MDKSA-2001:079-1
- Package name
- kernel
- Date
- 2001-11-20
- Advisory ID
- MDKSA-2001:079-1
- Affected versions
- 8.1 i586 , 8.0 i586 , 8.0 i586
Problem description
Alexander Viro discovered a vulnerability in the devfs implementation that is shipped with Mandrake Linux 8.1. We are aware of the problem and are currently working on a solution. As a workaround, until an update becomes available, please boot with the devfs=nomount option. Update: Rafal Wojtczuk found a vulnerability in the 2.2.19 and 2.4.11 Linux kernels with the ptrace code and deeply nested symlinks spending an arbitrary amount of time in the kernel code. The ptrace vulnerability could be used by local users to gain root privilege, the symlink vulnerability could result in a local DoS. There is an additional vulnerability in the kernel's syncookie code which could potentially allow a remote attacker to guess the cookie and bypass existing firewall rules. The discovery was found by Manfred Spraul and Andi Kleen. NOTE: This update is *not* meant to be done via MandrakeUpdate! You must download the necessary RPMs and upgrade manually by following these steps: 1. Type: rpm -ivh kernel-[version].i586.rpm 2. Type: mv kernel-[version].i586.rpm /tmp 3. Type: rpm -Fvh *.rpm 4a. You may wish to edit /etc/lilo.conf to ensure a new entry is in place. The new kernel will be the last entry. Change any options you need to change. You will also want to create a new entry with the initrd and image directives pointing to the old kernel's vmlinuz and initrd images so you may also boot from the old images if required. 4b. PPC users must execute some additional instructions. First edit /etc/yaboot.conf and add a new entry for the kernel and change any options that you need to change. You must also create a new initrd image to enable USB support for keyboards and mice by typing: mkinitrd --with=usb-ohci /boot/initrd-2.4.8-31.3mdk 2.4.8-31.3mdk 5a. If you use lilo, type: /sbin/lilo -v 5b. If you use GRUB, type: sh /boot/grub/install.sh 5c. PPC users must type: /sbin/ybin -v You may then reboot and use the new kernel and remove the older kernel when you are comfortable using the upgraded one.
Updated packages
8.1 i586
ac948f0f05c237828b9be37f294192f9 8.1/RPMS/kernel-2.4.8-34.1mdk.i586.rpm 456abd9dd5678c2e01ec35ebf2401a39 8.1/RPMS/kernel-doc-2.4.8-34.1mdk.i586.rpm 2e96d98445e0b89d64295a79839ef27c 8.1/RPMS/kernel-enterprise-2.4.8-34.1mdk.i586.rpm 0aa5966f6d53af5e1473e6bf1b891403 8.1/RPMS/kernel-headers-2.4.8-34.1mdk.i586.rpm 429325fb8bc48392ea182d6f2e0f2849 8.1/RPMS/kernel-pcmcia-cs-2.4.8-34.1mdk.i586.rpm f0cfd6472b15f22b1820b948a3c78537 8.1/RPMS/kernel-smp-2.4.8-34.1mdk.i586.rpm 9564cb8602d480dc035b7e5919af7fe6 8.1/RPMS/kernel-source-2.4.8-34.1mdk.i586.rpm 6196af50631c01ad75224ad224509b2d 8.1/RPMS/iptables-1.2.4-1.1mdk.i586.rpm e374e4488342312a8deaa28e2d8796ac 8.1/RPMS/iptables-ipv6-1.2.4-1.1mdk.i586.rpm 12f133a9760bce2c7fb06939c2afd180 8.1/SRPMS/kernel-2.4.8-34.1mdk.src.rpm 24bdff60d2a6fadc8abe2a47619590d8 8.1/SRPMS/iptables-1.2.4-1.1mdk.src.rpm
8.0 i586
c06d61d09887f1e5ac96688b417d5530 8.0/RPMS/kernel-2.4.8-31.2mdk.i586.rpm b68609db486f9ad32478a8e8ae3002bb 8.0/RPMS/kernel-doc-2.4.8-31.2mdk.i586.rpm 5d16f8f9d6af21f7454663715ec586c7 8.0/RPMS/kernel-enterprise-2.4.8-31.2mdk.i586.rpm 845e68323ad61919b8702b3352114537 8.0/RPMS/kernel-headers-2.4.8-31.2mdk.i586.rpm cc08db1a3df3f1ac9f4093246c06e5be 8.0/RPMS/kernel-pcmcia-cs-2.4.8-31.2mdk.i586.rpm 202531142a98174a62249d0d31131d17 8.0/RPMS/kernel-smp-2.4.8-31.2mdk.i586.rpm 8d7bd827e13b1d76f75569e92b8ecd1c 8.0/RPMS/kernel-source-2.4.8-31.2mdk.i586.rpm 5d26269acdd4a9c495c641472a4e3997 8.0/RPMS/iptables-1.2.4-1.2mdk.i586.rpm cc5f29b474658d4a62c36921ac481994 8.0/RPMS/iptables-ipv6-1.2.4-1.2mdk.i586.rpm b94a340b5dbd786a064408a0cce86378 8.0/SRPMS/kernel-2.4.8-31.2mdk.src.rpm 0594f5c83b5211a3b7e53e33573cd624 8.0/SRPMS/iptables-1.2.4-1.2mdk.src.rpm
8.0 i586
0aa32aede5b608d28b6d9fbaa4c63cc6 ppc/8.0/RPMS/kernel-2.4.8-31.3mdk.ppc.rpm f149d44938b761469cc2e7cb3941ba35 ppc/8.0/RPMS/kernel-doc-2.4.8-31.3mdk.ppc.rpm 1e6a534996f0607691017558d29e4d25 ppc/8.0/RPMS/kernel-headers-2.4.8-31.3mdk.ppc.rpm de3d61cd0fc4607b4d0d06218c038abd ppc/8.0/RPMS/kernel-pcmcia-cs-2.4.8-31.3mdk.ppc.rpm 497d1605e64307f3a59a59950cf859d4 ppc/8.0/RPMS/kernel-smp-2.4.8-31.3mdk.ppc.rpm b89aeb776055a44482e30f0b517b0a3a ppc/8.0/RPMS/kernel-source-2.4.8-31.3mdk.ppc.rpm 5f56bcb641218c4400b557856c9803a5 ppc/8.0/RPMS/iptables-1.2.4-1.2mdk.ppc.rpm bdec7f857adc7714ba94f3a8c33892e4 ppc/8.0/RPMS/iptables-ipv6-1.2.4-1.2mdk.ppc.rpm 239f261222d20e7ba02a22dbc688083b ppc/8.0/RPMS/mol-kmods-0.9.60-1.1mdk.ppc.rpm 955de0bd16773e32dc05d0a924d9af8d ppc/8.0/SRPMS/kernel-2.4.8-31.3mdk.src.rpm 0594f5c83b5211a3b7e53e33573cd624 ppc/8.0/SRPMS/iptables-1.2.4-1.2mdk.src.rpm c347a001bc50800b063b0bcc4042baf9 ppc/8.0/SRPMS/mol-kmods-0.9.60-1.1mdk.src.rpm