Author: JT Smith
LinuxSecurity.com: A vulnerablity in the 2.2.19 and 2.4.11 Linux kernels could be used by local users to gain root privilages and could result in a local DoS.
________________________________________________________________________
Mandrake Linux Security Update Advisory
________________________________________________________________________
Package name: kernel22
Date: November 20th, 2001
Original Advisory Date: October 26th, 2001
Advisory ID: MDKSA-2001:082-1
Affected versions: 7.1, 7.2, 8.0, 8.1, Corporate Server 1.0.1,
Single Network Firewall 7.2
________________________________________________________________________
Problem Description:
Rafal Wojtczuk found a vulnerability in the 2.2.19 and 2.4.11 Linux
kernels with the ptrace code and deeply nested symlinks spending an
arbitrary amount of time in the kernel code. The ptrace vulnerability
could be used by local users to gain root privilege, the symlink
vulnerability could result in a local DoS.
Update:
There is an additional vulnerability in the kernel's syncookie code
which could potentially allow a remote attacker to guess the cookie
and bypass existing firewall rules. The discovery was found by Manfred
Spraul and Andi Kleen.
NOTE: This update is *not* meant to be done via MandrakeUpdate! You
must download the necessary RPMs and upgrade manually by following
these steps:
1. Type: rpm -ivh kernel-[version].i586.rpm
2. Type: mv kernel-[version].i586.rpm /tmp
3. Type: rpm -Fvh *.rpm
4a. You may wish to edit /etc/lilo.conf to ensure a new entry is in
place. The new kernel will be the last entry. Change any options
you need to change. You will also want to create a new entry with
the initrd and image directives pointing to the old kernel's
vmlinuz and initrd images so you may also boot from the old
images if required.
4b. PPC users must execute some additional instructions. First edit
/etc/yaboot.conf and add a new entry for the kernel and change
any options that you need to change. You must also create a new
initrd image to enable USB support for keyboards and mice by
typing:
mkinitrd --with=usb-ohci /boot/initrd-2.2.19-20.1mdk 2.2.19-20.1mdk
5a. If you use lilo, type: /sbin/lilo -v
5b. If you use GRUB, type: sh /boot/grub/install.sh
5c. PPC users must type: /sbin/ybin -v
You may then reboot and use the new kernel and remove the older kernel
when you are comfortable using the upgraded one.
________________________________________________________________________
References:
http://www.securityfocus.com/cgi-bin/archive.pl?id=1&mid=221337
________________________________________________________________________
Please verify the update prior to upgrading to ensure the integrity of
the downloaded package. You can do this with the command:
rpm --checksig package.rpm
You can get the GPG public key of the Mandrake Linux Security Team at
http://www.linux-mandrake.com/en/security/RPM-GPG-KEYS
If you use MandrakeUpdate, the verification of md5 checksum and GPG
signature is performed automatically for you.
Linux-Mandrake 7.1:
7e650c33ccde99f5b363b61f8d804925 7.1/RPMS/alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
5a8a686a2c173b5a93739f1d40b25af8 7.1/RPMS/alsa-source-2.2.19_0.5.10b-6.3mdk.i586.rpm
ccb0385a7979cb5417ab24a71810ca5c 7.1/RPMS/kernel-2.2.19-6.3mdk.i586.rpm
48deff36ef6d3a0a9f347444fe67ebae 7.1/RPMS/kernel-doc-2.2.19-6.3mdk.i586.rpm
e38bf6850677df3028dfe9c29d731a5e 7.1/RPMS/kernel-headers-2.2.19-6.3mdk.i586.rpm
25365c277d604eebd765eb6eef9034d6 7.1/RPMS/kernel-linus-2.2.20-1.1mdk.i586.rpm
a079098328d93377cfc77bbfd0fa5b41 7.1/RPMS/kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
12fb5d22fe388f1e3ae98a12946ac2e9 7.1/RPMS/kernel-secure-2.2.19-6.3mdk.i586.rpm
c80182d30b738ce231c14b685653b648 7.1/RPMS/kernel-smp-2.2.19-6.3mdk.i586.rpm
50a01ee4ee671ba81b5a5595e6ff30a5 7.1/RPMS/kernel-source-2.2.19-6.3mdk.i586.rpm
b1b2bbe9bd2efab067f084d05b480f3c 7.1/RPMS/kernel-utils-2.2.19-6.3mdk.i586.rpm
35273dc0d85060d4d43d0dffff3367e5 7.1/RPMS/reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
89b0010d325af6c0ddb435bb1a0b186b 7.1/SRPMS/kernel-2.2.19-6.3mdk.src.rpm
a83661eb60ad027e07e56249f40632b0 7.1/SRPMS/kernel-linus-2.2.20-1.1mdk.src.rpm
Linux-Mandrake 7.2:
cd9ff8472b32e9ce0830c73a0aecd2de 7.2/RPMS/alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
3e8c073ca85907bbb3afb2e1f3163210 7.2/RPMS/alsa-source-2.2.19_0.5.10b-6.3mdk.i586.rpm
8937ec19b78e6060dfb5d70fd52119fb 7.2/RPMS/kernel-2.2.19-6.3mdk.i586.rpm
721c0ff12e0912d5ee4a1db51f333e4c 7.2/RPMS/kernel-doc-2.2.19-6.3mdk.i586.rpm
7d545e7921db6879ffa2e69eb5ad03d8 7.2/RPMS/kernel-headers-2.2.19-6.3mdk.i586.rpm
918f656a5929a8ed596fad2c75e0e862 7.2/RPMS/kernel-linus-2.2.20-1.1mdk.i586.rpm
154ed43baabafcc43dccb4acb4603a01 7.2/RPMS/kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
4f897474c98abbb4527bc87f8a5a4a1c 7.2/RPMS/kernel-secure-2.2.19-6.3mdk.i586.rpm
d26791b7ed55fa4d15df3cd875925f00 7.2/RPMS/kernel-smp-2.2.19-6.3mdk.i586.rpm
ed55c53e22493c20e87db3dd609c5ba9 7.2/RPMS/kernel-source-2.2.19-6.3mdk.i586.rpm
387126682af922f1b8a67f8396bbe9d6 7.2/RPMS/kernel-utils-2.2.19-6.3mdk.i586.rpm
05d52ad1e52279797f27d7446732e0ea 7.2/RPMS/reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
89b0010d325af6c0ddb435bb1a0b186b 7.2/SRPMS/kernel-2.2.19-6.3mdk.src.rpm
a83661eb60ad027e07e56249f40632b0 7.2/SRPMS/kernel-linus-2.2.20-1.1mdk.src.rpm
Mandrake Linux 8.0:
0ed0a37ff3ce8c62628cd77db324bcde 8.0/RPMS/kernel-linus2.2-2.2.20-1.1mdk.i586.rpm
cc147d2b191a07b1666a2efc81ecdbe4 8.0/RPMS/kernel22-2.2.19-20.1mdk.i586.rpm
dbf5f98a59160ca4cf61ff7b4b57ca3e 8.0/RPMS/kernel22-secure-2.2.19-20.1mdk.i586.rpm
fb209416d7b6ebfcd1efa26f8b3ab369 8.0/RPMS/kernel22-smp-2.2.19-20.1mdk.i586.rpm
e243eabd5f5ebb514332052da5272032 8.0/RPMS/kernel22-source-2.2.19-20.1mdk.i586.rpm
cef69adaebdd65d433189d6a0193ba99 8.0/SRPMS/kernel-linus2.2-2.2.20-1.1mdk.src.rpm
526e2b6f1548d1539d3479582b6c8b87 8.0/SRPMS/kernel22-2.2.19-20.1mdk.src.rpm
Mandrake Linux 8.0 (PPC):
767dbbc36d5a6b7311923d9391166016 ppc/8.0/RPMS/kernel22-2.2.19-20.1mdk.ppc.rpm
d5bdf324f86c19198d257f373942ad8c ppc/8.0/RPMS/kernel22-secure-2.2.19-20.1mdk.ppc.rpm
e9630cabe3d16c4a8e6fbcf6d073c89b ppc/8.0/RPMS/kernel22-smp-2.2.19-20.1mdk.ppc.rpm
ae3b4e8322e4200e97c5a06217fa4d29 ppc/8.0/RPMS/kernel22-source-2.2.19-20.1mdk.ppc.rpm
526e2b6f1548d1539d3479582b6c8b87 ppc/8.0/SRPMS/kernel22-2.2.19-20.1mdk.src.rpm
Mandrake Linux 8.1:
7caa63f9a302fd15d24e4be65544885a 8.1/RPMS/kernel-linus2.2-2.2.20-1.1mdk.i586.rpm
0599738b69f92d83eb34a0f441823f25 8.1/RPMS/kernel22-2.2.19-20.1mdk.i586.rpm
243a809d39cc229ea2befc1dd70d3205 8.1/RPMS/kernel22-secure-2.2.19-20.1mdk.i586.rpm
fd112bdbb8a1441c97986e59ab0f5f19 8.1/RPMS/kernel22-smp-2.2.19-20.1mdk.i586.rpm
ab755bcde2b50f83ed0fe402808c104c 8.1/RPMS/kernel22-source-2.2.19-20.1mdk.i586.rpm
cef69adaebdd65d433189d6a0193ba99 8.1/SRPMS/kernel-linus2.2-2.2.20-1.1mdk.src.rpm
526e2b6f1548d1539d3479582b6c8b87 8.1/SRPMS/kernel22-2.2.19-20.1mdk.src.rpm
Corporate Server 1.0.1:
c3e90e324254308ddc15435294694bcb 1.0.1/RPMS/alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
14fc90f92fea89b129a31cafc865e591 1.0.1/RPMS/alsa-source-2.2.19_0.5.10b-6.3mdk.i586.rpm
1a1bf98dff0c15f81bbed1bf503ca255 1.0.1/RPMS/kernel-2.2.19-6.3mdk.i586.rpm
2f0f99f5e693ebeb6b45693936047dcc 1.0.1/RPMS/kernel-doc-2.2.19-6.3mdk.i586.rpm
10b734be7730eb087139be097001f7ab 1.0.1/RPMS/kernel-headers-2.2.19-6.3mdk.i586.rpm
32000acc7fbe0ddfd1860bf05056e684 1.0.1/RPMS/kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
eaf9d2846ebac965272f609cc04c5dca 1.0.1/RPMS/kernel-secure-2.2.19-6.3mdk.i586.rpm
b6f35e83c343e560187c2fa1f027d448 1.0.1/RPMS/kernel-smp-2.2.19-6.3mdk.i586.rpm
82e924bb97ce8fd2bfcd07e2c925e536 1.0.1/RPMS/kernel-source-2.2.19-6.3mdk.i586.rpm
328a6a050b68bed30ebac3ef003abba3 1.0.1/RPMS/kernel-utils-2.2.19-6.3mdk.i586.rpm
459aa83b8c9920846544847a62bbd91f 1.0.1/RPMS/reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
89b0010d325af6c0ddb435bb1a0b186b 1.0.1/SRPMS/kernel-2.2.19-6.3mdk.src.rpm
a83661eb60ad027e07e56249f40632b0 1.0.1/SRPMS/kernel-linus-2.2.20-1.1mdk.src.rpm
Single Network Firewall 7.2:
8937ec19b78e6060dfb5d70fd52119fb snf7.2/RPMS/kernel-2.2.19-6.3mdk.i586.rpm
721c0ff12e0912d5ee4a1db51f333e4c snf7.2/RPMS/kernel-doc-2.2.19-6.3mdk.i586.rpm
7d545e7921db6879ffa2e69eb5ad03d8 snf7.2/RPMS/kernel-headers-2.2.19-6.3mdk.i586.rpm
918f656a5929a8ed596fad2c75e0e862 snf7.2/RPMS/kernel-linus-2.2.20-1.1mdk.i586.rpm
154ed43baabafcc43dccb4acb4603a01 snf7.2/RPMS/kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
4f897474c98abbb4527bc87f8a5a4a1c snf7.2/RPMS/kernel-secure-2.2.19-6.3mdk.i586.rpm
d26791b7ed55fa4d15df3cd875925f00 snf7.2/RPMS/kernel-smp-2.2.19-6.3mdk.i586.rpm
ed55c53e22493c20e87db3dd609c5ba9 snf7.2/RPMS/kernel-source-2.2.19-6.3mdk.i586.rpm
387126682af922f1b8a67f8396bbe9d6 snf7.2/RPMS/kernel-utils-2.2.19-6.3mdk.i586.rpm
05d52ad1e52279797f27d7446732e0ea snf7.2/RPMS/reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
89b0010d325af6c0ddb435bb1a0b186b snf7.2/SRPMS/kernel-2.2.19-6.3mdk.src.rpm
a83661eb60ad027e07e56249f40632b0 snf7.2/SRPMS/kernel-linus-2.2.20-1.1mdk.src.rpm
________________________________________________________________________
Bug IDs fixed (see https://qa.mandrakesoft.com for more information):
________________________________________________________________________
To upgrade automatically, use MandrakeUpdate.
If you want to upgrade manually, download the updated package from one
of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm".
You can download the updates directly from one of the mirror sites
listed at:
http://www.linux-mandrake.com/en/ftp.php3.
Updated packages are available in the "updates/[ver]/RPMS/" directory.
For example, if you are looking for an updated RPM package for
Mandrake Linux 8.0, look for it in "updates/8.0/RPMS/". Updated source
RPMs are available as well, but you generally do not need to download
them.
Please be aware that sometimes it takes the mirrors a few hours to
update.
You can view other security advisories for Mandrake Linux at:
http://www.linux-mandrake.com/en/security/
If you want to report vulnerabilities, please contact
security@linux-mandrake.com
________________________________________________________________________
Mandrake Linux has two security-related mailing list services that
anyone can subscribe to:
security-announce@linux-mandrake.com
Mandrake Linux's security announcements mailing list. Only
announcements are sent to this list and it is read-only.
security-discuss@linux-mandrake.com
Mandrake Linux's security discussion mailing list. This list is open
to anyone to discuss Mandrake Linux security specifically and Linux
security in general.
To subscribe to either list, send a message to
sympa@linux-mandrake.com
with "subscribe [listname]" in the body of the message.
To remove yourself from either list, send a message to
sympa@linux-mandrake.com
with "unsubscribe [listname]" in the body of the message.
To get more information on either list, send a message to
sympa@linux-mandrake.com
with "info [listname]" in the body of the message.
Optionally, you can use the web interface to subscribe to or unsubscribe
from either list:
http://www.linux-mandrake.com/en/flists.php3#security
________________________________________________________________________
Type Bits/KeyID Date User ID
pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team
security@linux-mandrake.com>
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.0.5 (GNU/Linux)
Comment: For info see http://www.gnupg.org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=0ahQ
-----END PGP PUBLIC KEY BLOCK-----
Category:
- Linux
