Bug 498980 - cluster product is affected by several symlink attack vulnerabilities
Summary: cluster product is affected by several symlink attack vulnerabilities
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Cluster Suite
Classification: Retired
Component: ccs
Version: 4
Hardware: All
OS: Linux
high
urgent
Target Milestone: ---
Assignee: Jonathan Earl Brassow
QA Contact: Cluster QE
URL:
Whiteboard:
Depends On: 469338
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-05-04 17:02 UTC by Fabio Massimo Di Nitto
Modified: 2016-04-26 22:23 UTC (History)
7 users (show)

Fixed In Version:
Clone Of: 469338
Environment:
Last Closed: 2011-02-16 15:14:49 UTC
Embargoed:

Attachments (Terms of Use)
Patch for rhel4 modeled off the work done for rhel5 - (untested) (888 bytes, patch)
2010-02-09 18:05 UTC, Jonathan Earl Brassow 		no flags Details | Diff
View All


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2011:0265 0 normal SHIPPED_LIVE Low: ccs security update 2011-02-16 15:14:42 UTC

Comment 1 Jonathan Earl Brassow 2010-02-09 18:05:06 UTC 
Created attachment 389818 [details]
Patch for rhel4 modeled off the work done for rhel5 - (untested)

Is this still being considered?  If so, I can compile, test, and check-in.
Comment 6 Lon Hohberger 2010-10-22 19:57:24 UTC 
Patch didn't build; fixed patch here:

http://git.fedorahosted.org/git?p=cluster.git;a=commit;h=d20bd177341a7ee9dc76c17d5db73b5904b07660
Comment 9 errata-xmlrpc 2011-02-16 15:14:49 UTC 
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2011-0265.html
Note You need to log in before you can comment on or make changes to this bug.