RHEL 2.1 : util-linux (RHSA-2004:056)
Medium Nessus Plugin ID 12463
SynopsisThe remote Red Hat host is missing a security update.
DescriptionUpdated util-linux packages that fix an information leak in the login program are now available.
The util-linux package contains a large variety of low-level system utilities that are necessary for a Linux system to function.
In some situations, the login program could use a pointer that had been freed and reallocated. This could cause unintentional data leakage.
Note: Red Hat Enterprise Linux 3 is not vulnerable to this issue.
It is recommended that all users upgrade to these updated packages, which are not vulnerable to this issue.
Red Hat would like to thank Matthew Lee of Fleming College for finding and reporting this issue.
SolutionUpdate the affected util-linux package.