6069933 2001-02-08 14:52 -0800 /112 rader/ Greg KH <greg@WIREX.COM>
Sänt av: joel@lysator.liu.se
Importerad: 2001-02-09 02:06 av Brevbäraren (som är implementerad i) Python
Extern mottagare: BUGTRAQ@SECURITYFOCUS.COM
Externa svar till: greg@WIREX.COM
Mottagare: Bugtraq (import) <15312>
Ärende: Immunix OS Security update for kernel
------------------------------------------------------------
-----------------------------------------------------------------------
Immunix OS Security Advisory
Packages updated: kernel
Effected products: Immunix OS 6.2 and 7.0-beta
Bugs Fixed: immunix/1324
Date: February 8, 2001
Advisory ID: IMNX-2001-70-002-01
Author: Greg Kroah-Hartman <greg@wirex.com>
-----------------------------------------------------------------------
Description:
Chris Evans has discovered a security problem in the kernel select()
call that can lead to information leakage in the kernel. There has
also been discovered a race condition that could allow an attacker to
attach to a setuid process using ptrace, which would then allow them
to modify that process.
Packages have been created and released for Immunix 6.2 and 7.0-beta
to fix these problems.
Many thanks to Chris Evans for finding and reporting this problem
and to Solar Designer for creating a patch to solve the ptrace
problem.
Package names and locations:
Precompiled binary packages for Immunix 6.2 are available at:
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-2.2.16-22_6.x_imnx_17.i586.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-2.2.16-22_6.x_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-BOOT-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-doc-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-enterprise-2.2.16-22_6.x_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-ibcs-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-pcmcia-cs-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-smp-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-smp-2.2.16-22_6.x_imnx_17.i586.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-smp-2.2.16-22_6.x_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-source-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-utils-2.2.16-22_6.x_imnx_17.i386.rpm
Source package for Immunix 6.2 is available at:
http://immunix.org/ImmunixOS/6.2/updates/SRPMS/kernel-2.2.16-22_6.x_imnx_17.src.rpm
Precompiled binary packages for Immunix 7.0-beta are available at:
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-2.2.16-22_imnx_17.i586.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-2.2.16-22_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-BOOT-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-doc-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-enterprise-2.2.16-22_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-ibcs-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-pcmcia-cs-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-smp-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-smp-2.2.16-22_imnx_17.i586.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-smp-2.2.16-22_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-source-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-utils-2.2.16-22_imnx_17.i386.rpm
Source package for Immunix 7.0-beta is available at:
http://immunix.org/ImmunixOS/7.0-beta/updates/SRPMS/kernel-2.2.16-22_imnx_17.src.rpm
md5sums of the packages:
df5dbb74a15c613fe64318e536de1e66 kernel-2.2.16-22_6.x_imnx_17.i386.rpm
8bbf749f8395bd4d0bd0ea926a265808 kernel-2.2.16-22_6.x_imnx_17.i586.rpm
3dc63a20cfe7170474613e9327ad2675 kernel-2.2.16-22_6.x_imnx_17.i686.rpm
0ef1d08dccec22c90ac18ad132464e4c kernel-BOOT-2.2.16-22_6.x_imnx_17.i386.rpm
f0654f27046912077430f9b1fed57d60 kernel-doc-2.2.16-22_6.x_imnx_17.i386.rpm
15d1d1c683f973faebaa8ba829780294 kernel-enterprise-2.2.16-22_6.x_imnx_17.i686.rpm
f9357a873caf90f046ef76340790f87b kernel-ibcs-2.2.16-22_6.x_imnx_17.i386.rpm
6808ea183ea542320c22bd2f72265256 kernel-pcmcia-cs-2.2.16-22_6.x_imnx_17.i386.rpm
41f7a17a04c657675c14adaf009aba65 kernel-smp-2.2.16-22_6.x_imnx_17.i386.rpm
2fb7856e837ef0a594d16f78a0cc7ab3 kernel-smp-2.2.16-22_6.x_imnx_17.i586.rpm
bfde5df73f35c86753527fa4ba6bd33c kernel-smp-2.2.16-22_6.x_imnx_17.i686.rpm
79c99ff6a9c622c61bc1d3df4810de95 kernel-source-2.2.16-22_6.x_imnx_17.i386.rpm
6c2e3883c4cdf7933cbf718a087e867e kernel-utils-2.2.16-22_6.x_imnx_17.i386.rpm
76297ed4c9573e54e991b8f1b500b9c8 kernel-2.2.16-22_6.x_imnx_17.src.rpm
0816d4f1a4abe8dbd846e5ee0c61a1cb kernel-2.2.16-22_imnx_17.i386.rpm
6425f6dd92945fd3d85833a3fffc331b kernel-2.2.16-22_imnx_17.i586.rpm
d5bdc98964ae349533b00c289eeab254 kernel-2.2.16-22_imnx_17.i686.rpm
564d13e8011f94c6c43d6e6ddd4e6e0c
kernel-BOOT-2.2.16-22_imnx_17.i386.rpm
c00d7628f26e3f5c562cf734a08d8af4
kernel-doc-2.2.16-22_imnx_17.i386.rpm
6ec7422ca74e198b644642ae2f038ccd
kernel-enterprise-2.2.16-22_imnx_17.i686.rpm
11484bad82b5f53ce482985203d4d2b0
kernel-ibcs-2.2.16-22_imnx_17.i386.rpm
a6b8d80fbf01525be7c243bf83c7e9f8
kernel-pcmcia-cs-2.2.16-22_imnx_17.i386.rpm
015f1da64940e0a8ef436412990ad817
kernel-smp-2.2.16-22_imnx_17.i386.rpm
c1707351a66d7d48c04f00a3078ff956
kernel-smp-2.2.16-22_imnx_17.i586.rpm
744917b6dbc99e31adb6d60452045b90
kernel-smp-2.2.16-22_imnx_17.i686.rpm
223fbcae699730aae461ce87528b00d4
kernel-source-2.2.16-22_imnx_17.i386.rpm
7a477544650ff1725b78f7badfa029ef
kernel-utils-2.2.16-22_imnx_17.i386.rpm
f89f3d7842020ac5c260e1160f1ebbcd kernel-2.2.16-22_imnx_17.src.rpm
Online version of all Immunix 6.2 updates and advisories:
http://immunix.org/ImmunixOS/6.2/updates/
Online version of all Immunix 7.0-beta updates and advisories:
http://immunix.org/ImmunixOS/7.0-beta/updates/
NOTE:
Ibiblio is graciously mirroring our updates, so if the links above are
slow, please try:
ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/
or one of the many mirrors available at:
http://www.ibiblio.org/pub/Linux/MIRRORS.html
(6069933) --------------------------------(Ombruten)
Bilaga (application/pgp-signature) i text 6069934
6069934 2001-02-08 14:52 -0800 /10 rader/ Greg KH <greg@WIREX.COM>
Importerad: 2001-02-09 02:06 av Brevbäraren (som är implementerad i) Python
Extern mottagare: BUGTRAQ@SECURITYFOCUS.COM
Externa svar till: greg@WIREX.COM
Mottagare: Bugtraq (import) <15313>
Bilaga (text/plain) till text 6069933
Ärende: Bilaga till: Immunix OS Security update for kernel
------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.3 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE6gyM9Al5ylTeuKpURAnKaAJwL/Kh5lia72fZAkpuFISqUMkFQGQCfXDxg
FEG2DpYb3uIfl9XBWkGKGq4=
=mpIc
-----END PGP SIGNATURE-----
(6069934) ------------------------------------------