Paketname
kernel
Datum
2001-11-20
Advisory ID
MDKSA-2001:079-1
Betroffene Versionen
8.1 i586 , 8.0 i586 , 8.0 i586

Problembeschreibung

Alexander Viro discovered a vulnerability in the devfs implementation that is shipped with Mandrake Linux 8.1. We are aware of the problem and are currently working on a solution. As a workaround, until an update becomes available, please boot with the devfs=nomount option. Update: Rafal Wojtczuk found a vulnerability in the 2.2.19 and 2.4.11 Linux kernels with the ptrace code and deeply nested symlinks spending an arbitrary amount of time in the kernel code. The ptrace vulnerability could be used by local users to gain root privilege, the symlink vulnerability could result in a local DoS. There is an additional vulnerability in the kernel's syncookie code which could potentially allow a remote attacker to guess the cookie and bypass existing firewall rules. The discovery was found by Manfred Spraul and Andi Kleen. NOTE: This update is *not* meant to be done via MandrakeUpdate! You must download the necessary RPMs and upgrade manually by following these steps: 1. Type: rpm -ivh kernel-[version].i586.rpm 2. Type: mv kernel-[version].i586.rpm /tmp 3. Type: rpm -Fvh *.rpm 4a. You may wish to edit /etc/lilo.conf to ensure a new entry is in place. The new kernel will be the last entry. Change any options you need to change. You will also want to create a new entry with the initrd and image directives pointing to the old kernel's vmlinuz and initrd images so you may also boot from the old images if required. 4b. PPC users must execute some additional instructions. First edit /etc/yaboot.conf and add a new entry for the kernel and change any options that you need to change. You must also create a new initrd image to enable USB support for keyboards and mice by typing: mkinitrd --with=usb-ohci /boot/initrd-2.4.8-31.3mdk 2.4.8-31.3mdk 5a. If you use lilo, type: /sbin/lilo -v 5b. If you use GRUB, type: sh /boot/grub/install.sh 5c. PPC users must type: /sbin/ybin -v You may then reboot and use the new kernel and remove the older kernel when you are comfortable using the upgraded one.

Aktualisierte Pakete

8.1 i586

 ac948f0f05c237828b9be37f294192f9  8.1/RPMS/kernel-2.4.8-34.1mdk.i586.rpm
456abd9dd5678c2e01ec35ebf2401a39  8.1/RPMS/kernel-doc-2.4.8-34.1mdk.i586.rpm
2e96d98445e0b89d64295a79839ef27c  8.1/RPMS/kernel-enterprise-2.4.8-34.1mdk.i586.rpm
0aa5966f6d53af5e1473e6bf1b891403  8.1/RPMS/kernel-headers-2.4.8-34.1mdk.i586.rpm
429325fb8bc48392ea182d6f2e0f2849  8.1/RPMS/kernel-pcmcia-cs-2.4.8-34.1mdk.i586.rpm
f0cfd6472b15f22b1820b948a3c78537  8.1/RPMS/kernel-smp-2.4.8-34.1mdk.i586.rpm
9564cb8602d480dc035b7e5919af7fe6  8.1/RPMS/kernel-source-2.4.8-34.1mdk.i586.rpm
6196af50631c01ad75224ad224509b2d  8.1/RPMS/iptables-1.2.4-1.1mdk.i586.rpm
e374e4488342312a8deaa28e2d8796ac  8.1/RPMS/iptables-ipv6-1.2.4-1.1mdk.i586.rpm
12f133a9760bce2c7fb06939c2afd180  8.1/SRPMS/kernel-2.4.8-34.1mdk.src.rpm
24bdff60d2a6fadc8abe2a47619590d8  8.1/SRPMS/iptables-1.2.4-1.1mdk.src.rpm

8.0 i586

 c06d61d09887f1e5ac96688b417d5530  8.0/RPMS/kernel-2.4.8-31.2mdk.i586.rpm
b68609db486f9ad32478a8e8ae3002bb  8.0/RPMS/kernel-doc-2.4.8-31.2mdk.i586.rpm
5d16f8f9d6af21f7454663715ec586c7  8.0/RPMS/kernel-enterprise-2.4.8-31.2mdk.i586.rpm
845e68323ad61919b8702b3352114537  8.0/RPMS/kernel-headers-2.4.8-31.2mdk.i586.rpm
cc08db1a3df3f1ac9f4093246c06e5be  8.0/RPMS/kernel-pcmcia-cs-2.4.8-31.2mdk.i586.rpm
202531142a98174a62249d0d31131d17  8.0/RPMS/kernel-smp-2.4.8-31.2mdk.i586.rpm
8d7bd827e13b1d76f75569e92b8ecd1c  8.0/RPMS/kernel-source-2.4.8-31.2mdk.i586.rpm
5d26269acdd4a9c495c641472a4e3997  8.0/RPMS/iptables-1.2.4-1.2mdk.i586.rpm
cc5f29b474658d4a62c36921ac481994  8.0/RPMS/iptables-ipv6-1.2.4-1.2mdk.i586.rpm
b94a340b5dbd786a064408a0cce86378  8.0/SRPMS/kernel-2.4.8-31.2mdk.src.rpm
0594f5c83b5211a3b7e53e33573cd624  8.0/SRPMS/iptables-1.2.4-1.2mdk.src.rpm

8.0 i586

 0aa32aede5b608d28b6d9fbaa4c63cc6  ppc/8.0/RPMS/kernel-2.4.8-31.3mdk.ppc.rpm
f149d44938b761469cc2e7cb3941ba35  ppc/8.0/RPMS/kernel-doc-2.4.8-31.3mdk.ppc.rpm
1e6a534996f0607691017558d29e4d25  ppc/8.0/RPMS/kernel-headers-2.4.8-31.3mdk.ppc.rpm
de3d61cd0fc4607b4d0d06218c038abd  ppc/8.0/RPMS/kernel-pcmcia-cs-2.4.8-31.3mdk.ppc.rpm
497d1605e64307f3a59a59950cf859d4  ppc/8.0/RPMS/kernel-smp-2.4.8-31.3mdk.ppc.rpm
b89aeb776055a44482e30f0b517b0a3a  ppc/8.0/RPMS/kernel-source-2.4.8-31.3mdk.ppc.rpm
5f56bcb641218c4400b557856c9803a5  ppc/8.0/RPMS/iptables-1.2.4-1.2mdk.ppc.rpm
bdec7f857adc7714ba94f3a8c33892e4  ppc/8.0/RPMS/iptables-ipv6-1.2.4-1.2mdk.ppc.rpm
239f261222d20e7ba02a22dbc688083b  ppc/8.0/RPMS/mol-kmods-0.9.60-1.1mdk.ppc.rpm
955de0bd16773e32dc05d0a924d9af8d  ppc/8.0/SRPMS/kernel-2.4.8-31.3mdk.src.rpm
0594f5c83b5211a3b7e53e33573cd624  ppc/8.0/SRPMS/iptables-1.2.4-1.2mdk.src.rpm
c347a001bc50800b063b0bcc4042baf9  ppc/8.0/SRPMS/mol-kmods-0.9.60-1.1mdk.src.rpm

Referenzen