[SECURITY] [DSA 1636-1] New Linux 2.6.24 packages fix several vulnerabilities

2008-09-1118:16:39

lists.debian.org

Debian Security Advisory DSA-1636-1 [email protected]
http://www.debian.org/security/ dann frazier
Sep 11, 2008 http://www.debian.org/security/faq

Package : linux-2.6.24
Vulnerability : denial of service/information leak
Problem type : local/remote
Debian-specific: no
CVE Id(s) : CVE-2008-3272 CVE-2008-3275 CVE-2008-3276 CVE-2008-3526
CVE-2008-3534 CVE-2008-3535 CVE-2008-3792 CVE-2008-3915

Several vulnerabilities have been discovered in the Linux kernel that may
lead to a denial of service or leak sensitive data. The Common Vulnerabilities
and Exposures project identifies the following problems:

CVE-2008-3272

Tobias Klein reported a locally exploitable data leak in the
snd_seq_oss_synth_make_info() function. This may allow local users
to gain access to sensitive information.

CVE-2008-3275

Zoltan Sogor discovered a coding error in the VFS that allows local users
to exploit a kernel memory leak resulting in a denial of service.

CVE-2008-3276

Eugene Teo reported an integer overflow in the DCCP subsystem that
may allow remote attackers to cause a denial of service in the form
of a kernel panic.

CVE-2008-3526

Eugene Teo reported a missing bounds check in the SCTP subsystem.
By exploiting an integer overflow in the SCTP_AUTH_KEY handling code,
remote attackers may be able to cause a denial of service in the form
of a kernel panic.

CVE-2008-3534

Kel Modderman reported an issue in the tmpfs filesystem that allows
local users to crash a system by triggering a kernel BUG() assertion.

CVE-2008-3535

Alexey Dobriyan discovered an off-by-one-error in the iov_iter_advance
function which can be exploited by local users to crash a system,
resulting in a denial of service.

CVE-2008-3792

Vlad Yasevich reported several NULL pointer reference conditions in
the SCTP subsystem that can be triggered by entering sctp-auth codepaths
when the AUTH feature is inactive. This may allow attackers to cause
a denial of service condition via a system panic.

CVE-2008-3915

Johann Dahm and David Richter reported and issue in the nfsd subsystem
that may allow remote attackers to cause a denial of service via a
buffer overflow.

For the stable distribution (etch), these problems have been fixed in
version 2.6.24-6~etchnhalf.5.

We recommend that you upgrade your linux-2.6.24 packages.

Upgrade instructions

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.

Debian GNU/Linux 4.0 alias etch

Stable updates are available for alpha, amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.

Source archives:

http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-2.6.24_2.6.24-6~etchnhalf.5.dsc
Size/MD5 checksum: 5107 77e0185b5d5efa18885eae513acffa6a
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-2.6.24_2.6.24-6~etchnhalf.5.diff.gz
Size/MD5 checksum: 3932827 40cb2fb2852c48b6da11ef1e0c59a8fa
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-2.6.24_2.6.24.orig.tar.gz
Size/MD5 checksum: 59630522 6b8751d1eb8e71498ba74bbd346343af

Architecture independent packages:

http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-tree-2.6.24_2.6.24-6~etchnhalf.5_all.deb
Size/MD5 checksum: 81100 0382c2c77051367e8efd9d3d933f85ef
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-doc-2.6.24_2.6.24-6~etchnhalf.5_all.deb
Size/MD5 checksum: 4259616 a87291ee36a46fc9c5c040f83afa7f9f
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-source-2.6.24_2.6.24-6~etchnhalf.5_all.deb
Size/MD5 checksum: 46858178 d62d102e8478bb14caa6d0303c68ff6b
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-patch-debian-2.6.24_2.6.24-6~etchnhalf.5_all.deb
Size/MD5 checksum: 749438 9312478438ae81439074ceec72d3a349
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-manual-2.6.24_2.6.24-6~etchnhalf.5_all.deb
Size/MD5 checksum: 1548872 1a56b95a09b2caf8e6347578755d5ba6
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-support-2.6.24-etchnhalf.1_2.6.24-6~etchnhalf.5_all.deb
Size/MD5 checksum: 95464 9950e248bbe489b64444fb60e3e9af1c

alpha architecture (DEC Alpha)

amd64 architecture (AMD x86_64 (AMD64))

http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-image-2.6.24-etchnhalf.1-amd64_2.6.24-6~etchnhalf.5_amd64.deb
Size/MD5 checksum: 19592392 51aeb97069bf645a1d83f31644d2acd9
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-all_2.6.24-6~etchnhalf.5_amd64.deb
Size/MD5 checksum: 80694 78789f369227196bd7dbdff5fc045629
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-amd64_2.6.24-6~etchnhalf.5_amd64.deb
Size/MD5 checksum: 351494 502674a70cbe9afdbbba97d5099a75f1
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-common_2.6.24-6~etchnhalf.5_amd64.deb
Size/MD5 checksum: 3647426 60a20d6c15c10e45ec0b531b60daa131
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-all-amd64_2.6.24-6~etchnhalf.5_amd64.deb
Size/MD5 checksum: 80712 92085dffc99907dbafd4cacaa82cc7e2

arm architecture (ARM)

hppa architecture (HP PA RISC)

i386 architecture (Intel ia32)

ia64 architecture (Intel ia64)

http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-all-ia64_2.6.24-6~etchnhalf.5_ia64.deb
Size/MD5 checksum: 80724 372837a92712b5a9b54103f2bb9635d8
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-image-2.6.24-etchnhalf.1-itanium_2.6.24-6~etchnhalf.5_ia64.deb
Size/MD5 checksum: 32021902 93d9e0596e0eec7cc85290d1b8fdb4e7
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-mckinley_2.6.24-6~etchnhalf.5_ia64.deb
Size/MD5 checksum: 316602 57eedf18d4a935ab0710101e6d6e433e
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-itanium_2.6.24-6~etchnhalf.5_ia64.deb
Size/MD5 checksum: 316872 79e0cd093b41d349a785ffaea9489f71
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-common_2.6.24-6~etchnhalf.5_ia64.deb
Size/MD5 checksum: 3565100 1cafb8379a4b9b0a8652531935417f12
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-all_2.6.24-6~etchnhalf.5_ia64.deb
Size/MD5 checksum: 80704 e8c5a24d1fcc73d57fe4b23c21f38e8b
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-image-2.6.24-etchnhalf.1-mckinley_2.6.24-6~etchnhalf.5_ia64.deb
Size/MD5 checksum: 32203684 51047789d102983ebdcf73a326cb7cdb

mips architecture (MIPS (Big Endian))

mipsel architecture (MIPS (Little Endian))

powerpc architecture (PowerPC)

s390 architecture (IBM S/390)

http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-image-2.6.24-etchnhalf.1-s390_2.6.24-6~etchnhalf.5_s390.deb
Size/MD5 checksum: 6944410 a46dce27cf8f6a2e686a4d6fbb9b542b
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-image-2.6.24-etchnhalf.1-s390x_2.6.24-6~etchnhalf.5_s390.deb
Size/MD5 checksum: 7194788 e61fb18c68cb6bebafe67695624b3077
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-s390x_2.6.24-6~etchnhalf.5_s390.deb
Size/MD5 checksum: 192620 c12d79372aead7d4d588f852498f583e
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-common_2.6.24-6~etchnhalf.5_s390.deb
Size/MD5 checksum: 3427470 0f9280a182571837293166b72b50b952
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-all_2.6.24-6~etchnhalf.5_s390.deb
Size/MD5 checksum: 80702 c4eded01963516ba52d666a7a748f267
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-all-s390_2.6.24-6~etchnhalf.5_s390.deb
Size/MD5 checksum: 80716 e1203e187e67a02ffc0c10c80f869904
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-image-2.6.24-etchnhalf.1-s390-tape_2.6.24-6~etchnhalf.5_s390.deb
Size/MD5 checksum: 1498494 a6491b7cbc9d6cf858af2b410001db7c
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-s390_2.6.24-6~etchnhalf.5_s390.deb
Size/MD5 checksum: 192460 4b1c15482a0625351ed52d848d67580a

sparc architecture (Sun SPARC/UltraSPARC)

http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-sparc64-smp_2.6.24-6~etchnhalf.5_sparc.deb
Size/MD5 checksum: 259178 f4957e611cc4b44ad64104768ae0b608
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-image-2.6.24-etchnhalf.1-sparc64_2.6.24-6~etchnhalf.5_sparc.deb
Size/MD5 checksum: 12978422 da73d56d4fdf9cbd23f7822cfaf8d09a
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-all_2.6.24-6~etchnhalf.5_sparc.deb
Size/MD5 checksum: 80704 98f080cb16ef23c594dedc11db490814
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-sparc64_2.6.24-6~etchnhalf.5_sparc.deb
Size/MD5 checksum: 257012 009089827b74e868db4ca66e840a1fb5
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-common_2.6.24-6~etchnhalf.5_sparc.deb
Size/MD5 checksum: 3649300 525d0c1b3fca5a1c3951200e7cfbb28b
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-headers-2.6.24-etchnhalf.1-all-sparc_2.6.24-6~etchnhalf.5_sparc.deb
Size/MD5 checksum: 80722 f9276e7a9f29afd504667289bbe99ea3
http://security.debian.org/pool/updates/main/l/linux-2.6.24/linux-image-2.6.24-etchnhalf.1-sparc64-smp_2.6.24-6~etchnhalf.5_sparc.deb
Size/MD5 checksum: 13266146 9378f40e6a0dd19e56f21ef6ffa4f7a3

These changes will probably be included in the stable distribution on
its next update.

For apt-get: deb http://security.debian.org/ stable/updates main
For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
Mailing list: [email protected]
Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>

OSVersionArchitecturePackageVersionFilename
Debian4amd64linux-headers-2.6.24-etchnhalf.1-common< 2.6.24-6~etchnhalf.5linux-headers-2.6.24-etchnhalf.1-common_2.6.24-6~etchnhalf.5_amd64.deb
Debian4hppalinux-image-2.6.24-etchnhalf.1-parisc< 2.6.24-6~etchnhalf.5linux-image-2.6.24-etchnhalf.1-parisc_2.6.24-6~etchnhalf.5_hppa.deb
Debian4alphalinux-image-2.6.24-etchnhalf.1-alpha-smp< 2.6.24-6~etchnhalf.5linux-image-2.6.24-etchnhalf.1-alpha-smp_2.6.24-6~etchnhalf.5_alpha.deb
Debian4mipslinux-headers-2.6.24-etchnhalf.1-all< 2.6.24-6~etchnhalf.5linux-headers-2.6.24-etchnhalf.1-all_2.6.24-6~etchnhalf.5_mips.deb
Debian4hppalinux-headers-2.6.24-etchnhalf.1-parisc64-smp< 2.6.24-6~etchnhalf.5linux-headers-2.6.24-etchnhalf.1-parisc64-smp_2.6.24-6~etchnhalf.5_hppa.deb
Debian4mipsellinux-headers-2.6.24-etchnhalf.1-all-mipsel< 2.6.24-6~etchnhalf.5linux-headers-2.6.24-etchnhalf.1-all-mipsel_2.6.24-6~etchnhalf.5_mipsel.deb
Debian4mipslinux-headers-2.6.24-etchnhalf.1-r4k-ip22< 2.6.24-6~etchnhalf.5linux-headers-2.6.24-etchnhalf.1-r4k-ip22_2.6.24-6~etchnhalf.5_mips.deb
Debian4hppalinux-image-2.6.24-etchnhalf.1-parisc64-smp< 2.6.24-6~etchnhalf.5linux-image-2.6.24-etchnhalf.1-parisc64-smp_2.6.24-6~etchnhalf.5_hppa.deb
Debian4sparclinux-headers-2.6.24-etchnhalf.1-sparc64< 2.6.24-6~etchnhalf.5linux-headers-2.6.24-etchnhalf.1-sparc64_2.6.24-6~etchnhalf.5_sparc.deb
Debian4i386linux-headers-2.6.24-etchnhalf.1-all< 2.6.24-6~etchnhalf.5linux-headers-2.6.24-etchnhalf.1-all_2.6.24-6~etchnhalf.5_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	4	amd64	linux-headers-2.6.24-etchnhalf.1-common	< 2.6.24-6~etchnhalf.5	linux-headers-2.6.24-etchnhalf.1-common_2.6.24-6~etchnhalf.5_amd64.deb
Debian	4	hppa	linux-image-2.6.24-etchnhalf.1-parisc	< 2.6.24-6~etchnhalf.5	linux-image-2.6.24-etchnhalf.1-parisc_2.6.24-6~etchnhalf.5_hppa.deb
Debian	4	alpha	linux-image-2.6.24-etchnhalf.1-alpha-smp	< 2.6.24-6~etchnhalf.5	linux-image-2.6.24-etchnhalf.1-alpha-smp_2.6.24-6~etchnhalf.5_alpha.deb
Debian	4	mips	linux-headers-2.6.24-etchnhalf.1-all	< 2.6.24-6~etchnhalf.5	linux-headers-2.6.24-etchnhalf.1-all_2.6.24-6~etchnhalf.5_mips.deb
Debian	4	hppa	linux-headers-2.6.24-etchnhalf.1-parisc64-smp	< 2.6.24-6~etchnhalf.5	linux-headers-2.6.24-etchnhalf.1-parisc64-smp_2.6.24-6~etchnhalf.5_hppa.deb
Debian	4	mipsel	linux-headers-2.6.24-etchnhalf.1-all-mipsel	< 2.6.24-6~etchnhalf.5	linux-headers-2.6.24-etchnhalf.1-all-mipsel_2.6.24-6~etchnhalf.5_mipsel.deb
Debian	4	mips	linux-headers-2.6.24-etchnhalf.1-r4k-ip22	< 2.6.24-6~etchnhalf.5	linux-headers-2.6.24-etchnhalf.1-r4k-ip22_2.6.24-6~etchnhalf.5_mips.deb
Debian	4	hppa	linux-image-2.6.24-etchnhalf.1-parisc64-smp	< 2.6.24-6~etchnhalf.5	linux-image-2.6.24-etchnhalf.1-parisc64-smp_2.6.24-6~etchnhalf.5_hppa.deb
Debian	4	sparc	linux-headers-2.6.24-etchnhalf.1-sparc64	< 2.6.24-6~etchnhalf.5	linux-headers-2.6.24-etchnhalf.1-sparc64_2.6.24-6~etchnhalf.5_sparc.deb
Debian	4	i386	linux-headers-2.6.24-etchnhalf.1-all	< 2.6.24-6~etchnhalf.5	linux-headers-2.6.24-etchnhalf.1-all_2.6.24-6~etchnhalf.5_i386.deb