Bug 745481

Summary:	CVE-2011-3618 atop: Insecure temporary file use flaw by management of runtime data [epel-5]
Product:	[Fedora] Fedora EPEL	Reporter:	Jan Lieskovsky <jlieskov>
Component:	atop	Assignee:	Gwyn Ciesla <gwync>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	low	Docs Contact:
Priority:	low
Version:	el5	CC:	gilboad, gwync
Target Milestone:	---	Keywords:	Security, SecurityTracking
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	atop-1.26-1.el5.1	Doc Type:	Release Note
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2011-11-18 18:41:01 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	745479

Description Jan Lieskovsky 2011-10-12 13:48:45 UTC

epel-5 tracking bug for atop: see blocks bug list for full details of the security issue(s).

This bug is never intended to be made public, please put any public notes
in the 'blocks' bugs.


[bug automatically created by: add-tracking-bugs]

Comment 1 Fedora Update System 2011-10-12 15:17:48 UTC

atop-1.26-1.el5.1 has been submitted as an update for Fedora EPEL 5.
https://admin.fedoraproject.org/updates/atop-1.26-1.el5.1

Comment 2 Fedora Update System 2011-10-12 21:58:33 UTC

Package atop-1.26-1.el5.1:
* should fix your issue,
* was pushed to the Fedora EPEL 5 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=epel-testing atop-1.26-1.el5.1'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-EPEL-2011-4689
then log in and leave karma (feedback).

Comment 3 Fedora Update System 2011-11-18 18:41:01 UTC

atop-1.26-1.el5.1 has been pushed to the Fedora EPEL 5 stable repository.  If problems still persist, please make note of it in this bug report.