Home
Reading
Searching
Subscribe
Sponsors
Statistics
Posting
Contact
Spam
Lists
Links
About
Hosting
Filtering
Features Download
Marketing
Archives
FAQ
Blog
 
Gmane
From: <riehecky-13hema8v3vg <at> public.gmane.org>
Subject: Security ERRATA Low: sos on SL6.x
Newsgroups: gmane.linux.scientific.errata
Date: Thursday 8th December 2011 23:12:20 UTC (over 4 years ago)
Synopsis:    Low: sos security, bug fix, and enhancement update
Issue Date:  2011-12-06
CVE Numbers: CVE-2011-4083


Sos is a set of tools that gather information about system hardware and
configuration.

The sosreport utility incorrectly included aspects of TUV's
Certificate-based
private entitlement keys in the resulting archive of debugging
information. An attacker able to access the archive could use the keys to
access that content available to the host. This issue did not
affect users of the 'Classic' access method. (CVE-2011-4083)

This updated sos package also includes numerous bug fixes and enhancements.


All users of sos are advised to upgrade to this updated package, which
contains backported patches to correct these issues and add these
enhancements.

SL6:
  noarch
     sos-2.2-17.el6.noarch.rpm

- Scientific Linux Development Team
 
CD: 3ms