Red Hat安全公告
主题： syslogd中存在的拒绝服务问题
关键字: syslogd sysklogd stream socket
主题:
在系统日志进程syslogd中存在拒绝服务问题。
受影响的版本:
Red Hat Linux 4.x, all architectures
Red Hat Linux 5.x, all architectures
Red Hat Linux 6.0, all architectures
Red Hat Linux 6.1不受此影响
问题描述:
syslog进程缺省使用 unix domain stream sockets来接收本地日志连接。在日志
进程中打开很大数目的连接将会使系统停止响应。
解决办法:
用如下命令安装:
rpm -Uvh
在Red Hat Linux 4.2 for the Intel and Sparc中需要升级libc才能使升级后的
sysklogd正常使用。
注意：在不使用标准C library syslog(3)接口的程序中，升级这些sysklogd将会
消弱日志记录能力。
补丁包:
Red Hat Linux 4.x:
Intel:
ftp://updates.redhat.com/4.2/i386/sysklogd-1.3.31-0.5.i386.rpm
ftp://updates.redhat.com/4.2/i386/libc-5.3.12-18.5.i386.rpm
ftp://updates.redhat.com/4.2/i386/libc-debug-5.3.12-18.5.i386.rpm
ftp://updates.redhat.com/4.2/i386/libc-deve l-5.3.12-18.5.i386.rpm
ftp://updates.redhat.com/4.2/i386/libc-profile-5.3.12-18.5.i386.rpm
ftp://updates.redhat.com/4.2/i386/libc-static-5.3.12-18.5.i386.rpm
Alpha:
ftp://updates.redhat.com/4.2/alpha/sysklogd-1.3.31-0.5.alpha.rpm
Sparc:
ftp://updates.redhat.com/4.2/sparc/sysklogd-1.3.31-0.5.sparc.rpm
ftp://updates.redhat.com/4.2/sparc/libc-5.3.12-18.5.sparc.rpm
ftp://updates.redhat.com/4.2/sparc/libc-debug-5.3.12-18.5.sparc.rpm
ftp://updates.redhat.com/4.2/sparc/libc-devel-5.3.12-18.5.sparc.rpm
ftp://updates.redhat.com/4.2/sparc/libc-profile-5.3.12-18.5.sparc.rpm
ftp://updates.redhat.com/4.2/sparc/libc-static-5.3.12-18.5.sparc.rpm
Source packages:
ftp://updates.redhat.com/4.2/SRPMS/sysklogd-1.3.31-0.5.src.rpm
ftp://updates.redhat.com/4.2/SRPMS/libc-5.3.12-18.5.src.rpm
Red Hat Linux 5.x:
Intel:
ftp://updates.redhat.com/5.2/i386/sysklogd-1.3.31-1.5.i386.rpm
Alpha:
ftp://updates.redhat.com/5.2/alpha/sysklogd-1.3.31-1.5.alpha.rpm
Sparc:
ftp://upda tes.redhat.com/5.2/sparc/sysklogd-1.3.31-1.5.sparc.rpm
Source packages:
ftp://updates.redhat.com/5.2/SRPMS/sysklogd-1.3.31-1.5.src.rpm
Red Hat Linux 6.0:
Intel:
ftp://updates.redhat.com/6.0/i386/sysklogd-1.3.31-14.i386.rpm
Alpha:
ftp://updates.redhat.com/6.0/alpha/sysklogd-1.3.31-14.alpha.rpm
Sparc:
ftp://updates.redhat.com/6.0/sparc/sysklogd-1.3.31-14.sparc.rpm
Source packages:
ftp://updates.redhat.com/6.0/SRPMS/sysklogd-1.3.31-14.src.rpm
Red Hat Linux 6.1:
Intel:
ftp://updates.redhat.com/6.1/i386/sysklogd-1.3.31-14.i386.rpm
Source packages:
ftp://updates.redhat.com/6.1/SRPMS/sysklogd-1.3.31-14.src.rpm
验证:
MD5 sum Package Name
----------------------------------------------------------------------
----
378d0be4ef864e9106fe46349cb366b9 i386/sysklogd-1.3.31-0.5.i386.rpm
801c745d3e920d29fdea2f5be07d25b3 i386/libc-5.3.12-18.5.i386.rpm
1d5ba779311e222a824895e0a6b34516 i386/libc-debug-5.3.12-18.5.i386.rpm
bacf136ee00f323fcf0a8db95b5ab231 i386 /libc-devel-5.3.12-18.5.i386.rpm
a25eb15726a1c216b3bdf9ab1b2d670c i386/libc-profile-5.3.12-18.5.i386.rp
m
62bc3f2df09cdc0abd4138b51894b6a7 i386/libc-static-5.3.12-18.5.i386.rpm
bafdc46464b2ae72739630c14e2eeb5a alpha/sysklogd-1.3.31-0.5.alpha.rpm
f34994e1cd262f01dc5c11681a31855e sparc/sysklogd-1.3.31-0.5.sparc.rpm
7130a7c76581cde28790638e6696d522 sparc/libc-5.3.12-18.5.sparc.rpm
f81bae231d268bd1a1a703f13fb4c140 sparc/libc-debug-5.3.12-18.5.sparc.rp
m
0938e6fb074dd0769542037194ccb031 sparc/libc-devel-5.3.12-18.5.sparc.rp
m
bceef7f99adc7b198f743eacd770db5b sparc/libc-profile-5.3.12-18.5.sparc.
rpm
ef2d6ecb52d6ef30fac839e3a0c4e7d0 sparc/libc-static-5.3.12-18.5.sparc.r
pm
d371c2f33b29034be986b95f3acf457f SRPMS/sysklogd-1.3.31-0.5.src.rpm
1c210bd05b6de76ee8ac8d6c40c3d1d9 SRPMS/libc-5.3.12-18.5.src.rpm
1cd398b77471d5a90c2ce64487c32be4 i386/sysklogd-1.3.31-1.5.i386.rpm
2564ea2b333d6c26024f8edefb49f295 alpha/sysklogd-1.3.31-1.5.alpha.rpm
5561ccefc3e499dba6b5eae181dde217 sparc/s ysklogd-1.3.31-1.5.sparc.rpm
508762e8fd7e97c5c50372eb27eaa19c SRPMS/sysklogd-1.3.31-1.5.src.rpm
8e59b61b8b1a9356ea675d7234b801d8 i386/sysklogd-1.3.31-14.i386.rpm
d906f40e4084ac82afe9b5a2686a167d alpha/sysklogd-1.3.31-14.alpha.rpm
5ec7b94032e4c3a911099d7547e0742d sparc/sysklogd-1.3.31-14.sparc.rpm
55cc22adb6b3272ef23763e89309af24 SRPMS/sysklogd-1.3.31-14.src.rpm
8e59b61b8b1a9356ea675d7234b801d8 i386/sysklogd-1.3.31-14.i386.rpm
55cc22adb6b3272ef23763e89309af24 SRPMS/sysklogd-1.3.31-14.src.rpm
These packages are GPG signed by Red Hat, Inc. for security. Our key
is available at:
http://www.redhat.com/corp/contact.html
用如下命令验证:
rpm --checksig
If you only wish to verify that each package has not been corrupted or
tampered with, examine only the md5sum with the following command:
rpm --checksig --nogpg
--
欢迎大家常来回合策略 宗教信仰坐坐。
欢迎光临魔法师学院http://wwwmagic.126.com
* * * * *
无挂碍故无有恐怖
--DOS--
※ 来源:．网易虚拟社区北京站 http://bj.netease.com．[FROM: 202.106.245.25]
|
|