Bug 96293

Summary:	razor-agents 2.71 addresses two critical issues that affect all versions of razor-agents prior to 2.70.
Product:	Gentoo Security	Reporter:	Richard Soderberg <rsoderberg>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	VERIFIED DUPLICATE
Severity:	critical
Priority:	High
Version:	unspecified
Hardware:	All
OS:	All
Whiteboard:
Package list:		Runtime testing required:	---

Description Richard Soderberg 2005-06-16 10:31:18 UTC

Vipul has released razor-agents 2.71 to address two critical issues in all prior
razor-agents.  One of these issues addresses a bug in the discovery logic, where
a razor-agent that cannot reach the discover server may go into an infinite loop
until discover is available, slowly leaking memory and eventually crashing the
system.

Reproducible: Always
Steps to Reproduce:
1. iptables -I OUTPUT --dport 2703 -j REJECT --reject-with tcp-reset
2. rm ~/.razor/*.lst
3. razor-admin -d -discover

Actual Results:  
razor-agents 2.67 goes into an infinite loop, due to a bug in the Perl code
within bootstrap_discovery when bootstrap_discovery fails.

Expected Results:  
Failed to connect to the discovery server twice and then stopped, as 2.71 does.

The two issues fixed by 2.71 affect all razor-agents 2.67 deployments on all
operating systems, Gentoo included.

Comment 1 Thierry Carrez (RETIRED) gentoo-dev

2005-06-16 11:15:54 UTC


*** This bug has been marked as a duplicate of 95492 ***

Comment 2 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev

2005-06-17 07:56:48 UTC

Not a dupe, handling both issues on bug #95492