Debians sikkerhedsbulletin

DSA-2133-1 collectd -- lammelsesangreb

Rapporteret den:

13. dec 2010

Berørte pakker:

collectd

Sårbar:

Referencer i sikkerhedsdatabaser:

I Debians fejlsporingssystem: Fejl 605092.
I Mitres CVE-ordbog: CVE-2010-4336.

Yderligere oplysninger:

Man opdagede at collectd, en statistikopsamlings- og overvågningsdæmon, var sårbar over for et lammelsesangreb (denial of service) via en fabrikeret netværkspakke.

I den stabile distribution (lenny), er dette problem rettet i version 4.4.2-3+lenny1.

I distributionen testing (squeeze), er dette problem rettet i version 4.10.1-1+squeeze2.

I den ustabile distribution (sid), er dette problem rettet i version 4.10.1-2.1.

Denne bulletin indeholder kun pakker til arkitekturerne alpha, amd64, arm, armel, hppa, i386, ia64, mips, powerpc, s390 og sparc. Pakker til arkitekturen mipsel vil snart blive frigivet.

Vi anbefaler at du opgraderer dine collectd-pakker.

Rettet i:

Debian GNU/Linux 5.0 (lenny)

Kildekode:: http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1.dsc
Size/MD5 checksum: 1742 7eb809863e35c70e5da831ef83e5935b; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2.orig.tar.gz
Size/MD5 checksum: 1220408 dbffe35a2d19840e86253c7052485ff0; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1.diff.gz
Size/MD5 checksum: 38096 6e0579c82d00a84da53d06eba261a157
Arkitekturuafhængig komponent:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dev_4.4.2-3+lenny1_all.deb
Size/MD5 checksum: 58100 6ab2decfb0f6d4822bd399f83acde4bf
Alpha:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_alpha.deb
Size/MD5 checksum: 476094 3ba6081a7bda823e51deb57e670681a6; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_alpha.deb
Size/MD5 checksum: 465310 512bcae97e48588f6f8e3c06b71b4a05
AMD64:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_amd64.deb
Size/MD5 checksum: 496366 90685a47da1745e9bbc8dba2979cfe64; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_amd64.deb
Size/MD5 checksum: 443120 1ab233f04323751ced0078715dd82071
ARM:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_arm.deb
Size/MD5 checksum: 466518 399a912918db34f2986fb5338081b261; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_arm.deb
Size/MD5 checksum: 425430 21cd791ba65567b6998188efe1b9d9c3
ARM EABI:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_armel.deb
Size/MD5 checksum: 469682 8054cff25dc257476d2a533b6058ee93; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_armel.deb
Size/MD5 checksum: 439244 f53bd8054c6c27b08e39b2aef5aaab61
HP Precision:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_hppa.deb
Size/MD5 checksum: 462784 cf54ada8a3af6e42c06b0900dbeb90e7; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_hppa.deb
Size/MD5 checksum: 465640 5d2b68b4a158e7ff513227dec30cdd16
Intel IA-32:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_i386.deb
Size/MD5 checksum: 464516 2a7655f9aa1b3a4c7621cf78bd374efc; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_i386.deb
Size/MD5 checksum: 423402 a4d5e2884269a67f3e97751dd71c27fd
Intel IA-64:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_ia64.deb
Size/MD5 checksum: 480124 44fcf702d45fcf3eabb96d61472dcb55; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_ia64.deb
Size/MD5 checksum: 546484 5775d3d87c1f2f565e4b638d935bea7c
Big-endian MIPS:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_mips.deb
Size/MD5 checksum: 480898 0809b6c3bdb6571ce7a8f2e4a3d26522; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_mips.deb
Size/MD5 checksum: 432446 0d96311abc84ea9d52633410cf9bc9ac
PowerPC:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_powerpc.deb
Size/MD5 checksum: 530484 c566c5caa95ebf68637cbf22ebb09d55; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_powerpc.deb
Size/MD5 checksum: 528826 9465884478ae3b9d01e917c6a83c4f11
IBM S/390:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_s390.deb
Size/MD5 checksum: 467426 19128d66e83d38e13dc393741218a7b2; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_s390.deb
Size/MD5 checksum: 446950 01f36f15ede792ce1c6840b8e058ef9d
Sun Sparc:: http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_sparc.deb
Size/MD5 checksum: 433938 5e577a4403d2318faac96709179bf47e; http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_sparc.deb
Size/MD5 checksum: 428472 7661dd06cf7c90130dd706cf21bacf3d

MD5-kontrolsummer for de listede filer findes i den originale sikkerhedsbulletin.