MDKSA-2003:047
- Package name
- xfsdump
- Date
- 2003-04-16
- Advisory ID
- MDKSA-2003:047
- Affected versions
- 9.1 i586 , CS2.1 i586 , 9.0 i586 , 8.2 i586 , 9.1 i586 , 8.2 i586
Problem description
A vulnerability was discovered in xfsdump by Ethan Benson related to filesystem quotas on the XFS filesystem. When xfsdump runs xfsdq to save the quota information into a file at the root of the filesystem being dumped, the file is created in an unsafe manner. A new option to xfsdq was added when fixing this vulnerability: '-f path'. This specifies an output file to use instead of the default output stream. If the file exists already, xfsdq will abort and if the file doesn't already exist, it will be created with more appropriate access permissions.
Updated packages
9.1 i586
f125c26a70fff7b65be5ba7ebefbc8fb 9.1/RPMS/libdm0-2.0.5-1.2mdk.i586.rpm 752075a8a8489ee1961fb107ea9e2b25 9.1/RPMS/libdm0-devel-2.0.5-1.2mdk.i586.rpm 6a0820484e07e3f002758d76e59ace68 9.1/RPMS/xfsdump-2.0.3-1.1mdk.i586.rpm b2e1d875fc760138b77cb15716724a49 9.1/SRPMS/dmapi-2.0.5-1.2mdk.src.rpm da0d22ec03d3d6f7b35f2e36c8b1f0e2 9.1/SRPMS/xfsdump-2.0.3-1.1mdk.src.rpm
CS2.1 i586
b97c19f2073ca9a620f2f8820aba28f6 corporate/2.1/RPMS/xfsdump-2.0.3-1.1mdk.i586.rpm da0d22ec03d3d6f7b35f2e36c8b1f0e2 corporate/2.1/SRPMS/xfsdump-2.0.3-1.1mdk.src.rpm
9.0 i586
b97c19f2073ca9a620f2f8820aba28f6 9.0/RPMS/xfsdump-2.0.3-1.1mdk.i586.rpm da0d22ec03d3d6f7b35f2e36c8b1f0e2 9.0/SRPMS/xfsdump-2.0.3-1.1mdk.src.rpm
8.2 i586
73e9c500cd5bbec4f145727725c5c789 8.2/RPMS/xfsdump-2.0.0-2.1mdk.i586.rpm 5ee2db1da3118a3c70c9f7174ca0e552 8.2/SRPMS/xfsdump-2.0.0-2.1mdk.src.rpm
9.1 i586
dd663695c076b47cd234bfa5a82d6b6e ppc/9.1/RPMS/libdm0-2.0.5-1.2mdk.ppc.rpm d660f273f56ddfacae43471f466d42d8 ppc/9.1/RPMS/libdm0-devel-2.0.5-1.2mdk.ppc.rpm f8f7274e7d7c8e8ad6717edcd28a6898 ppc/9.1/RPMS/xfsdump-2.0.3-1.1mdk.ppc.rpm b2e1d875fc760138b77cb15716724a49 ppc/9.1/SRPMS/dmapi-2.0.5-1.2mdk.src.rpm da0d22ec03d3d6f7b35f2e36c8b1f0e2 ppc/9.1/SRPMS/xfsdump-2.0.3-1.1mdk.src.rpm
8.2 i586
499c9f059274ecad092fdcff10dab1db ppc/8.2/RPMS/xfsdump-2.0.0-2.1mdk.ppc.rpm 5ee2db1da3118a3c70c9f7174ca0e552 ppc/8.2/SRPMS/xfsdump-2.0.0-2.1mdk.src.rpm