Synopsis

Important: systemtap security update

Type/Severity

Security Advisory: Important

Topic

Updated systemtap packages that fix two security issues are now available
for Red Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

SystemTap is an instrumentation system for systems running the Linux
kernel, version 2.6. Developers can write scripts to collect data on the
operation of the system.

A flaw was found in the SystemTap compile server, stap-server, an optional
component of SystemTap. This server did not adequately sanitize input
provided by the stap-client program, which may allow a remote user to
execute arbitrary shell code with the privileges of the compile server
process, which could possibly be running as the root user. (CVE-2009-4273)

Note: stap-server is not run by default. It must be started by a user or
administrator.

A buffer overflow flaw was found in SystemTap's tapset __get_argv()
function. If a privileged user ran a SystemTap script that called this
function, a local, unprivileged user could, while that script is still
running, trigger this flaw and cause memory corruption by running a command
with a large argument list, which may lead to a system crash or,
potentially, arbitrary code execution with root privileges. (CVE-2010-0411)

Note: SystemTap scripts that call __get_argv(), being a privileged
function, can only be executed by the root user or users in the stapdev
group. As well, if such a script was compiled and installed by root, users
in the stapusr group would also be able to execute it.

SystemTap users should upgrade to these updated packages, which contain
backported patches to correct these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Server - Extended Update Support 5.4 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 5.4 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 5.4 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.4 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.4 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 550172 - CVE-2009-4273 systemtap: remote code execution via stap-server
• BZ - 559719 - CVE-2010-0411 systemtap: Crash with systemtap script using __get_argv()

CVEs

• CVE-2009-4273
• CVE-2010-0411

References

• http://www.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 5

SRPM
systemtap-0.9.7-5.el5_4.3.src.rpm	SHA-256: 312347de96c90da68b9871169ff50bd7d344d8a69d834aafcd48e97a7cf5bfb8
x86_64
systemtap-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 5a30ea3e0b29ebf2318c92f89a26a62fec35591a52acbe20c113598097f7faf0
systemtap-client-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 2272617df2a1db129c4c175890fb54926f3efa2760d0d824c44b081c2e9b51bb
systemtap-initscript-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: dd4a5ecfc099d3bdfcb06a00393db586d42bc385b54c2ab2c2c03f4ff1f11602
systemtap-runtime-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: f155ed499e9b37cbab5e4fb21af4dccb7e9239701925d93d68972c48d6c0e703
systemtap-sdt-devel-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 739e6a501b2a7bfa89078264f8615e0aa0e12c78272659f1300a900db55b7e86
systemtap-sdt-devel-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: e38010c2de04fb133779ef9ade902b6151f4185eed0724833372bde0de04d469
systemtap-server-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: eb61a40e282c5412591e65adc90824558cc48db4390f6419f57e18275987945e
systemtap-testsuite-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 72d0bbfade8b585bcd3ec01b9dd03aae5a84c1cb5c1cafbf91be4ebbaa241838
ia64
systemtap-0.9.7-5.el5_4.3.ia64.rpm	SHA-256: b91205bf7748b93a0dbc09c303979bdfe890c1d0177a2a4119cef4fc9d0edb59
systemtap-client-0.9.7-5.el5_4.3.ia64.rpm	SHA-256: 491d46d2295723b704feed296903a99db9d5dcdf1b5f47c8a90800cc8e18b408
systemtap-initscript-0.9.7-5.el5_4.3.ia64.rpm	SHA-256: efbf36fa469a83b1587d88fd180cafd6f5d3da7f4f964026e7551117501dfd42
systemtap-runtime-0.9.7-5.el5_4.3.ia64.rpm	SHA-256: 6aeb7029bb9a6c8bb370a0f8439864347518b714cd345bc693978f4285cfe154
systemtap-sdt-devel-0.9.7-5.el5_4.3.ia64.rpm	SHA-256: 0269c92d99965a0446857d4058f9aac8f1d9e15f247b692301c99edbf10e932a
systemtap-server-0.9.7-5.el5_4.3.ia64.rpm	SHA-256: d3a1afd793c2ae81822a288bbfdeed6caf6ce2dbc17f2117a77bb274513e5c83
systemtap-testsuite-0.9.7-5.el5_4.3.ia64.rpm	SHA-256: d547a514bdb579017cfd81ecd62abe755cd9e0a7dc44ce80137135d65cf9d0d6
i386
systemtap-0.9.7-5.el5_4.3.i386.rpm	SHA-256: bc2503542a81c304786f11675084fc7cc77c16408adc7d2860ed6bb45c547e11
systemtap-client-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 9cd16184e00dc8e245e5e92afe561242e5ca67d5ef44348767dc3476bcb307a9
systemtap-initscript-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 961934b1669e80c392b716a432e934910b0e72bb25c341a6de7d48f35059c37b
systemtap-runtime-0.9.7-5.el5_4.3.i386.rpm	SHA-256: ad5d80df3c3d83de952a41bd03b2a87a74afa4dc79b6f6af0ff23a0e13144c59
systemtap-sdt-devel-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 739e6a501b2a7bfa89078264f8615e0aa0e12c78272659f1300a900db55b7e86
systemtap-server-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 225e664d853a3753672c2abb6445cd2a77f499d20ab7083fcfc0acf6b5c3170d
systemtap-testsuite-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 9881321d6e158342e71f0023ede5a348d4dad83019a592cc341d239f8306af1c

Red Hat Enterprise Linux Workstation 5

SRPM
systemtap-0.9.7-5.el5_4.3.src.rpm	SHA-256: 312347de96c90da68b9871169ff50bd7d344d8a69d834aafcd48e97a7cf5bfb8
x86_64
systemtap-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 5a30ea3e0b29ebf2318c92f89a26a62fec35591a52acbe20c113598097f7faf0
systemtap-client-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 2272617df2a1db129c4c175890fb54926f3efa2760d0d824c44b081c2e9b51bb
systemtap-initscript-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: dd4a5ecfc099d3bdfcb06a00393db586d42bc385b54c2ab2c2c03f4ff1f11602
systemtap-runtime-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: f155ed499e9b37cbab5e4fb21af4dccb7e9239701925d93d68972c48d6c0e703
systemtap-sdt-devel-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 739e6a501b2a7bfa89078264f8615e0aa0e12c78272659f1300a900db55b7e86
systemtap-sdt-devel-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: e38010c2de04fb133779ef9ade902b6151f4185eed0724833372bde0de04d469
systemtap-server-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: eb61a40e282c5412591e65adc90824558cc48db4390f6419f57e18275987945e
systemtap-testsuite-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 72d0bbfade8b585bcd3ec01b9dd03aae5a84c1cb5c1cafbf91be4ebbaa241838
i386
systemtap-0.9.7-5.el5_4.3.i386.rpm	SHA-256: bc2503542a81c304786f11675084fc7cc77c16408adc7d2860ed6bb45c547e11
systemtap-client-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 9cd16184e00dc8e245e5e92afe561242e5ca67d5ef44348767dc3476bcb307a9
systemtap-initscript-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 961934b1669e80c392b716a432e934910b0e72bb25c341a6de7d48f35059c37b
systemtap-runtime-0.9.7-5.el5_4.3.i386.rpm	SHA-256: ad5d80df3c3d83de952a41bd03b2a87a74afa4dc79b6f6af0ff23a0e13144c59
systemtap-sdt-devel-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 739e6a501b2a7bfa89078264f8615e0aa0e12c78272659f1300a900db55b7e86
systemtap-server-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 225e664d853a3753672c2abb6445cd2a77f499d20ab7083fcfc0acf6b5c3170d
systemtap-testsuite-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 9881321d6e158342e71f0023ede5a348d4dad83019a592cc341d239f8306af1c

Red Hat Enterprise Linux Desktop 5

SRPM
systemtap-0.9.7-5.el5_4.3.src.rpm	SHA-256: 312347de96c90da68b9871169ff50bd7d344d8a69d834aafcd48e97a7cf5bfb8
x86_64
systemtap-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 5a30ea3e0b29ebf2318c92f89a26a62fec35591a52acbe20c113598097f7faf0
systemtap-client-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 2272617df2a1db129c4c175890fb54926f3efa2760d0d824c44b081c2e9b51bb
systemtap-initscript-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: dd4a5ecfc099d3bdfcb06a00393db586d42bc385b54c2ab2c2c03f4ff1f11602
systemtap-runtime-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: f155ed499e9b37cbab5e4fb21af4dccb7e9239701925d93d68972c48d6c0e703
systemtap-sdt-devel-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 739e6a501b2a7bfa89078264f8615e0aa0e12c78272659f1300a900db55b7e86
systemtap-sdt-devel-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: e38010c2de04fb133779ef9ade902b6151f4185eed0724833372bde0de04d469
systemtap-server-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: eb61a40e282c5412591e65adc90824558cc48db4390f6419f57e18275987945e
systemtap-testsuite-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 72d0bbfade8b585bcd3ec01b9dd03aae5a84c1cb5c1cafbf91be4ebbaa241838
i386
systemtap-0.9.7-5.el5_4.3.i386.rpm	SHA-256: bc2503542a81c304786f11675084fc7cc77c16408adc7d2860ed6bb45c547e11
systemtap-client-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 9cd16184e00dc8e245e5e92afe561242e5ca67d5ef44348767dc3476bcb307a9
systemtap-initscript-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 961934b1669e80c392b716a432e934910b0e72bb25c341a6de7d48f35059c37b
systemtap-runtime-0.9.7-5.el5_4.3.i386.rpm	SHA-256: ad5d80df3c3d83de952a41bd03b2a87a74afa4dc79b6f6af0ff23a0e13144c59
systemtap-sdt-devel-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 739e6a501b2a7bfa89078264f8615e0aa0e12c78272659f1300a900db55b7e86
systemtap-server-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 225e664d853a3753672c2abb6445cd2a77f499d20ab7083fcfc0acf6b5c3170d
systemtap-testsuite-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 9881321d6e158342e71f0023ede5a348d4dad83019a592cc341d239f8306af1c

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
systemtap-0.9.7-5.el5_4.3.src.rpm	SHA-256: 312347de96c90da68b9871169ff50bd7d344d8a69d834aafcd48e97a7cf5bfb8
s390x
systemtap-0.9.7-5.el5_4.3.s390x.rpm	SHA-256: 069b9e6b9aa7779c5722f40d437010097b4dd373070787c05c37cb6696d93407
systemtap-client-0.9.7-5.el5_4.3.s390x.rpm	SHA-256: 332338c18d051b735b40e18ab49e752e43cb2b36daed08aea653cd9356512c4b
systemtap-initscript-0.9.7-5.el5_4.3.s390x.rpm	SHA-256: 56776b69f483fac45c053dac9ef71ee78d92e56a31746daa8b249a62839031f4
systemtap-runtime-0.9.7-5.el5_4.3.s390x.rpm	SHA-256: d1d1a1e94a77449ab5a9ef04f712d81ad1232a63a8f72d63487a91ad5f398b89
systemtap-sdt-devel-0.9.7-5.el5_4.3.s390.rpm	SHA-256: 5c65b212cacf558d725277d24d4d80aecf6dcc57c46788b9f659f368c1c4ef97
systemtap-sdt-devel-0.9.7-5.el5_4.3.s390x.rpm	SHA-256: f09012a9cfd97f0deaccbb1b8125d4dd1d712fcdda9276f069997e8b6836bee4
systemtap-server-0.9.7-5.el5_4.3.s390x.rpm	SHA-256: de710d18ceaeb82924616daeeab132040b0d2c3f4da4509adece643df1193437
systemtap-testsuite-0.9.7-5.el5_4.3.s390x.rpm	SHA-256: 9f4f509d357cd526c910d2e29a87beb1e265e0d155a255cabbb9743625d003e1

Red Hat Enterprise Linux for Power, big endian 5

SRPM
systemtap-0.9.7-5.el5_4.3.src.rpm	SHA-256: 312347de96c90da68b9871169ff50bd7d344d8a69d834aafcd48e97a7cf5bfb8
ppc
systemtap-0.9.7-5.el5_4.3.ppc64.rpm	SHA-256: ba46b5df9e77af2482c8f63b32e251df8ff7100cf7f80abe7e56153b74efc19f
systemtap-client-0.9.7-5.el5_4.3.ppc64.rpm	SHA-256: 08b9d7b318ac2cad8ec6713fbcb84c958fd565d693a6e406c7583baebc014ec6
systemtap-initscript-0.9.7-5.el5_4.3.ppc64.rpm	SHA-256: 7eb60a8ca5ebb33030f7646962ce575eebd614c5644f69a5ec8c8cfe71045ba8
systemtap-runtime-0.9.7-5.el5_4.3.ppc64.rpm	SHA-256: e10444984c933127b480df11ee7c8d4827de91f1f2fd53289d52f7f33259f298
systemtap-sdt-devel-0.9.7-5.el5_4.3.ppc64.rpm	SHA-256: d5e21944752d8a73b87acd45a236438573fa7cb2339cc617f87c925f5167a804
systemtap-server-0.9.7-5.el5_4.3.ppc64.rpm	SHA-256: eaf13c056b84e8ff2011964b9ab082afc8f621d7342f5af1d619315f4c8a6ab4
systemtap-testsuite-0.9.7-5.el5_4.3.ppc64.rpm	SHA-256: b9d1bc13e277454259df8f28ce6ed3038f48790e1ddd3aba8d69b6dcdc7877ee

Red Hat Enterprise Linux Server from RHUI 5

SRPM
systemtap-0.9.7-5.el5_4.3.src.rpm	SHA-256: 312347de96c90da68b9871169ff50bd7d344d8a69d834aafcd48e97a7cf5bfb8
x86_64
systemtap-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 5a30ea3e0b29ebf2318c92f89a26a62fec35591a52acbe20c113598097f7faf0
systemtap-client-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 2272617df2a1db129c4c175890fb54926f3efa2760d0d824c44b081c2e9b51bb
systemtap-initscript-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: dd4a5ecfc099d3bdfcb06a00393db586d42bc385b54c2ab2c2c03f4ff1f11602
systemtap-runtime-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: f155ed499e9b37cbab5e4fb21af4dccb7e9239701925d93d68972c48d6c0e703
systemtap-sdt-devel-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 739e6a501b2a7bfa89078264f8615e0aa0e12c78272659f1300a900db55b7e86
systemtap-sdt-devel-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: e38010c2de04fb133779ef9ade902b6151f4185eed0724833372bde0de04d469
systemtap-server-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: eb61a40e282c5412591e65adc90824558cc48db4390f6419f57e18275987945e
systemtap-testsuite-0.9.7-5.el5_4.3.x86_64.rpm	SHA-256: 72d0bbfade8b585bcd3ec01b9dd03aae5a84c1cb5c1cafbf91be4ebbaa241838
i386
systemtap-0.9.7-5.el5_4.3.i386.rpm	SHA-256: bc2503542a81c304786f11675084fc7cc77c16408adc7d2860ed6bb45c547e11
systemtap-client-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 9cd16184e00dc8e245e5e92afe561242e5ca67d5ef44348767dc3476bcb307a9
systemtap-initscript-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 961934b1669e80c392b716a432e934910b0e72bb25c341a6de7d48f35059c37b
systemtap-runtime-0.9.7-5.el5_4.3.i386.rpm	SHA-256: ad5d80df3c3d83de952a41bd03b2a87a74afa4dc79b6f6af0ff23a0e13144c59
systemtap-sdt-devel-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 739e6a501b2a7bfa89078264f8615e0aa0e12c78272659f1300a900db55b7e86
systemtap-server-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 225e664d853a3753672c2abb6445cd2a77f499d20ab7083fcfc0acf6b5c3170d
systemtap-testsuite-0.9.7-5.el5_4.3.i386.rpm	SHA-256: 9881321d6e158342e71f0023ede5a348d4dad83019a592cc341d239f8306af1c