[CLA-2005:945] Conectiva Security Announcement - kernel

From: Conectiva Updates (secure_at_conectiva.com.br)
Date: 03/31/05

Next message: Martin Schulze: "[SECURITY] [DSA 701-1] New samba packages fix arbitrary code execution"

Previous message: Diabolic Crab: "Multiple sql injection, and xss vulnerabilities in Pay pal Storefront"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Thu, 31 Mar 2005 12:29:21 -0300
To: conectiva-updates@papaleguas.conectiva.com.br, lwn@lwn.net, bugtraq@securityfocus.com, security-alerts@linuxsecurity.com, linsec@lists.seifried.org

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- --------------------------------------------------------------------------
CONECTIVA LINUX SECURITY ANNOUNCEMENT
- --------------------------------------------------------------------------

PACKAGE : kernel
SUMMARY : Kernel fixes
DATE : 2005-03-31 12:24:00
ID : CLA-2005:945
RELEVANT
RELEASES : 10

- -------------------------------------------------------------------------

DESCRIPTION
The Linux kernel is responsible for handling the basic functions of
the GNU/Linux operating system.

The following vulnerabilities are being fixed in this update:

1. CAN-2005-0767[1][2]
Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1
allows local users with DRI privileges to execute arbitrary code as
root.

2. CAN-2005-0209[3][4]
Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a
denial of service (kernel crash) via crafted IP packet fragments.

3. CAN-2005-0449[5][6]
The netfilter/iptables module in Linux before 2.6.8.1 allows remote
attackers to cause a denial of service (kernel crash) or bypass
firewall rules via crafted packets, which are not properly handled by
the skb_checksum_help function.

4. CAN-2005-0210[7][8][9]
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a
denial of service (memory consumption) via certain packet fragments
that are reassembled twice, which causes a data structure to be
allocated twice.

These other changes have also been made:
- the base kernel has been upgraded to version 2.6.11.
- the NVidia driver has been upgraded to version 7167
- DRBD has been upgraded to version 0.7.10
- the hsfmodem driver has been upgraded to version 7.18.00.03full
- the slmodem driver has been upgraded to version 2.9.10
- the ndiswrapper driver has been upgraded to version 1.1
- lm_sensors has been upgraded to version 2.9.0[11]

SOLUTION
It is recommended that all Conectiva Linux users perform the
upgrade.

IMPORTANT: exercise caution and preparation when upgrading the
kernel, since it will require a reboot after the new packages are
installed. More detailed instructions are available in Portuguese at
our Q&A page[10].

REFERENCES
1.http://linux.bkbits.net:8080/linux-2.6/cset@42088d17CO1mOAfgW4R46WRTm9gkwA
2.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0767
3.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0209
4.http://linux.bkbits.net:8080/linux-2.6/gnupatch@41f59581p1swNaow4K1aBglV-q2jfQ
5.http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-0449
6.http://linux.bkbits.net:8080/linux-2.6/gnupatch@41f8843a8ZMCNuP3meYAYnnXd3CO_g
7.http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-0210
8.http://linux.bkbits.net:8080/linux-2.5/gnupatch@41fd96c39V0t4MxKFxE1aZn2f4b5UA
9.http://linux.bkbits.net:8080/linux-2.5/gnupatch@41fdb84aBJklcjU85o1N1_dsch6HBw
10.http://www.conectiva.com.br/suporte/pr/sistema.kernel.atualizar.html
11.http://bugzilla.conectiva.com.br/show_bug.cgi?id=13716

ADDITIONAL INSTRUCTIONS
The apt tool can be used to perform RPM packages upgrades:

- run: apt-get update
- after that, execute: apt-get upgrade

Detailed instructions regarding the use of apt and upgrade examples
can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en

- -------------------------------------------------------------------------
All packages are signed with Conectiva's GPG key. The key and instructions
on how to import it can be found at
http://distro.conectiva.com.br/seguranca/chave/?idioma=en
Instructions on how to check the signatures of the RPM packages can be
found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en

- -------------------------------------------------------------------------
All our advisories and generic update instructions can be viewed at
http://distro.conectiva.com.br/atualizacoes/?idioma=en

- -------------------------------------------------------------------------
Copyright (c) 2004 Conectiva Inc.
http://www.conectiva.com

- -------------------------------------------------------------------------
subscribe: conectiva-updates-subscribe@papaleguas.conectiva.com.br
unsubscribe: conectiva-updates-unsubscribe@papaleguas.conectiva.com.br
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQFCTBdQ42jd0JmAcZARAjzaAJ9H+zayl5Pzo6I0/Lyx56fNIvqrxgCfSFRD
zof3kyHyUCWboXUbHEz9HXg=
=/gGQ
-----END PGP SIGNATURE-----

Next message: Martin Schulze: "[SECURITY] [DSA 701-1] New samba packages fix arbitrary code execution"

Previous message: Diabolic Crab: "Multiple sql injection, and xss vulnerabilities in Pay pal Storefront"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

[CLA-2004:846] Conectiva Security Announcement - kernel
... SUMMARY: Fixes for kernel vulnerabilities ... The Linux kernel Vicam USB driver used an insecure method for copying ... after the new packages are installed). ... More detailed instructions are also available in Portuguese ...
(Bugtraq)
[CLA-2004:852] Conectiva Security Announcement - kernel
... SUMMARY: Fixes for kernel vulnerabilities ... netfilter subsystem in Linux kernel 2.6 allows remote attackers to ... It is recommended that all Conectiva Linux users upgrade the kernel ... after the new packages are installed) and by default a new grub entry ...
(Bugtraq)
Debian Etch-->Lenny upgrade, stuck in a loop
... I finally decided that I'd upgrade to Lenny. ... The installation of a 2.6 kernel _could_ ask you to install a new libc ... which tells me to be more specific, giving me list of matching packages. ...
(uk.comp.os.linux)
Re: 2.6 kernel upgrade gives garbled video (w/o X11)
... the Etch packages because of a dependency loop involving libc6. ... not passing any special kernel parameters on boot to the 2.4 kernel ... I was getting this error when trying to upgrade the ... update and then try installing the 2.6 kernel package again? ...
(Debian-User)
Re: [opensuse] Architecture switch 32->64 bit (i386 to x86-64)
... A "simple" upgrade with Yast from 10.3 installmedia leads to lots of dependency problems when resolving the packages. ... I wanted to get my kernel to 64-bits. ... One rpm line shows 55 rpm packages I had to install at same ...
(SuSE)