[CLA-2005:945] Conectiva Security Announcement - kernel

2005-04-0100:00:00

vulners.com

JSON

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

CONECTIVA LINUX SECURITY ANNOUNCEMENT

PACKAGE : kernel
SUMMARY : Kernel fixes
DATE : 2005-03-31 12:24:00
ID : CLA-2005:945
RELEVANT
RELEASES : 10

DESCRIPTION
The Linux kernel is responsible for handling the basic functions of
the GNU/Linux operating system.

The following vulnerabilities are being fixed in this update:

CAN-2005-0767[1][2]
Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1
allows local users with DRI privileges to execute arbitrary code as
root.
CAN-2005-0209[3][4]
Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a
denial of service (kernel crash) via crafted IP packet fragments.
CAN-2005-0449[5][6]
The netfilter/iptables module in Linux before 2.6.8.1 allows remote
attackers to cause a denial of service (kernel crash) or bypass
firewall rules via crafted packets, which are not properly handled by
the skb_checksum_help function.
CAN-2005-0210[7][8][9]
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a
denial of service (memory consumption) via certain packet fragments
that are reassembled twice, which causes a data structure to be
allocated twice.

These other changes have also been made:

the base kernel has been upgraded to version 2.6.11.
the NVidia driver has been upgraded to version 7167
DRBD has been upgraded to version 0.7.10
the hsfmodem driver has been upgraded to version 7.18.00.03full
the slmodem driver has been upgraded to version 2.9.10
the ndiswrapper driver has been upgraded to version 1.1
lm_sensors has been upgraded to version 2.9.0[11]

SOLUTION
It is recommended that all Conectiva Linux users perform the
upgrade.

IMPORTANT: exercise caution and preparation when upgrading the
kernel, since it will require a reboot after the new packages are
installed. More detailed instructions are available in Portuguese at
our Q&A page[10].

REFERENCES
1.http://linux.bkbits.net:8080/linux-2.6/cset@42088d17CO1mOAfgW4R46WRTm9gkwA
2.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0767
3.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0209
4.http://linux.bkbits.net:8080/linux-2.6/gnupatch@41f59581p1swNaow4K1aBglV-q2jfQ
5.http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-0449
6.http://linux.bkbits.net:8080/linux-2.6/gnupatch@41f8843a8ZMCNuP3meYAYnnXd3CO_g
7.http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-0210
8.http://linux.bkbits.net:8080/linux-2.5/gnupatch@41fd96c39V0t4MxKFxE1aZn2f4b5UA
9.http://linux.bkbits.net:8080/linux-2.5/gnupatch@41fdb84aBJklcjU85o1N1_dsch6HBw
10.http://www.conectiva.com.br/suporte/pr/sistema.kernel.atualizar.html
11.http://bugzilla.conectiva.com.br/show_bug.cgi?id=13716

ADDITIONAL INSTRUCTIONS
The apt tool can be used to perform RPM packages upgrades:

run: apt-get update
after that, execute: apt-get upgrade

Detailed instructions regarding the use of apt and upgrade examples
can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en

All packages are signed with Conectiva's GPG key. The key and instructions
on how to import it can be found at
http://distro.conectiva.com.br/seguranca/chave/?idioma=en
Instructions on how to check the signatures of the RPM packages can be
found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en

All our advisories and generic update instructions can be viewed at
http://distro.conectiva.com.br/atualizacoes/?idioma=en

subscribe: [email protected]
unsubscribe: [email protected]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQFCTBdQ42jd0JmAcZARAjzaAJ9H+zayl5Pzo6I0/Lyx56fNIvqrxgCfSFRD
zof3kyHyUCWboXUbHEz9HXg=
=/gGQ
-----END PGP SIGNATURE-----