Synopsis

Low: mcstrans security and bug fix update

Type/Severity

Security Advisory: Low

Topic

An updated mcstrans package that fixes a security issue and a bug is now
available.

This update has been rated as having low security impact by the Red Hat
Security Response Team.

Description

mcstrans is the translation daemon used on SELinux machines to translate
program context into human readable form.

An algorithmic complexity weakness was found in the way the mcstrans daemon
handled ranges of compartments in sensitivity labels. A local user could
trigger this flaw causing mctransd to temporarily stop responding to other
requests; a partial denial of service. (CVE-2007-4570)

This update also fixes a problem where the mcstrans daemon was preventing
SSH connections into an SELinux box, that was running a Multi-Level
Security (MLS) Policy with multiple categories.

Users of mcstrans are advised to upgrade to this updated package, which
resolves this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 228398 - LSPP: Not able to ssh into the machine with multiple categories
• BZ - 288201 - CVE-2007-4570 mctransd DoS

CVEs

• CVE-2007-4570

References

• http://www.redhat.com/security/updates/classification/#low

Red Hat Enterprise Linux Server 5

SRPM
mcstrans-0.2.6-1.el5.src.rpm	SHA-256: 8ac4ad1afcb0de510bd18daa09bc34176945b6bf8b94a908a0474542863906b9
x86_64
mcstrans-0.2.6-1.el5.x86_64.rpm	SHA-256: 4efc5381d4f803476f11dc7f1f687a009fad7dd4715de5efcc510c367d76833b
ia64
mcstrans-0.2.6-1.el5.ia64.rpm	SHA-256: 19b9be5bd9ae858bb4240c7e34545ea90df9526e1529d2ed2154f1ec4592f509
i386
mcstrans-0.2.6-1.el5.i386.rpm	SHA-256: 04f8d1779c0198c0b7f254ac8b800d83fc168f13df354cd7c89e7f928e8396ba

Red Hat Enterprise Linux Workstation 5

SRPM
mcstrans-0.2.6-1.el5.src.rpm	SHA-256: 8ac4ad1afcb0de510bd18daa09bc34176945b6bf8b94a908a0474542863906b9
x86_64
mcstrans-0.2.6-1.el5.x86_64.rpm	SHA-256: 4efc5381d4f803476f11dc7f1f687a009fad7dd4715de5efcc510c367d76833b
i386
mcstrans-0.2.6-1.el5.i386.rpm	SHA-256: 04f8d1779c0198c0b7f254ac8b800d83fc168f13df354cd7c89e7f928e8396ba

Red Hat Enterprise Linux Desktop 5

SRPM
mcstrans-0.2.6-1.el5.src.rpm	SHA-256: 8ac4ad1afcb0de510bd18daa09bc34176945b6bf8b94a908a0474542863906b9
x86_64
mcstrans-0.2.6-1.el5.x86_64.rpm	SHA-256: 4efc5381d4f803476f11dc7f1f687a009fad7dd4715de5efcc510c367d76833b
i386
mcstrans-0.2.6-1.el5.i386.rpm	SHA-256: 04f8d1779c0198c0b7f254ac8b800d83fc168f13df354cd7c89e7f928e8396ba

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
mcstrans-0.2.6-1.el5.src.rpm	SHA-256: 8ac4ad1afcb0de510bd18daa09bc34176945b6bf8b94a908a0474542863906b9
s390x
mcstrans-0.2.6-1.el5.s390x.rpm	SHA-256: 9816c10d180507153036c5b1f06905634cf32023d021b9f9f7a6dce995ce64ed

Red Hat Enterprise Linux for Power, big endian 5

SRPM
mcstrans-0.2.6-1.el5.src.rpm	SHA-256: 8ac4ad1afcb0de510bd18daa09bc34176945b6bf8b94a908a0474542863906b9
ppc
mcstrans-0.2.6-1.el5.ppc.rpm	SHA-256: 31e601d1651d8c3a1870259d7b09c2561e1edda159c94b05f57231c998ce4c7f

Red Hat Enterprise Linux Server from RHUI 5

SRPM
mcstrans-0.2.6-1.el5.src.rpm	SHA-256: 8ac4ad1afcb0de510bd18daa09bc34176945b6bf8b94a908a0474542863906b9
x86_64
mcstrans-0.2.6-1.el5.x86_64.rpm	SHA-256: 4efc5381d4f803476f11dc7f1f687a009fad7dd4715de5efcc510c367d76833b
i386
mcstrans-0.2.6-1.el5.i386.rpm	SHA-256: 04f8d1779c0198c0b7f254ac8b800d83fc168f13df354cd7c89e7f928e8396ba