Issued:
2014-10-14
Updated:
2014-10-14

RHSA-2014:1507 - Security Advisory

Synopsis

Low: trousers security, bug fix, and enhancement update

Type/Severity

Security Advisory: Low

Topic

Updated trousers packages that fix one security issue, several bugs, and
add various enhancements are now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having Low security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

TrouSerS is an implementation of the Trusted Computing Group's Software
Stack (TSS) specification. You can use TrouSerS to write applications that
make use of your TPM hardware. TPM hardware can create, store and use RSA
keys securely (without ever being exposed in memory), verify a platform's
software state using cryptographic hashes and more.

A flaw was found in the way tcsd, the daemon that manages Trusted Computing
resources, processed incoming TCP packets. A remote attacker could send a
specially crafted TCP packet that, when processed by tcsd, could cause the
daemon to crash. Note that by default tcsd accepts requests on localhost
only. (CVE-2012-0698)

Red Hat would like to thank Andrew Lutomirski for reporting this issue.

The trousers package has been upgraded to upstream version 0.3.13, which
provides a number of bug fixes and enhancements over the previous version,
including corrected internal symbol names to avoid collisions with other
applications, fixed memory leaks, added IPv6 support, fixed buffer handling
in tcsd, as well as changed the license to BSD. (BZ#633584, BZ#1074634)

All trousers users are advised to upgrade to these updated packages, which
correct these issues and add these enhancements.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 6 x86_64
  • Red Hat Enterprise Linux Server 6 i386
  • Red Hat Enterprise Linux Workstation 6 x86_64
  • Red Hat Enterprise Linux Workstation 6 i386
  • Red Hat Enterprise Linux Desktop 6 x86_64
  • Red Hat Enterprise Linux Desktop 6 i386
  • Red Hat Enterprise Linux for IBM z Systems 6 s390x
  • Red Hat Enterprise Linux for Power, big endian 6 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 x86_64
  • Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

  • BZ - 781648 - CVE-2012-0698 trousers: DoS vulnerability in tcsd

CVEs

References

Red Hat Enterprise Linux Server 6

SRPM
trousers-0.3.13-2.el6.src.rpm SHA-256: 95d1200b9be453269585c6d65ec9ed72b7f98e79e38fb43f413230c76f0c66fa
x86_64
trousers-0.3.13-2.el6.i686.rpm SHA-256: 3dc9ba5d38170038d03794f9229ea698634f2570dcbc706e98530b2dc6e5eb45
trousers-0.3.13-2.el6.x86_64.rpm SHA-256: 587636addc482aebfa3a80166006cbcf968e0f0f9268b5530abe7f31e47039f7
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.x86_64.rpm SHA-256: ba0afbba0e3572d5aff89988c497cf3af63f628c6df18066cc53777a5e503dcf
trousers-debuginfo-0.3.13-2.el6.x86_64.rpm SHA-256: ba0afbba0e3572d5aff89988c497cf3af63f628c6df18066cc53777a5e503dcf
trousers-devel-0.3.13-2.el6.i686.rpm SHA-256: 3abfad634a9a44e5469314dfe2b1136b3ff56f9304f664cf260292b935c11dae
trousers-devel-0.3.13-2.el6.x86_64.rpm SHA-256: 7de843b53a559cf24701d923698fb1322847c160ce8c8ec5456cdf16ef8764d9
trousers-static-0.3.13-2.el6.x86_64.rpm SHA-256: e6dc4385d81d277230985bab682aa2489a27535ef497b38ff5421073d14354ca
i386
trousers-0.3.13-2.el6.i686.rpm SHA-256: 3dc9ba5d38170038d03794f9229ea698634f2570dcbc706e98530b2dc6e5eb45
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-devel-0.3.13-2.el6.i686.rpm SHA-256: 3abfad634a9a44e5469314dfe2b1136b3ff56f9304f664cf260292b935c11dae
trousers-static-0.3.13-2.el6.i686.rpm SHA-256: 030548f7aaee569d5f4a9bb0aced3df22af24791cc3cf8db5d9da4a2179fae25

Red Hat Enterprise Linux Workstation 6

SRPM
trousers-0.3.13-2.el6.src.rpm SHA-256: 95d1200b9be453269585c6d65ec9ed72b7f98e79e38fb43f413230c76f0c66fa
x86_64
trousers-0.3.13-2.el6.i686.rpm SHA-256: 3dc9ba5d38170038d03794f9229ea698634f2570dcbc706e98530b2dc6e5eb45
trousers-0.3.13-2.el6.x86_64.rpm SHA-256: 587636addc482aebfa3a80166006cbcf968e0f0f9268b5530abe7f31e47039f7
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.x86_64.rpm SHA-256: ba0afbba0e3572d5aff89988c497cf3af63f628c6df18066cc53777a5e503dcf
trousers-debuginfo-0.3.13-2.el6.x86_64.rpm SHA-256: ba0afbba0e3572d5aff89988c497cf3af63f628c6df18066cc53777a5e503dcf
trousers-devel-0.3.13-2.el6.i686.rpm SHA-256: 3abfad634a9a44e5469314dfe2b1136b3ff56f9304f664cf260292b935c11dae
trousers-devel-0.3.13-2.el6.x86_64.rpm SHA-256: 7de843b53a559cf24701d923698fb1322847c160ce8c8ec5456cdf16ef8764d9
trousers-static-0.3.13-2.el6.x86_64.rpm SHA-256: e6dc4385d81d277230985bab682aa2489a27535ef497b38ff5421073d14354ca
i386
trousers-0.3.13-2.el6.i686.rpm SHA-256: 3dc9ba5d38170038d03794f9229ea698634f2570dcbc706e98530b2dc6e5eb45
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-devel-0.3.13-2.el6.i686.rpm SHA-256: 3abfad634a9a44e5469314dfe2b1136b3ff56f9304f664cf260292b935c11dae
trousers-static-0.3.13-2.el6.i686.rpm SHA-256: 030548f7aaee569d5f4a9bb0aced3df22af24791cc3cf8db5d9da4a2179fae25

Red Hat Enterprise Linux Desktop 6

SRPM
trousers-0.3.13-2.el6.src.rpm SHA-256: 95d1200b9be453269585c6d65ec9ed72b7f98e79e38fb43f413230c76f0c66fa
x86_64
trousers-0.3.13-2.el6.i686.rpm SHA-256: 3dc9ba5d38170038d03794f9229ea698634f2570dcbc706e98530b2dc6e5eb45
trousers-0.3.13-2.el6.x86_64.rpm SHA-256: 587636addc482aebfa3a80166006cbcf968e0f0f9268b5530abe7f31e47039f7
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.x86_64.rpm SHA-256: ba0afbba0e3572d5aff89988c497cf3af63f628c6df18066cc53777a5e503dcf
trousers-debuginfo-0.3.13-2.el6.x86_64.rpm SHA-256: ba0afbba0e3572d5aff89988c497cf3af63f628c6df18066cc53777a5e503dcf
trousers-devel-0.3.13-2.el6.i686.rpm SHA-256: 3abfad634a9a44e5469314dfe2b1136b3ff56f9304f664cf260292b935c11dae
trousers-devel-0.3.13-2.el6.x86_64.rpm SHA-256: 7de843b53a559cf24701d923698fb1322847c160ce8c8ec5456cdf16ef8764d9
trousers-static-0.3.13-2.el6.x86_64.rpm SHA-256: e6dc4385d81d277230985bab682aa2489a27535ef497b38ff5421073d14354ca
i386
trousers-0.3.13-2.el6.i686.rpm SHA-256: 3dc9ba5d38170038d03794f9229ea698634f2570dcbc706e98530b2dc6e5eb45
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-devel-0.3.13-2.el6.i686.rpm SHA-256: 3abfad634a9a44e5469314dfe2b1136b3ff56f9304f664cf260292b935c11dae
trousers-static-0.3.13-2.el6.i686.rpm SHA-256: 030548f7aaee569d5f4a9bb0aced3df22af24791cc3cf8db5d9da4a2179fae25

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
trousers-0.3.13-2.el6.src.rpm SHA-256: 95d1200b9be453269585c6d65ec9ed72b7f98e79e38fb43f413230c76f0c66fa
s390x
trousers-0.3.13-2.el6.s390.rpm SHA-256: 2f352a4acfa6fe5c4c1f9c57f03aa1524bb9bd150de7a49ebe3cbe870b4b0c4e
trousers-0.3.13-2.el6.s390x.rpm SHA-256: 71cefd081235fede38cfd183af7fc48df46e0ff0d44d4d63f0b15bd2776c5131
trousers-debuginfo-0.3.13-2.el6.s390.rpm SHA-256: 5a052148dab8559a1157743dd34d86ff69868582022f6544ef90673c9805ea33
trousers-debuginfo-0.3.13-2.el6.s390.rpm SHA-256: 5a052148dab8559a1157743dd34d86ff69868582022f6544ef90673c9805ea33
trousers-debuginfo-0.3.13-2.el6.s390x.rpm SHA-256: 50077c668cafb56c92cbebd8935f9101e2df361f3e88268b513539f15b2d078a
trousers-debuginfo-0.3.13-2.el6.s390x.rpm SHA-256: 50077c668cafb56c92cbebd8935f9101e2df361f3e88268b513539f15b2d078a
trousers-devel-0.3.13-2.el6.s390.rpm SHA-256: d9ef2907c889429bb4a884115b0c2d16d4436e3f8f04078a71f7eed4ea16ae1e
trousers-devel-0.3.13-2.el6.s390x.rpm SHA-256: 0841c8c712b1db247db0e4784bd52fef23b1d04a66c936f0b872d0df6f59c05b
trousers-static-0.3.13-2.el6.s390x.rpm SHA-256: 0d5ddf1944b2f2b60508b60b2b28033c9fcfca2f50085f46a004c3e04f04deba

Red Hat Enterprise Linux for Power, big endian 6

SRPM
trousers-0.3.13-2.el6.src.rpm SHA-256: 95d1200b9be453269585c6d65ec9ed72b7f98e79e38fb43f413230c76f0c66fa
ppc64
trousers-0.3.13-2.el6.ppc.rpm SHA-256: 83b42b7417c941c950fe14e96b96bbcf04767a92c510cfbd038aeba4979d1e42
trousers-0.3.13-2.el6.ppc64.rpm SHA-256: f7d9305a98a84fa96de3a17c59489f30dd3bd73a01a30f98f31b6c2d8b4d7f27
trousers-debuginfo-0.3.13-2.el6.ppc.rpm SHA-256: 677d43e11d4a8ff11c2d1aa9e429509782775a79a3b02bb20c0e3b6f99465738
trousers-debuginfo-0.3.13-2.el6.ppc.rpm SHA-256: 677d43e11d4a8ff11c2d1aa9e429509782775a79a3b02bb20c0e3b6f99465738
trousers-debuginfo-0.3.13-2.el6.ppc64.rpm SHA-256: 3738210df300483b729012c83f286779e7850dd7ede573d2ca58aa06a0b5b7be
trousers-debuginfo-0.3.13-2.el6.ppc64.rpm SHA-256: 3738210df300483b729012c83f286779e7850dd7ede573d2ca58aa06a0b5b7be
trousers-devel-0.3.13-2.el6.ppc.rpm SHA-256: 2afb41b8fe387fceb6f6501016cb684853dbfa944533c14c2a57ef9390a6a101
trousers-devel-0.3.13-2.el6.ppc64.rpm SHA-256: cdb9e9cd24a289f95d505ec566afcbcc60388d4b09d9caa8111dedd46f4984dd
trousers-static-0.3.13-2.el6.ppc64.rpm SHA-256: f801e005b24e4041756d985e1c6fdd3882a13283fbd093fd8e7dbbcb42ba82bf

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
trousers-0.3.13-2.el6.src.rpm SHA-256: 95d1200b9be453269585c6d65ec9ed72b7f98e79e38fb43f413230c76f0c66fa
x86_64
trousers-0.3.13-2.el6.i686.rpm SHA-256: 3dc9ba5d38170038d03794f9229ea698634f2570dcbc706e98530b2dc6e5eb45
trousers-0.3.13-2.el6.x86_64.rpm SHA-256: 587636addc482aebfa3a80166006cbcf968e0f0f9268b5530abe7f31e47039f7
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.x86_64.rpm SHA-256: ba0afbba0e3572d5aff89988c497cf3af63f628c6df18066cc53777a5e503dcf
trousers-debuginfo-0.3.13-2.el6.x86_64.rpm SHA-256: ba0afbba0e3572d5aff89988c497cf3af63f628c6df18066cc53777a5e503dcf
trousers-devel-0.3.13-2.el6.i686.rpm SHA-256: 3abfad634a9a44e5469314dfe2b1136b3ff56f9304f664cf260292b935c11dae
trousers-devel-0.3.13-2.el6.x86_64.rpm SHA-256: 7de843b53a559cf24701d923698fb1322847c160ce8c8ec5456cdf16ef8764d9
trousers-static-0.3.13-2.el6.x86_64.rpm SHA-256: e6dc4385d81d277230985bab682aa2489a27535ef497b38ff5421073d14354ca

Red Hat Enterprise Linux Server from RHUI 6

SRPM
trousers-0.3.13-2.el6.src.rpm SHA-256: 95d1200b9be453269585c6d65ec9ed72b7f98e79e38fb43f413230c76f0c66fa
x86_64
trousers-0.3.13-2.el6.i686.rpm SHA-256: 3dc9ba5d38170038d03794f9229ea698634f2570dcbc706e98530b2dc6e5eb45
trousers-0.3.13-2.el6.x86_64.rpm SHA-256: 587636addc482aebfa3a80166006cbcf968e0f0f9268b5530abe7f31e47039f7
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.x86_64.rpm SHA-256: ba0afbba0e3572d5aff89988c497cf3af63f628c6df18066cc53777a5e503dcf
trousers-debuginfo-0.3.13-2.el6.x86_64.rpm SHA-256: ba0afbba0e3572d5aff89988c497cf3af63f628c6df18066cc53777a5e503dcf
trousers-devel-0.3.13-2.el6.i686.rpm SHA-256: 3abfad634a9a44e5469314dfe2b1136b3ff56f9304f664cf260292b935c11dae
trousers-devel-0.3.13-2.el6.x86_64.rpm SHA-256: 7de843b53a559cf24701d923698fb1322847c160ce8c8ec5456cdf16ef8764d9
trousers-static-0.3.13-2.el6.x86_64.rpm SHA-256: e6dc4385d81d277230985bab682aa2489a27535ef497b38ff5421073d14354ca
i386
trousers-0.3.13-2.el6.i686.rpm SHA-256: 3dc9ba5d38170038d03794f9229ea698634f2570dcbc706e98530b2dc6e5eb45
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-debuginfo-0.3.13-2.el6.i686.rpm SHA-256: 69999cc44f1265ca43506c6f9305459a122e37b7544b58554941093a78701c97
trousers-devel-0.3.13-2.el6.i686.rpm SHA-256: 3abfad634a9a44e5469314dfe2b1136b3ff56f9304f664cf260292b935c11dae
trousers-static-0.3.13-2.el6.i686.rpm SHA-256: 030548f7aaee569d5f4a9bb0aced3df22af24791cc3cf8db5d9da4a2179fae25

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.