[Full-Disclosure] [TURBOLINUX SECURITY INFO] 28/Feb/2005

From: Turbolinux (security-announce_at_turbolinux.co.jp)
Date: 02/28/05

Next message: Bart.Lansing_at_kohls.com: "RE: [lists] RE: [Full-Disclosure] Awake a modem with AT commands"

Previous message: Martin Pitt: "[Full-Disclosure] [USN-88-1] reportbug information disclosure"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Mon, 28 Feb 2005 19:29:19 +0900
To: security-announce@turbolinux.co.jp

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This is an announcement only email list for the x86 architecture.
============================================================
Turbolinux Security Announcement 28/Feb/2005
============================================================

The following page contains the security information of Turbolinux Inc.

- Turbolinux Security Center
http://www.turbolinux.com/security/

(1) kernel -> Multiple vulnerabilities exist in the Linux kernel

===========================================================
* kernel -> Multiple vulnerabilities exist in the Linux kernel
===========================================================

More information:
The kernel package contains the Linux kernel -- the core of the Linux
operating system.

Impact:
Please refer to the "References" section.

Affected Products:
    - Turbolinux Appliance Server 1.0 Hosting Edition
    - Turbolinux Appliance Server 1.0 Workgroup Edition
    - Turbolinux 10 Server
    - Turbolinux Home
    - Turbolinux 10 F...
    - Turbolinux 10 Desktop
    - Turbolinux 8 Server
    - Turbolinux 8 Workstation
    - Turbolinux 7 Server
    - Turbolinux 7 Workstation

Solution:
    Please use the turbopkg (zabom) tool to apply the update.
---------------------------------------------
[Turbolinux 10 Server, Turbolinux 10 Desktop, Turbolinux 10 F...,
  Turbolinux Home]
# turbopkg
or
# zabom -u kernel kernel-extramodules kernel-headers kernel-numa \
            kernel-pcmcia-cs kernel-smp kernel-smp64G kernel-source
[other]
# turbopkg
or
# zabom update kernel kernel-BOOT kernel-doc kernel-headers \
                kernel-pcmcia-cs kernel-smp kernel-smp64G kernel-source
---------------------------------------------

Source Packages
Size: MD5

kernel-2.4.25-11.src.rpm
37282641 061e6ff1934c06795f7e4e68d3fcc4bf

Binary Packages
Size: MD5

   kernel-2.4.25-11.i586.rpm
     13870636 0684f45c3ec096b3081bdc1e1b6f64f6
   kernel-BOOT-2.4.25-11.i586.rpm
      6946804 30a823dfdfb06d316ecd5539200a51ef
   kernel-doc-2.4.25-11.i586.rpm
      1574609 9535386626edec172ac2897183345c6e
   kernel-headers-2.4.25-11.i586.rpm
      2001727 5560df69f68309e7320467da0e9e077f
   kernel-pcmcia-cs-2.4.25-11.i586.rpm
       367496 8be1b186cec318b0e0c3cff459124a97
   kernel-smp-2.4.25-11.i586.rpm
     14289451 e925decf7f0008149f2b19e479bc7380
   kernel-smp64G-2.4.25-11.i586.rpm
     14251578 5b1696ed8ed296204cc5bcaad145a9db
   kernel-source-2.4.25-11.i586.rpm
     27612251 f316c537a3e89afe21a9b2df4204a122

Source Packages
Size: MD5

kernel-2.4.25-11.src.rpm
37282641 061e6ff1934c06795f7e4e68d3fcc4bf

Binary Packages
Size: MD5

Source Packages
Size: MD5

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/10/updates/SRPMS/kernel-2.6.8-4.src.rpm
55425385 d94e748d0516a9520848f2c01b8aea7b

Binary Packages
Size: MD5

Source Packages
Size: MD5

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/SRPMS/kernel-2.6.0-20.src.rpm
48145649 85e41bfa4f27ecd30315931c25553388

Binary Packages
Size: MD5

   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/kernel-2.6.0-20.i586.rpm
     13366026 73c870bab7e2baf9edc28c8a7b6a34c4
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/kernel-doc-2.6.0-20.i586.rpm
      1667157 a341e8374294f70092ecd956b253e5ae
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/kernel-extramodules-2.6.0-20.i586.rpm
      3408511 150623b9be20d2e0ec1926b7766bae8e
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/kernel-headers-2.6.0-20.i586.rpm
      1758282 7c3c7e5f82c4335e9aed19e2d28248ab
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/kernel-pcmcia-cs-2.6.0-20.i586.rpm
       322451 4e1ce97e6c86fc7b3934b7ef9252da5a
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/kernel-smp-2.6.0-20.i586.rpm
     13810651 704dee4e4336f7e88b52844d90525bab
   ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Desktop/10/updates/RPMS/kernel-source-2.6.0-20.i586.rpm
     28681826 7ee6aaedbb7782da1668c648c66dd4fd

Source Packages
Size: MD5

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/8/updates/SRPMS/kernel-2.4.18-23.src.rpm
42550392 4149371505c2bf35698670a3bf7c208c

Binary Packages
Size: MD5

Source Packages
Size: MD5

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/8/updates/SRPMS/kernel-2.4.18-23.src.rpm
42550392 4149371505c2bf35698670a3bf7c208c

Binary Packages
Size: MD5

Source Packages
Size: MD5

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Server/7/updates/SRPMS/kernel-2.4.18-23.src.rpm
42550392 4149371505c2bf35698670a3bf7c208c

Binary Packages
Size: MD5

Source Packages
Size: MD5

ftp://ftp.turbolinux.co.jp/pub/TurboLinux/TurboLinux/ia32/Workstation/7/updates/SRPMS/kernel-2.4.18-23.src.rpm
42550392 4149371505c2bf35698670a3bf7c208c

Binary Packages
Size: MD5

References:

linux-kernel
http://marc.theaimsgroup.com/?l=linux-kernel&m=110132782610477
http://marc.theaimsgroup.com/?l=linux-kernel&m=110137276318105

BitKeeper hosted project linux
   http://linux.bkbits.net:8080/linux-2.6/cset@41e2bfbeOiXFga62XrBhzm7Kv9QDmQ
   http://linux.bkbits.net:8080/linux-2.6/cset@41ddda70CWJb5nNL71T4MOlG2sMG8A
   http://linux.bkbits.net:8080/linux-2.6/cset@41bc900azV2y9j9FSjVLwmow0n5mmQ

Full-Disclosure
http://lists.netsys.com/pipermail/full-disclosure/2005-January/030660.html

* You may need to update the turbopkg tool before applying the update.
Please refer to the following URL for detailed information.

http://www.turbolinux.com/download/zabom.html
http://www.turbolinux.com/download/zabomupdate.html

Package Update Path
http://www.turbolinux.com/update/

============================================================
* To obtain the public key

Here is the public key

http://www.turbolinux.com/security/

* To unsubscribe from the list

If you ever want to remove yourself from this mailing list,
you can send a message to <server-users-e-ctl@turbolinux.co.jp> with
the word `unsubscribe' in the body (don't include the quotes).

unsubscribe

* To change your email address

If you ever want to chage email address in this mailing list,
you can send a message to <server-users-e-ctl@turbolinux.co.jp> with
the following command in the message body:

chaddr 'old address' 'new address'

If you have any questions or problems, please contact
<supp_info@turbolinux.co.jp>

Thank you!

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.7 (GNU/Linux)

iD8DBQFCIvKDK0LzjOqIJMwRAncWAJ9Td/KT9rtZ7Xp8I2IZniUpHyxPtQCfaVf7
UOb491fmX1YKbHFMTkc+CJk=
=1iyf
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Next message: Bart.Lansing_at_kohls.com: "RE: [lists] RE: [Full-Disclosure] Awake a modem with AT commands"

Previous message: Martin Pitt: "[Full-Disclosure] [USN-88-1] reportbug information disclosure"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

[Full-Disclosure] [TURBOLINUX SECURITY INFO] 07/Apr/2004
... The following page contains the security information of Turbolinux Inc. ... - Turbolinux Appliance Server 1.0 Workgroup Edition ... Source Packages ... Binary Packages ...
(Full-Disclosure)
[Full-Disclosure] [TURBOLINUX SECURITY INFO] 17/Dec/2003
... The following page contains the security information of Turbolinux Inc. ... - Turbolinux 8 Server ... Source Packages ... Binary Packages ...
(Full-Disclosure)
[Full-Disclosure] [TURBOLINUX SECURITY INFO] 27/Aug/2003
... The following page contains the security information of Turbolinux Inc. ... - Turbolinux 8 Server ... Source Packages ... Binary Packages ...
(Full-Disclosure)
[Full-Disclosure] [TURBOLINUX SECURITY INFO] 30/Sep/2003
... The following page contains the security information of Turbolinux Inc. ... proftpd -> ASCII File Remote Compromise Vulnerability ... ProFTPD grew out of the desire to have a secure and configurable FTP server, ... Source Packages ...
(Full-Disclosure)
[Full-Disclosure] [TURBOLINUX SECURITY INFO] 05/Oct/2004
... The following page contains the security information of Turbolinux Inc. ... The vulnerabilities allow remote attackers to cause a denial of service of sauid server services. ... Source Packages ... Binary Packages ...
(Full-Disclosure)