Date: Mon, 18 Nov 2002 14:40:37 +0100
From: (Trustix Secure Linux Advisor) <[email protected]>
To: [email protected]Subject: TSLSA-2002-0077 - kernel
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --------------------------------------------------------------------------
Trustix Secure Linux Security Advisory #2002-0077
Package name: kernel
Summary: local DoS
Date: 2002-11-15
Affected versions: TSL 1.1, 1.2, 1.5
- --------------------------------------------------------------------------
Package description:
The kernel package contains the Linux kernel (vmlinuz), the core of your
Trustix Secure Linux operating system. The kernel handles the basic
functions of the operating system: memory allocation, process allocation,
device input and output, etc.
Problem description:
As reported on Bugtraq, any local user could cause the kernel to lock
solid.
In addition, this update adds the aacraid driver.
Action:
We recommend that all systems with this package installed be upgraded.
Location:
All TSL updates are available from
<URI:http://www.trustix.net/pub/Trustix/updates/>;
<URI:ftp://ftp.trustix.net/pub/Trustix/updates/>;
About Trustix Secure Linux:
Trustix Secure Linux is a small Linux distribution for servers. With focus on
security and stability, the system is painlessly kept safe and up to date
from day one using swup, the automated software updater.
Automatic updates:
Users of the SWUP tool can enjoy having updates automatically
installed using 'swup --upgrade'.
Get SWUP from:
<URI:ftp://ftp.trustix.net/pub/Trustix/software/swup/>;
Public testing:
These packages have been available for public testing for some time.
If you want to contribute by testing the various packages in the
testing tree, please feel free to share your findings on the
tsl-discuss mailinglist.
The testing tree is located at
<URI:http://www.trustix.net/pub/Trustix/testing/>;
<URI:ftp://ftp.trustix.net/pub/Trustix/testing/>;
Questions?
Check out our mailing lists:
<URI:http://www.trustix.net/support/>;
Verification:
This advisory along with all TSL packages are signed with the TSL sign key.
This key is available from:
<URI:http://www.trustix.net/TSL-GPG-KEY>;
The advisory itself is available from the errata pages at
<URI:http://www.trustix.net/errata/trustix-1.2/>; and
<URI:http://www.trustix.net/errata/trustix-1.5/>;
or directly at
<URI:http://www.trustix.net/errata/misc/2002/TSL-2002-0077-kernel.asc.txt>;
MD5sums of the packages:
- --------------------------------------------------------------------------
3cafd4b8397a9d444964a17757b2f134 ./1.1/RPMS/kernel-2.2.22-6tr.i586.rpm
fae3bc075be59859c26733794552c878 ./1.1/RPMS/kernel-BOOT-2.2.22-6tr.i586.rpm
2ffdb57751a7361f75773810d2c70240 ./1.1/RPMS/kernel-doc-2.2.22-6tr.i586.rpm
60c14be0b1ae9a3f6f4f8bf4d72e48c6 ./1.1/RPMS/kernel-headers-2.2.22-6tr.i586.rpm
10da9ee1fe295a2575a42a058a570a39 ./1.1/RPMS/kernel-smp-2.2.22-6tr.i586.rpm
0887a7898d97f5332900dc86842c898a ./1.1/RPMS/kernel-source-2.2.22-6tr.i586.rpm
0755588bcc28392bec62fd94ef509e33 ./1.1/RPMS/kernel-utils-2.2.22-6tr.i586.rpm
f93a2f872341d21a8e37c8a70947e791 ./1.1/SRPMS/kernel-2.2.22-6tr.src.rpm
a708f419da8a2bb9009ae0c669e27d6c ./1.2/RPMS/kernel-2.2.22-6tr.i586.rpm
3c7dafd9f55cba6158f824a238c13b83 ./1.2/RPMS/kernel-BOOT-2.2.22-6tr.i586.rpm
9bb57463220c577c19c4124da7c2efd7 ./1.2/RPMS/kernel-doc-2.2.22-6tr.i586.rpm
6a33c91c1d36651728b4686209c2d512 ./1.2/RPMS/kernel-headers-2.2.22-6tr.i586.rpm
f8d97d308760e2e342d521788b8fa498 ./1.2/RPMS/kernel-smp-2.2.22-6tr.i586.rpm
3b3b8f0706fd9b3424ebedb62f52eb90 ./1.2/RPMS/kernel-source-2.2.22-6tr.i586.rpm
14ffb3e5f6191bfb0936b521d06ff604 ./1.2/RPMS/kernel-utils-2.2.22-6tr.i586.rpm
f93a2f872341d21a8e37c8a70947e791 ./1.2/SRPMS/kernel-2.2.22-6tr.src.rpm
4155e0b348aa56b386ff0f48a7ff57bb ./1.5/RPMS/kernel-2.2.22-6tr.i586.rpm
df5e6f9906b88cd4a14f88b47ef3392d ./1.5/RPMS/kernel-BOOT-2.2.22-6tr.i586.rpm
45f603e41135ed444ad9cc5613ef2311 ./1.5/RPMS/kernel-doc-2.2.22-6tr.i586.rpm
7565dd60b09ccc700271770545938517 ./1.5/RPMS/kernel-headers-2.2.22-6tr.i586.rpm
cb08fd349e6471a51eee8fb0773a9250 ./1.5/RPMS/kernel-smp-2.2.22-6tr.i586.rpm
cf1117568d2c9490bddb7e9a40a2b10c ./1.5/RPMS/kernel-source-2.2.22-6tr.i586.rpm
a661c87d6299e36877b621cb4895a406 ./1.5/RPMS/kernel-utils-2.2.22-6tr.i586.rpm
f93a2f872341d21a8e37c8a70947e791 ./1.5/SRPMS/kernel-2.2.22-6tr.src.rpm
- --------------------------------------------------------------------------
Trustix Security Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE92NuQwRTcg4BxxS0RAmhpAJsFvY4EB4V1z4AzWVw2GYUgYnqaywCbBNB2
PHlV7ynV5cTAPzDuIE32HC8=
=dc+l
-----END PGP SIGNATURE-----
