Debian DSA-3426-2 : ctdb - security update

high Nessus Plugin ID 87509

Synopsis

The remote Debian host is missing a security-related update.

Description

The update for linux issued as DSA-3426-1 and DSA-3434-1 to address CVE-2015-8543 uncovered a bug in ctdb, a clustered database to store temporary data, leading to broken clusters. Updated packages are now available to address this problem.

Solution

Upgrade the ctdb packages.

For the oldstable distribution (wheezy), this problem has been fixed in version 1.12+git20120201-5.

For the stable distribution (jessie), this problem has been fixed in version 2.5.4+debian0-4+deb8u1.

See Also

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=813406

https://security-tracker.debian.org/tracker/CVE-2015-8543

https://packages.debian.org/source/wheezy/ctdb

https://packages.debian.org/source/jessie/ctdb

https://www.debian.org/security/2016/dsa-3426

Plugin Details

Severity: High

ID: 87509

File Name: debian_DSA-3426.nasl

Version: 2.9

Type: local

Agent: unix

Published: 12/21/2015

Updated: 1/11/2021

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus

Vulnerability Information

CPE: p-cpe:/a:debian:debian_linux:ctdb, cpe:/o:debian:debian_linux:8.0, cpe:/o:debian:debian_linux:7.0

Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

Patch Publication Date: 3/3/2016

Reference Information

DSA: 3426