TUCoPS :: Linux :: Mandrake/Mandriva :: mk1-0821.txt

Ptrace vulnerability - Mandrake Linux Security Advisory MDKSA-2001:082-1 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

________________________________________________________________________

                Mandrake Linux Security Update Advisory
________________________________________________________________________

Package name:           kernel22
Date:                   November 20th, 2001
Original Advisory Date: October 26th, 2001
Advisory ID:            MDKSA-2001:082-1

Affected versions:      7.1, 7.2, 8.0, 8.1, Corporate Server 1.0.1,
                        Single Network Firewall 7.2
________________________________________________________________________

Problem Description:

 Rafal Wojtczuk found a vulnerability in the 2.2.19 and 2.4.11 Linux
 kernels with the ptrace code and deeply nested symlinks spending an
 arbitrary amount of time in the kernel code.  The ptrace vulnerability
 could be used by local users to gain root privilege, the symlink
 vulnerability could result in a local DoS.

Update:

 There is an additional vulnerability in the kernel's syncookie code
 which could potentially allow a remote attacker to guess the cookie
 and bypass existing firewall rules.  The discovery was found by Manfred
 Spraul and Andi Kleen.

 NOTE: This update is *not* meant to be done via MandrakeUpdate!  You
 must download the necessary RPMs and upgrade manually by following
 these steps:

   1.  Type: rpm -ivh kernel-[version].i586.rpm
   2.  Type: mv kernel-[version].i586.rpm /tmp
   3.  Type: rpm -Fvh *.rpm
   4a. You may wish to edit /etc/lilo.conf to ensure a new entry is in
       place.  The new kernel will be the last entry.  Change any options
       you need to change.  You will also want to create a new entry with
       the initrd and image directives pointing to the old kernel's
       vmlinuz and initrd images so you may also boot from the old
       images if required.
   4b. PPC users must execute some additional instructions.  First edit
       /etc/yaboot.conf and add a new entry for the kernel and change
       any options that you need to change.  You must also create a new
       initrd image to enable USB support for keyboards and mice by
       typing: 
         mkinitrd --with=usb-ohci /boot/initrd-2.2.19-20.1mdk 2.2.19-20.1mdk
   5a. If you use lilo, type: /sbin/lilo -v
   5b. If you use GRUB, type: sh /boot/grub/install.sh
   5c. PPC users must type: /sbin/ybin -v

 You may then reboot and use the new kernel and remove the older kernel
 when you are comfortable using the upgraded one.
________________________________________________________________________

References:

  http://www.securityfocus.com/cgi-bin/archive.pl?id=1&mid=221337
________________________________________________________________________

Please verify the update prior to upgrading to ensure the integrity of
the downloaded package.  You can do this with the command:
  rpm --checksig package.rpm
You can get the GPG public key of the Mandrake Linux Security Team at
  http://www.linux-mandrake.com/en/security/RPM-GPG-KEYS
If you use MandrakeUpdate, the verification of md5 checksum and GPG
signature is performed automatically for you.

Linux-Mandrake 7.1:
7e650c33ccde99f5b363b61f8d804925  7.1/RPMS/alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
5a8a686a2c173b5a93739f1d40b25af8  7.1/RPMS/alsa-source-2.2.19_0.5.10b-6.3mdk.i586.rpm
ccb0385a7979cb5417ab24a71810ca5c  7.1/RPMS/kernel-2.2.19-6.3mdk.i586.rpm
48deff36ef6d3a0a9f347444fe67ebae  7.1/RPMS/kernel-doc-2.2.19-6.3mdk.i586.rpm
e38bf6850677df3028dfe9c29d731a5e  7.1/RPMS/kernel-headers-2.2.19-6.3mdk.i586.rpm
25365c277d604eebd765eb6eef9034d6  7.1/RPMS/kernel-linus-2.2.20-1.1mdk.i586.rpm
a079098328d93377cfc77bbfd0fa5b41  7.1/RPMS/kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
12fb5d22fe388f1e3ae98a12946ac2e9  7.1/RPMS/kernel-secure-2.2.19-6.3mdk.i586.rpm
c80182d30b738ce231c14b685653b648  7.1/RPMS/kernel-smp-2.2.19-6.3mdk.i586.rpm
50a01ee4ee671ba81b5a5595e6ff30a5  7.1/RPMS/kernel-source-2.2.19-6.3mdk.i586.rpm
b1b2bbe9bd2efab067f084d05b480f3c  7.1/RPMS/kernel-utils-2.2.19-6.3mdk.i586.rpm
35273dc0d85060d4d43d0dffff3367e5  7.1/RPMS/reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
89b0010d325af6c0ddb435bb1a0b186b  7.1/SRPMS/kernel-2.2.19-6.3mdk.src.rpm
a83661eb60ad027e07e56249f40632b0  7.1/SRPMS/kernel-linus-2.2.20-1.1mdk.src.rpm

Linux-Mandrake 7.2:
cd9ff8472b32e9ce0830c73a0aecd2de  7.2/RPMS/alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
3e8c073ca85907bbb3afb2e1f3163210  7.2/RPMS/alsa-source-2.2.19_0.5.10b-6.3mdk.i586.rpm
8937ec19b78e6060dfb5d70fd52119fb  7.2/RPMS/kernel-2.2.19-6.3mdk.i586.rpm
721c0ff12e0912d5ee4a1db51f333e4c  7.2/RPMS/kernel-doc-2.2.19-6.3mdk.i586.rpm
7d545e7921db6879ffa2e69eb5ad03d8  7.2/RPMS/kernel-headers-2.2.19-6.3mdk.i586.rpm
918f656a5929a8ed596fad2c75e0e862  7.2/RPMS/kernel-linus-2.2.20-1.1mdk.i586.rpm
154ed43baabafcc43dccb4acb4603a01  7.2/RPMS/kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
4f897474c98abbb4527bc87f8a5a4a1c  7.2/RPMS/kernel-secure-2.2.19-6.3mdk.i586.rpm
d26791b7ed55fa4d15df3cd875925f00  7.2/RPMS/kernel-smp-2.2.19-6.3mdk.i586.rpm
ed55c53e22493c20e87db3dd609c5ba9  7.2/RPMS/kernel-source-2.2.19-6.3mdk.i586.rpm
387126682af922f1b8a67f8396bbe9d6  7.2/RPMS/kernel-utils-2.2.19-6.3mdk.i586.rpm
05d52ad1e52279797f27d7446732e0ea  7.2/RPMS/reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
89b0010d325af6c0ddb435bb1a0b186b  7.2/SRPMS/kernel-2.2.19-6.3mdk.src.rpm
a83661eb60ad027e07e56249f40632b0  7.2/SRPMS/kernel-linus-2.2.20-1.1mdk.src.rpm

Mandrake Linux 8.0:
0ed0a37ff3ce8c62628cd77db324bcde  8.0/RPMS/kernel-linus2.2-2.2.20-1.1mdk.i586.rpm
cc147d2b191a07b1666a2efc81ecdbe4  8.0/RPMS/kernel22-2.2.19-20.1mdk.i586.rpm
dbf5f98a59160ca4cf61ff7b4b57ca3e  8.0/RPMS/kernel22-secure-2.2.19-20.1mdk.i586.rpm
fb209416d7b6ebfcd1efa26f8b3ab369  8.0/RPMS/kernel22-smp-2.2.19-20.1mdk.i586.rpm
e243eabd5f5ebb514332052da5272032  8.0/RPMS/kernel22-source-2.2.19-20.1mdk.i586.rpm
cef69adaebdd65d433189d6a0193ba99  8.0/SRPMS/kernel-linus2.2-2.2.20-1.1mdk.src.rpm
526e2b6f1548d1539d3479582b6c8b87  8.0/SRPMS/kernel22-2.2.19-20.1mdk.src.rpm

Mandrake Linux 8.0 (PPC):
767dbbc36d5a6b7311923d9391166016  ppc/8.0/RPMS/kernel22-2.2.19-20.1mdk.ppc.rpm
d5bdf324f86c19198d257f373942ad8c  ppc/8.0/RPMS/kernel22-secure-2.2.19-20.1mdk.ppc.rpm
e9630cabe3d16c4a8e6fbcf6d073c89b  ppc/8.0/RPMS/kernel22-smp-2.2.19-20.1mdk.ppc.rpm
ae3b4e8322e4200e97c5a06217fa4d29  ppc/8.0/RPMS/kernel22-source-2.2.19-20.1mdk.ppc.rpm
526e2b6f1548d1539d3479582b6c8b87  ppc/8.0/SRPMS/kernel22-2.2.19-20.1mdk.src.rpm

Mandrake Linux 8.1:
7caa63f9a302fd15d24e4be65544885a  8.1/RPMS/kernel-linus2.2-2.2.20-1.1mdk.i586.rpm
0599738b69f92d83eb34a0f441823f25  8.1/RPMS/kernel22-2.2.19-20.1mdk.i586.rpm
243a809d39cc229ea2befc1dd70d3205  8.1/RPMS/kernel22-secure-2.2.19-20.1mdk.i586.rpm
fd112bdbb8a1441c97986e59ab0f5f19  8.1/RPMS/kernel22-smp-2.2.19-20.1mdk.i586.rpm
ab755bcde2b50f83ed0fe402808c104c  8.1/RPMS/kernel22-source-2.2.19-20.1mdk.i586.rpm
cef69adaebdd65d433189d6a0193ba99  8.1/SRPMS/kernel-linus2.2-2.2.20-1.1mdk.src.rpm
526e2b6f1548d1539d3479582b6c8b87  8.1/SRPMS/kernel22-2.2.19-20.1mdk.src.rpm

Corporate Server 1.0.1:
c3e90e324254308ddc15435294694bcb  1.0.1/RPMS/alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
14fc90f92fea89b129a31cafc865e591  1.0.1/RPMS/alsa-source-2.2.19_0.5.10b-6.3mdk.i586.rpm
1a1bf98dff0c15f81bbed1bf503ca255  1.0.1/RPMS/kernel-2.2.19-6.3mdk.i586.rpm
2f0f99f5e693ebeb6b45693936047dcc  1.0.1/RPMS/kernel-doc-2.2.19-6.3mdk.i586.rpm
10b734be7730eb087139be097001f7ab  1.0.1/RPMS/kernel-headers-2.2.19-6.3mdk.i586.rpm
32000acc7fbe0ddfd1860bf05056e684  1.0.1/RPMS/kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
eaf9d2846ebac965272f609cc04c5dca  1.0.1/RPMS/kernel-secure-2.2.19-6.3mdk.i586.rpm
b6f35e83c343e560187c2fa1f027d448  1.0.1/RPMS/kernel-smp-2.2.19-6.3mdk.i586.rpm
82e924bb97ce8fd2bfcd07e2c925e536  1.0.1/RPMS/kernel-source-2.2.19-6.3mdk.i586.rpm
328a6a050b68bed30ebac3ef003abba3  1.0.1/RPMS/kernel-utils-2.2.19-6.3mdk.i586.rpm
459aa83b8c9920846544847a62bbd91f  1.0.1/RPMS/reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
89b0010d325af6c0ddb435bb1a0b186b  1.0.1/SRPMS/kernel-2.2.19-6.3mdk.src.rpm
a83661eb60ad027e07e56249f40632b0  1.0.1/SRPMS/kernel-linus-2.2.20-1.1mdk.src.rpm

Single Network Firewall 7.2:
8937ec19b78e6060dfb5d70fd52119fb  snf7.2/RPMS/kernel-2.2.19-6.3mdk.i586.rpm
721c0ff12e0912d5ee4a1db51f333e4c  snf7.2/RPMS/kernel-doc-2.2.19-6.3mdk.i586.rpm
7d545e7921db6879ffa2e69eb5ad03d8  snf7.2/RPMS/kernel-headers-2.2.19-6.3mdk.i586.rpm
918f656a5929a8ed596fad2c75e0e862  snf7.2/RPMS/kernel-linus-2.2.20-1.1mdk.i586.rpm
154ed43baabafcc43dccb4acb4603a01  snf7.2/RPMS/kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
4f897474c98abbb4527bc87f8a5a4a1c  snf7.2/RPMS/kernel-secure-2.2.19-6.3mdk.i586.rpm
d26791b7ed55fa4d15df3cd875925f00  snf7.2/RPMS/kernel-smp-2.2.19-6.3mdk.i586.rpm
ed55c53e22493c20e87db3dd609c5ba9  snf7.2/RPMS/kernel-source-2.2.19-6.3mdk.i586.rpm
387126682af922f1b8a67f8396bbe9d6  snf7.2/RPMS/kernel-utils-2.2.19-6.3mdk.i586.rpm
05d52ad1e52279797f27d7446732e0ea  snf7.2/RPMS/reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
89b0010d325af6c0ddb435bb1a0b186b  snf7.2/SRPMS/kernel-2.2.19-6.3mdk.src.rpm
a83661eb60ad027e07e56249f40632b0  snf7.2/SRPMS/kernel-linus-2.2.20-1.1mdk.src.rpm
________________________________________________________________________

Bug IDs fixed (see https://qa.mandrakesoft.com for more information):

________________________________________________________________________

To upgrade automatically, use MandrakeUpdate.

If you want to upgrade manually, download the updated package from one
of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm".

You can download the updates directly from one of the mirror sites
listed at:

  http://www.linux-mandrake.com/en/ftp.php3.

Updated packages are available in the "updates/[ver]/RPMS/" directory.
For example, if you are looking for an updated RPM package for
Mandrake Linux 8.0, look for it in "updates/8.0/RPMS/".  Updated source
RPMs are available as well, but you generally do not need to download
them.

Please be aware that sometimes it takes the mirrors a few hours to
update.

You can view other security advisories for Mandrake Linux at:

  http://www.linux-mandrake.com/en/security/

If you want to report vulnerabilities, please contact

  security@linux-mandrake.com
________________________________________________________________________

Mandrake Linux has two security-related mailing list services that 
anyone can subscribe to:

security-announce@linux-mandrake.com

  Mandrake Linux's security announcements mailing list.  Only 
  announcements are sent to this list and it is read-only.

security-discuss@linux-mandrake.com

  Mandrake Linux's security discussion mailing list.  This list is open
  to anyone to discuss Mandrake Linux security specifically and Linux
  security in general.

To subscribe to either list, send a message to
  sympa@linux-mandrake.com
with "subscribe [listname]" in the body of the message.

To remove yourself from either list, send a message to
  sympa@linux-mandrake.com
with "unsubscribe [listname]" in the body of the message.

To get more information on either list, send a message to
  sympa@linux-mandrake.com
with "info [listname]" in the body of the message.

Optionally, you can use the web interface to subscribe to or unsubscribe
from either list:

  http://www.linux-mandrake.com/en/flists.php3#security
________________________________________________________________________

Type Bits/KeyID     Date       User ID
pub  1024D/22458A98 2000-07-10 Linux Mandrake Security Team 
  <security@linux-mandrake.com>


- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.0.5 (GNU/Linux)
Comment: For info see http://www.gnupg.org

mQGiBDlp594RBAC2tDozI3ZgQsE7XwxurJCJrX0L5vx7SDByR5GHDdWekGhdiday
L4nfUax+SeR9SCoCgTgPW1xB8vtQc8/sinJlMjp9197a2iKM0FOcPlkpa3HcOdt7
WKJqQhlMrHvRcsivzcgqjH44GBBJIT6sygUF8k0lU6YnMHj5MPc/NGWt8wCg9vKo
P0l5QVAFSsHtqcU9W8cc7wMEAJzQsAlnvPXDBfBLEH6u7ptWFdp0GvbSuG2wRaPl
hynHvRiE01ZvwbJZXsPsKm1z7uVoW+NknKLunWKB5axrNXDHxCYJBzY3jTeFjsqx
PFZkIEAQphLTkeXXelAjQ5u9tEshPswEtMvJvUgNiAfbzHfPYmq8D6x5xOw1IySg
2e/LBACxr2UJYCCB2BZ3p508mAB0RpuLGukq+7UWiOizy+kSskIBg2O7sQkVY/Cs
iyGEo4XvXqZFMY39RBdfm2GY+WB/5NFiTOYJRKjfprP6K1YbtsmctsX8dG+foKsD
LLFs7OuVfaydLQYp1iiN6D+LJDSMPM8/LCWzZsgr9EKJ8NXiyrQ6TGludXggTWFu
ZHJha2UgU2VjdXJpdHkgVGVhbSA8c2VjdXJpdHlAbGludXgtbWFuZHJha2UuY29t
PohWBBMRAgAWBQI5aefeBAsKBAMDFQMCAxYCAQIXgAAKCRCaqNDQIkWKmK6LAKCy
/NInDsaMSI+WHwrquwC5PZrcnQCeI+v3gUDsNfQfiKBvQSANu1hdulqIRgQQEQIA
BgUCOtNVGQAKCRBZ5w3um0pAJJWQAKDUoL5He+mKbfrMaTuyU5lmRyJ0fwCgoFAP
WdvQlu/kFjphF740XeOwtOqIRgQQEQIABgUCOu8A6QAKCRBynDnb9lq3CnpjAJ4w
Pk0SEE9U4r40IxWpwLU+wrWVugCdFfSPllPpZRCiaC7HwbFcfExRmPa5AQ0EOWnn
7xAEAOQlTVY4TiNo5V/iP0J1xnqjqlqZsU7yEBKo/gZz6/+hx75RURe1ebiJ9F77
9FQbpJ9Epz1KLSXvq974rnVb813zuGdmgFyk+ryA/rTR2RQ8h+EoNkwmATzRxBXV
Jb57fFQjxOu4eNjZAtfII/YXb0uyXXrdr5dlJ/3eXrcO4p0XAAMFBACCxo6Z269s
+A4v8C6Ui12aarOQcCDlV8cVG9LkyatU3FNTlnasqwo6EkaP572448weJWwN6SCX
Vl+xOYLiK0hL/6Jb/O9Agw75yUVdk+RMM2I4fNEi+y4hmfMh2siBv8yEkEvZjTcl
3TpkTfzYky85tu433wmKaLFOv0WjBFSikohGBBgRAgAGBQI5aefvAAoJEJqo0NAi
RYqYid0AoJgeWzXrEdIClBOSW5Q6FzqJJyaqAKC0Y9YI3UFlE4zSIGjcFlLJEJGX
lA==
=0ahQ
- -----END PGP PUBLIC KEY BLOCK-----

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7+xdImqjQ0CJFipgRAtbsAJ42ggW0Dr1G82soRvuKJMSVksjgvQCgqKqg
u/rwIFZD4+J0K5Z+91E4xkM=
=OP/K
-----END PGP SIGNATURE-----

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH