Secunia Security Advisory - Debian has issued an update for inotify-tools. This fixes a vulnerability, which can potentially be exploited by malicious users to compromise an application using the library.
d2fc691b0710d47d55a379e32ebccc02ffccf5b4a9b6f7fa8e56f7032da60f62
----------------------------------------------------------------------
A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.
Download and test it today:
https://psi.secunia.com/
Read more about this new version:
https://psi.secunia.com/?page=changelog
----------------------------------------------------------------------
TITLE:
Debian update for inotify-tools
SECUNIA ADVISORY ID:
SA28221
VERIFY ADVISORY:
http://secunia.com/advisories/28221/
CRITICAL:
Less critical
IMPACT:
DoS, System access
WHERE:
>From remote
OPERATING SYSTEM:
Debian GNU/Linux unstable alias sid
http://secunia.com/product/530/
Debian GNU/Linux 4.0
http://secunia.com/product/13844/
DESCRIPTION:
Debian has issued an update for inotify-tools. This fixes a
vulnerability, which can potentially be exploited by malicious users
to compromise an application using the library.
For more information:
SA26825
SOLUTION:
Apply updated packages.
-- Debian 4.0 (stable) --
Source archives:
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2.dsc
Size/MD5 checksum:624 883ee55627b7becb5a9ca1a2e569281b
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3.orig.tar.gz
Size/MD5 checksum: 369780 204ef6e0b855ec4315f4f13e2d3d1e1a
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2.diff.gz
Size/MD5 checksum: 5311 7bde9f27b0bb470a44d64b40b1e217e1
alpha architecture (DEC Alpha)
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2_alpha.deb
Size/MD5 checksum:51356 81b86adf6ba52bac0c463948cbbe2b49
amd64 architecture (AMD x86_64 (AMD64))
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2_amd64.deb
Size/MD5 checksum:44668 b64ada55dc7a779df25b8aaf69347ef0
arm architecture (ARM)
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2_arm.deb
Size/MD5 checksum:41972 6a7d420d5d00261ad40cc12ada606144
hppa architecture (HP PA RISC)
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2_hppa.deb
Size/MD5 checksum:48782 0f85ebaecd2c1449afc7c31bbf1b1ac5
i386 architecture (Intel ia32)
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2_i386.deb
Size/MD5 checksum:78260 e462da2503c92d98510647fb0c1f44eb
ia64 architecture (Intel ia64)
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2_ia64.deb
Size/MD5 checksum:58450 f3e9432dd2725689a945e85f4c9a6fc3
mips architecture (MIPS (Big Endian))
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2_mips.deb
Size/MD5 checksum:44252 d7166ae065ed439dfee037a20ce2f7eb
mipsel architecture (MIPS (Little Endian))
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2_mipsel.deb
Size/MD5 checksum:43936 903bb81400b5769e787a871634335188
powerpc architecture (PowerPC)
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2_powerpc.deb
Size/MD5 checksum:49284 145b4a75de5c8abaf38390f1f69789e0
s390 architecture (IBM S/390)
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2_s390.deb
Size/MD5 checksum:45262 9346fa472ba657b973fd7c837b94024c
sparc architecture (Sun SPARC/UltraSPARC)
http://security.debian.org/pool/updates/main/i/inotify-tools/inotify-tools_3.3-2_sparc.deb
Size/MD5 checksum:43658 eb008682403c08de1baa65d79f46eaa5
-- Debian GNU/Linux unstable alias sid --
Fixed in version 3.11-1.
ORIGINAL ADVISORY:
http://www.debian.org/security/2007/dsa-1440
OTHER REFERENCES:
SA26825:
http://secunia.com/advisories/26825/
----------------------------------------------------------------------
About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.
Subscribe:
http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/
Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.
----------------------------------------------------------------------