Date: Mon, 26 Nov 2001 14:09:30 -0700
From: Linux Mandrake Security Team <[email protected]>
To: Linux Mandrake Security Announcements <[email protected]>
Subject: MDKSA-2001:079-2 - kernel updaet
Cc: Linux Mandrake Security <[email protected]>,
Bugtraq <[email protected]>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
________________________________________________________________________
Mandrake Linux Security Update Advisory
________________________________________________________________________
Package name: kernel
Date: November 26th, 2001
Original Advisory Date: October 8th, 2001
Advisory ID: MDKSA-2001:079-2
Affected versions: 8.0, 8.1
________________________________________________________________________
Problem Description:
Alexander Viro discovered a vulnerability in the devfs implementation
that is shipped with Mandrake Linux 8.1. We are aware of the problem
and are currently working on a solution. As a workaround, until an
update becomes available, please boot with the devfs=nomount option.
Rafal Wojtczuk found a vulnerability in the 2.2.19 and 2.4.11 Linux
kernels with the ptrace code and deeply nested symlinks spending an
arbitrary amount of time in the kernel code. The ptrace vulnerability
could be used by local users to gain root privilege, the symlink
vulnerability could result in a local DoS.
There is an additional vulnerability in the kernel's syncookie code
which could potentially allow a remote attacker to guess the cookie
and bypass existing firewall rules. The discovery was found by Manfred
Spraul and Andi Kleen.
Update:
The previous advisory was missing the md5sums for the lm_utils packages.
The md5sums are now included in the package list.
NOTE: This update is *not* meant to be done via MandrakeUpdate! You
must download the necessary RPMs and upgrade manually by following
these steps:
1. Type: rpm -ivh kernel-[version].i586.rpm
2. Type: mv kernel-[version].i586.rpm /tmp
3. Type: rpm -Fvh *.rpm
4a. You may wish to edit /etc/lilo.conf to ensure a new entry is in
place. The new kernel will be the last entry. Change any options
you need to change. You will also want to create a new entry with
the initrd and image directives pointing to the old kernel's
vmlinuz and initrd images so you may also boot from the old
images if required.
4b. PPC users must execute some additional instructions. First edit
/etc/yaboot.conf and add a new entry for the kernel and change
any options that you need to change. You must also create a new
initrd image to enable USB support for keyboards and mice by
typing:
mkinitrd --with=usb-ohci /boot/initrd-2.4.8-31.3mdk 2.4.8-31.3mdk
5a. If you use lilo, type: /sbin/lilo -v
5b. If you use GRUB, type: sh /boot/grub/install.sh
5c. PPC users must type: /sbin/ybin -v
You may then reboot and use the new kernel and remove the older kernel
when you are comfortable using the upgraded one.
________________________________________________________________________
References:
http://www.securityfocus.com/cgi-bin/archive.pl?id=1&mid=221337
________________________________________________________________________
Please verify the update prior to upgrading to ensure the integrity of
the downloaded package. You can do this with the command:
rpm --checksig package.rpm
You can get the GPG public key of the Mandrake Linux Security Team at
http://www.linux-mandrake.com/en/security/RPM-GPG-KEYS
If you use MandrakeUpdate, the verification of md5 checksum and GPG
signature is performed automatically for you.
Mandrake Linux 8.0:
c06d61d09887f1e5ac96688b417d5530 8.0/RPMS/kernel-2.4.8-31.2mdk.i586.rpm
b68609db486f9ad32478a8e8ae3002bb 8.0/RPMS/kernel-doc-2.4.8-31.2mdk.i586.rpm
5d16f8f9d6af21f7454663715ec586c7 8.0/RPMS/kernel-enterprise-2.4.8-31.2mdk.i586.rpm
845e68323ad61919b8702b3352114537 8.0/RPMS/kernel-headers-2.4.8-31.2mdk.i586.rpm
cc08db1a3df3f1ac9f4093246c06e5be 8.0/RPMS/kernel-pcmcia-cs-2.4.8-31.2mdk.i586.rpm
202531142a98174a62249d0d31131d17 8.0/RPMS/kernel-smp-2.4.8-31.2mdk.i586.rpm
8d7bd827e13b1d76f75569e92b8ecd1c 8.0/RPMS/kernel-source-2.4.8-31.2mdk.i586.rpm
607ffc3941607c866ff9f6e60f42bf53 8.0/RPMS/lm_utils-2.4.8_2.6.1-31.2mdk.i586.rpm
3ebe0f4ae72d7f6ff5b0f3ff25f69655 8.0/RPMS/lm_utils-devel-2.4.8_2.6.1-31.2mdk.i586.rpm
5d26269acdd4a9c495c641472a4e3997 8.0/RPMS/iptables-1.2.4-1.2mdk.i586.rpm
cc5f29b474658d4a62c36921ac481994 8.0/RPMS/iptables-ipv6-1.2.4-1.2mdk.i586.rpm
b94a340b5dbd786a064408a0cce86378 8.0/SRPMS/kernel-2.4.8-31.2mdk.src.rpm
0594f5c83b5211a3b7e53e33573cd624 8.0/SRPMS/iptables-1.2.4-1.2mdk.src.rpm
Mandrake Linux 8.0 (PPC):
0aa32aede5b608d28b6d9fbaa4c63cc6 ppc/8.0/RPMS/kernel-2.4.8-31.3mdk.ppc.rpm
f149d44938b761469cc2e7cb3941ba35 ppc/8.0/RPMS/kernel-doc-2.4.8-31.3mdk.ppc.rpm
1e6a534996f0607691017558d29e4d25 ppc/8.0/RPMS/kernel-headers-2.4.8-31.3mdk.ppc.rpm
de3d61cd0fc4607b4d0d06218c038abd ppc/8.0/RPMS/kernel-pcmcia-cs-2.4.8-31.3mdk.ppc.rpm
497d1605e64307f3a59a59950cf859d4 ppc/8.0/RPMS/kernel-smp-2.4.8-31.3mdk.ppc.rpm
b89aeb776055a44482e30f0b517b0a3a ppc/8.0/RPMS/kernel-source-2.4.8-31.3mdk.ppc.rpm
53be1ce66a9df2220862a76c17bd1ff6 ppc/8.0/RPMS/lm_utils-2.4.8_2.6.1-31.3mdk.ppc.rpm
a810db84d3778ceb24e609f5c1bca2fa ppc/8.0/RPMS/lm_utils-devel-2.4.8_2.6.1-31.3mdk.ppc.rpm
5f56bcb641218c4400b557856c9803a5 ppc/8.0/RPMS/iptables-1.2.4-1.2mdk.ppc.rpm
bdec7f857adc7714ba94f3a8c33892e4 ppc/8.0/RPMS/iptables-ipv6-1.2.4-1.2mdk.ppc.rpm
239f261222d20e7ba02a22dbc688083b ppc/8.0/RPMS/mol-kmods-0.9.60-1.1mdk.ppc.rpm
955de0bd16773e32dc05d0a924d9af8d ppc/8.0/SRPMS/kernel-2.4.8-31.3mdk.src.rpm
0594f5c83b5211a3b7e53e33573cd624 ppc/8.0/SRPMS/iptables-1.2.4-1.2mdk.src.rpm
c347a001bc50800b063b0bcc4042baf9 ppc/8.0/SRPMS/mol-kmods-0.9.60-1.1mdk.src.rpm
Mandrake Linux 8.1:
ac948f0f05c237828b9be37f294192f9 8.1/RPMS/kernel-2.4.8-34.1mdk.i586.rpm
456abd9dd5678c2e01ec35ebf2401a39 8.1/RPMS/kernel-doc-2.4.8-34.1mdk.i586.rpm
2e96d98445e0b89d64295a79839ef27c 8.1/RPMS/kernel-enterprise-2.4.8-34.1mdk.i586.rpm
0aa5966f6d53af5e1473e6bf1b891403 8.1/RPMS/kernel-headers-2.4.8-34.1mdk.i586.rpm
429325fb8bc48392ea182d6f2e0f2849 8.1/RPMS/kernel-pcmcia-cs-2.4.8-34.1mdk.i586.rpm
f0cfd6472b15f22b1820b948a3c78537 8.1/RPMS/kernel-smp-2.4.8-34.1mdk.i586.rpm
9564cb8602d480dc035b7e5919af7fe6 8.1/RPMS/kernel-source-2.4.8-34.1mdk.i586.rpm
9b88486f7b65aeafe00e97f6ad599554 8.1/RPMS/lm_utils-2.4.8_2.6.1-34.1mdk.i586.rpm
f44bf22b543e4f01ac452c0af16ffe27 8.1/RPMS/lm_utils-devel-2.4.8_2.6.1-34.1mdk.i586.rpm
6196af50631c01ad75224ad224509b2d 8.1/RPMS/iptables-1.2.4-1.1mdk.i586.rpm
e374e4488342312a8deaa28e2d8796ac 8.1/RPMS/iptables-ipv6-1.2.4-1.1mdk.i586.rpm
12f133a9760bce2c7fb06939c2afd180 8.1/SRPMS/kernel-2.4.8-34.1mdk.src.rpm
24bdff60d2a6fadc8abe2a47619590d8 8.1/SRPMS/iptables-1.2.4-1.1mdk.src.rpm
________________________________________________________________________
Bug IDs fixed (see https://qa.mandrakesoft.com for more information):
________________________________________________________________________
To upgrade automatically, use MandrakeUpdate.
If you want to upgrade manually, download the updated package from one
of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm".
You can download the updates directly from one of the mirror sites
listed at:
http://www.linux-mandrake.com/en/ftp.php3.
Updated packages are available in the "updates/[ver]/RPMS/" directory.
For example, if you are looking for an updated RPM package for
Mandrake Linux 8.0, look for it in "updates/8.0/RPMS/". Updated source
RPMs are available as well, but you generally do not need to download
them.
Please be aware that sometimes it takes the mirrors a few hours to
update.
You can view other security advisories for Mandrake Linux at:
http://www.linux-mandrake.com/en/security/
If you want to report vulnerabilities, please contact
[email protected]
________________________________________________________________________
Mandrake Linux has two security-related mailing list services that
anyone can subscribe to:
[email protected]
Mandrake Linux's security announcements mailing list. Only
announcements are sent to this list and it is read-only.
[email protected]
Mandrake Linux's security discussion mailing list. This list is open
to anyone to discuss Mandrake Linux security specifically and Linux
security in general.
To subscribe to either list, send a message to
[email protected]
with "subscribe [listname]" in the body of the message.
To remove yourself from either list, send a message to
[email protected]
with "unsubscribe [listname]" in the body of the message.
To get more information on either list, send a message to
[email protected]
with "info [listname]" in the body of the message.
Optionally, you can use the web interface to subscribe to or unsubscribe
from either list:
http://www.linux-mandrake.com/en/flists.php3#security
________________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team
<[email protected]>
- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.0.5 (GNU/Linux)
Comment: For info see http://www.gnupg.org
mQGiBDlp594RBAC2tDozI3ZgQsE7XwxurJCJrX0L5vx7SDByR5GHDdWekGhdiday
L4nfUax+SeR9SCoCgTgPW1xB8vtQc8/sinJlMjp9197a2iKM0FOcPlkpa3HcOdt7
WKJqQhlMrHvRcsivzcgqjH44GBBJIT6sygUF8k0lU6YnMHj5MPc/NGWt8wCg9vKo
P0l5QVAFSsHtqcU9W8cc7wMEAJzQsAlnvPXDBfBLEH6u7ptWFdp0GvbSuG2wRaPl
hynHvRiE01ZvwbJZXsPsKm1z7uVoW+NknKLunWKB5axrNXDHxCYJBzY3jTeFjsqx
PFZkIEAQphLTkeXXelAjQ5u9tEshPswEtMvJvUgNiAfbzHfPYmq8D6x5xOw1IySg
2e/LBACxr2UJYCCB2BZ3p508mAB0RpuLGukq+7UWiOizy+kSskIBg2O7sQkVY/Cs
iyGEo4XvXqZFMY39RBdfm2GY+WB/5NFiTOYJRKjfprP6K1YbtsmctsX8dG+foKsD
LLFs7OuVfaydLQYp1iiN6D+LJDSMPM8/LCWzZsgr9EKJ8NXiyrQ6TGludXggTWFu
ZHJha2UgU2VjdXJpdHkgVGVhbSA8c2VjdXJpdHlAbGludXgtbWFuZHJha2UuY29t
PohWBBMRAgAWBQI5aefeBAsKBAMDFQMCAxYCAQIXgAAKCRCaqNDQIkWKmK6LAKCy
/NInDsaMSI+WHwrquwC5PZrcnQCeI+v3gUDsNfQfiKBvQSANu1hdulqIRgQQEQIA
BgUCOtNVGQAKCRBZ5w3um0pAJJWQAKDUoL5He+mKbfrMaTuyU5lmRyJ0fwCgoFAP
WdvQlu/kFjphF740XeOwtOqIRgQQEQIABgUCOu8A6QAKCRBynDnb9lq3CnpjAJ4w
Pk0SEE9U4r40IxWpwLU+wrWVugCdFfSPllPpZRCiaC7HwbFcfExRmPa5AQ0EOWnn
7xAEAOQlTVY4TiNo5V/iP0J1xnqjqlqZsU7yEBKo/gZz6/+hx75RURe1ebiJ9F77
9FQbpJ9Epz1KLSXvq974rnVb813zuGdmgFyk+ryA/rTR2RQ8h+EoNkwmATzRxBXV
Jb57fFQjxOu4eNjZAtfII/YXb0uyXXrdr5dlJ/3eXrcO4p0XAAMFBACCxo6Z269s
+A4v8C6Ui12aarOQcCDlV8cVG9LkyatU3FNTlnasqwo6EkaP572448weJWwN6SCX
Vl+xOYLiK0hL/6Jb/O9Agw75yUVdk+RMM2I4fNEi+y4hmfMh2siBv8yEkEvZjTcl
3TpkTfzYky85tu433wmKaLFOv0WjBFSikohGBBgRAgAGBQI5aefvAAoJEJqo0NAi
RYqYid0AoJgeWzXrEdIClBOSW5Q6FzqJJyaqAKC0Y9YI3UFlE4zSIGjcFlLJEJGX
lA==
=0ahQ
- -----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE8Ao+mmqjQ0CJFipgRAtm7AKCLp197CZXvB+7NGo68/jSZ+xurHQCeIsi0
8XyfmFbVxC2tobzrpxPbjUs=
=Wvmi
-----END PGP SIGNATURE-----
