-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2010.1129
                New collectd packages fix denial of service
                             14 December 2010

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           collectd
Publisher:         Debian
Operating System:  Debian GNU/Linux 5
                   UNIX variants (UNIX, Linux, OSX)
Impact/Access:     Denial of Service -- Remote/Unauthenticated
Resolution:        Patch/Upgrade
CVE Names:         CVE-2010-4336  

Original Bulletin: 
   http://www.debian.org/security/2010/dsa-2133

Comment: This advisory references vulnerabilities in products which run on 
         platforms other than Debian. It is recommended that administrators 
         running collectd check for an updated version of the software for 
         their operating system.

- --------------------------BEGIN INCLUDED TEXT--------------------

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- - ------------------------------------------------------------------------
Debian Security Advisory DSA-2133-1                  security@debian.org
http://www.debian.org/security/                         Raphael Geissert
December 13, 2010                     http://www.debian.org/security/faq
- - ------------------------------------------------------------------------

Package        : collectd
Vulnerability  : denial of service
Problem type   : remote
Debian-specific: no
CVE Id         : CVE-2010-4336
Debian Bug     : 605092


It was discovered that collectd, a statistics collection and monitoring
daemon, is prone to a denial of service attach via a crafted network
packet.


For the stable distribution (lenny), this problem has been fixed in
version 4.4.2-3+lenny1.

For the testing distribution (squeeze), this problem has been fixed in
version 4.10.1-1+squeeze2.

For the unstable distribution (sid), this problem has been fixed in
version 4.10.1-2.1.


This advisory only contains the packages for the alpha, amd64, arm,
armel, hppa, i386, ia64, mips, powerpc, s390 and sparc architectures.
The packages for the mipsel architecture will be released soon.

We recommend that you upgrade your collectd packages.

Upgrade instructions
- - --------------------

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
        will update the internal database
apt-get upgrade
        will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 5.0 alias lenny (stable)
- - ------------------------------------------

Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, powerpc, s390 and sparc.

Source archives:

  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1.dsc
    Size/MD5 checksum: 1742  7eb809863e35c70e5da831ef83e5935b
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2.orig.tar.gz
    Size/MD5 checksum: 1220408  dbffe35a2d19840e86253c7052485ff0
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1.diff.gz
    Size/MD5 checksum: 38096  6e0579c82d00a84da53d06eba261a157

Architecture independent packages:

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dev_4.4.2-3+lenny1_all.deb
    Size/MD5 checksum: 58100  6ab2decfb0f6d4822bd399f83acde4bf

alpha architecture (DEC Alpha)

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_alpha.deb
    Size/MD5 checksum: 476094  3ba6081a7bda823e51deb57e670681a6
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_alpha.deb
    Size/MD5 checksum: 465310  512bcae97e48588f6f8e3c06b71b4a05

amd64 architecture (AMD x86_64 (AMD64))

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_amd64.deb
    Size/MD5 checksum: 496366  90685a47da1745e9bbc8dba2979cfe64
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_amd64.deb
    Size/MD5 checksum: 443120  1ab233f04323751ced0078715dd82071

arm architecture (ARM)

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_arm.deb
    Size/MD5 checksum: 466518  399a912918db34f2986fb5338081b261
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_arm.deb
    Size/MD5 checksum: 425430  21cd791ba65567b6998188efe1b9d9c3

armel architecture (ARM EABI)

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_armel.deb
    Size/MD5 checksum: 469682  8054cff25dc257476d2a533b6058ee93
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_armel.deb
    Size/MD5 checksum: 439244  f53bd8054c6c27b08e39b2aef5aaab61

hppa architecture (HP PA RISC)

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_hppa.deb
    Size/MD5 checksum: 462784  cf54ada8a3af6e42c06b0900dbeb90e7
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_hppa.deb
    Size/MD5 checksum: 465640  5d2b68b4a158e7ff513227dec30cdd16

i386 architecture (Intel ia32)

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_i386.deb
    Size/MD5 checksum: 464516  2a7655f9aa1b3a4c7621cf78bd374efc
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_i386.deb
    Size/MD5 checksum: 423402  a4d5e2884269a67f3e97751dd71c27fd

ia64 architecture (Intel ia64)

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_ia64.deb
    Size/MD5 checksum: 480124  44fcf702d45fcf3eabb96d61472dcb55
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_ia64.deb
    Size/MD5 checksum: 546484  5775d3d87c1f2f565e4b638d935bea7c

mips architecture (MIPS (Big Endian))

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_mips.deb
    Size/MD5 checksum: 480898  0809b6c3bdb6571ce7a8f2e4a3d26522
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_mips.deb
    Size/MD5 checksum: 432446  0d96311abc84ea9d52633410cf9bc9ac

powerpc architecture (PowerPC)

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_powerpc.deb
    Size/MD5 checksum: 530484  c566c5caa95ebf68637cbf22ebb09d55
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_powerpc.deb
    Size/MD5 checksum: 528826  9465884478ae3b9d01e917c6a83c4f11

s390 architecture (IBM S/390)

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_s390.deb
    Size/MD5 checksum: 467426  19128d66e83d38e13dc393741218a7b2
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_s390.deb
    Size/MD5 checksum: 446950  01f36f15ede792ce1c6840b8e058ef9d

sparc architecture (Sun SPARC/UltraSPARC)

  http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_sparc.deb
    Size/MD5 checksum: 433938  5e577a4403d2318faac96709179bf47e
  http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_sparc.deb
    Size/MD5 checksum: 428472  7661dd06cf7c90130dd706cf21bacf3d


  These files will probably be moved into the stable distribution on
  its next update.

- - ---------------------------------------------------------------------------------
For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: debian-security-announce@lists.debian.org
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEARECAAYFAk0GxcoACgkQYy49rUbZzlpAlgCZAZSgQrZaMNsBFhFRrPzBqFJW
kRYAn2cf3DxQhdKPMaSSW3URL7t67wlw
=wjgy
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iD8DBQFNBurU/iFOrG6YcBERAhrbAJ0VCd6cOWDliYgk5ib/qPngYk/R4gCguCYV
7W0CjOjiLgJUeDX7zMBeyQU=
=uKYW
-----END PGP SIGNATURE-----