging information in DWARF format. When SystemTap unprivileged mode wasenabled, an unprivileged user in the stapusr group could use this flaw tocrash the system. Additionally, a privileged user (root, or a member of thestapdev group) could trigger this flaw when tricked into instrumenting aspecially-crafted ELF binary, even when unprivileged mode was not enabled.(CVE-2011-1769)SystemTap users should upgrade to these updated packages, which contain abackported patch to correct this issue.

Affected Software

14 affected componentsFixes available
redhat/systemtap<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-client<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-initscript<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-runtime<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-sdt-devel<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-sdt-devel<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-server<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-testsuite<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-client<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-initscript<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-runtime<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-server<1.3-4.el5_6.1
1.3-4.el5_6.1
redhat/systemtap-testsuite<1.3-4.el5_6.1
1.3-4.el5_6.1

Remediation

Event History

May 31, 2011
Advisory Published
12:00 AM

Frequently Asked Questions

1

What is the severity of RHSA-2011:0841?

The severity of RHSA-2011:0841 is classified as moderate.

2

How do I fix RHSA-2011:0841?

To fix RHSA-2011:0841, update the affected SystemTap packages to version 1.3-4.el5_6.1.

3

What systems are affected by RHSA-2011:0841?

RHSA-2011:0841 affects multiple packages related to SystemTap on Red Hat Enterprise Linux version 5.

4

What type of vulnerability is associated with RHSA-2011:0841?

RHSA-2011:0841 is associated with a divide-by-zero flaw in the handling of malformed debugging information.

5

When was RHSA-2011:0841 released?

RHSA-2011:0841 was released on July 7, 2011.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203