Package name
kernel
Date
2001-08-28
Advisory ID
MDKSA-2001:071
Affected versions
8.0 i586

Problem description

A security hole was found in the earlier Linux 2.4 kernels dealing with iptables RELATED connection tracking. The iptables ip_conntrack_ftp module, which is used for stateful inspection of FTP traffic, does not validate parameters passed to it in an FTP PORT command. Due to this flaw, carefully constructed PORT commands could open arbitrary holes in the firewall. This hole has been fixed, as well as a number of other bugs for the 2.4 kernel shipped with Mandrake Linux 8.0 NOTE: This update is *not* meant to be done via MandrakeUpdate! You must download the necessary RPMs and upgrade manually by following these steps: 1. Type: rpm -ivh kernel-2.4.7-12.3mdk.i586.rpm 2. Type: mv kernel-2.4.7-12.3mdk.i586.rpm /tmp 3. Type: rpm -Fvh *.rpm 4. You may wish to edit /etc/lilo.conf to ensure a new entry is in place. The new kernel will be the last entry. Change any options you need to change. 5. Type: /sbin/lilo -v You may then reboot and use the nwe kernel and remove the older kernel when you are comfortable using the upgraded one.

Updated packages

8.0 i586

 3470b59e9912d02e118acb89ac593fa9  8.0/RPMS/kernel-2.4.7-12.3mdk.i586.rpm
e9bde85b807e2cbaf528691dfdf7178e  8.0/RPMS/kernel-doc-2.4.7-12.3mdk.i586.rpm
6dc51e2681acf96a6f4379ce54cfc4be  8.0/RPMS/kernel-enterprise-2.4.7-12.3mdk.i586.rpm
2c6ad3ce5bc0f15c7f50e7bef5a4354f  8.0/RPMS/kernel-headers-2.4.7-12.3mdk.i586.rpm
7f1397224ea6e9057e4fea3ebe71272c  8.0/RPMS/kernel-pcmcia-cs-2.4.7-12.3mdk.i586.rpm
ce3ffe981f89dc0cee63578afb5bd0ed  8.0/RPMS/kernel-smp-2.4.7-12.3mdk.i586.rpm
388fe5f66c4ff1436619eaf1cf7f0044  8.0/RPMS/kernel-source-2.4.7-12.3mdk.i586.rpm
7c8d94b419292a19be53e24f850ad18b  8.0/RPMS/lm_utils-2.4.7_2.6.0-12.3mdk.i586.rpm
b23c2208ed7b7f13b3bf81dc9e64e8f5  8.0/RPMS/lm_utils-devel-2.4.7_2.6.0-12.3mdk.i586.rpm
2840a05e40c1f006716bf6d586386d47  8.0/RPMS/iptables-1.2.2-3.1mdk.i586.rpm
d9b13f5e779d6636cb193b5aecc25655  8.0/RPMS/iptables-ipv6-1.2.2-3.1mdk.i586.rpm
0a5f552da7f4d1a56b2b6eb3dcffd773  8.0/SRPMS/kernel-2.4.7-12.3mdk.src.rpm
dabf5f147c7c578bf994571125a31938  8.0/SRPMS/iptables-1.2.2-3.1mdk.src.rpm

References