Advisories: March 31, 2005

Apr 01, 2005, 04:45 (0 Talkback[s])

Conectiva Linux

CONECTIVA LINUX SECURITY ANNOUNCEMENT

PACKAGE : kernel
SUMMARY : Kernel fixes
DATE : 2005-03-31 12:24:00
ID : CLA-2005:945
RELEVANT RELEASES : 10

DESCRIPTION
The Linux kernel is responsible for handling the basic functions of the GNU/Linux operating system.

The following vulnerabilities are being fixed in this update:

CAN-2005-0767[1][2]
Race condition in the Radeon DRI driver for Linux kernel 2.6.8.1 allows local users with DRI privileges to execute arbitrary code as root.
CAN-2005-0209[3][4]
Netfilter in Linux kernel 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) via crafted IP packet fragments.
CAN-2005-0449[5][6]
The netfilter/iptables module in Linux before 2.6.8.1 allows remote attackers to cause a denial of service (kernel crash) or bypass firewall rules via crafted packets, which are not properly handled by the skb_checksum_help function.
CAN-2005-0210[7][8][9]
Netfilter in the Linux kernel 2.6.8.1 allows local users to cause a denial of service (memory consumption) via certain packet fragments that are reassembled twice, which causes a data structure to be allocated twice.

These other changes have also been made:

the base kernel has been upgraded to version 2.6.11.
the NVidia driver has been upgraded to version 7167
DRBD has been upgraded to version 0.7.10
the hsfmodem driver has been upgraded to version 7.18.00.03 full
the slmodem driver has been upgraded to version 2.9.10
the ndiswrapper driver has been upgraded to version 1.1
lm_sensors has been upgraded to version 2.9.0[11]

SOLUTION
It is recommended that all Conectiva Linux users perform the upgrade.

IMPORTANT: exercise caution and preparation when upgrading the kernel, since it will require a reboot after the new packages are installed. More detailed instructions are available in Portuguese at our Q&A page[10].

REFERENCES
1.http://linux.bkbits.net:8080/linux-2.6/cset@42088d17CO1mOAfgW4R46WRTm9gkwA
2.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0767
3.http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0209
4.http://linux.bkbits.net:8080/linux-2.6/gnupatch@41f59581p1swNaow4K1aBglV-q2jfQ
5.http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-0449
6.http://linux.bkbits.net:8080/linux-2.6/gnupatch@41f8843a8ZMCNuP3meYAYnnXd3CO_g
7.http://cve.mitre.org/cgi-bin/cvename.cgi?name=2005-0210
8.http://linux.bkbits.net:8080/linux-2.5/gnupatch@41fd96c39V0t4MxKFxE1aZn2f4b5UA
9.http://linux.bkbits.net:8080/linux-2.5/gnupatch@41fdb84aBJklcjU85o1N1_dsch6HBw
10.http://www.conectiva.com.br/suporte/pr/sistema.kernel.atualizar.html
11.http://bugzilla.conectiva.com.br/show_bug.cgi?id=13716

ADDITIONAL INSTRUCTIONS
The apt tool can be used to perform RPM packages upgrades:

run: apt-get update
after that, execute: apt-get upgrade

Detailed instructions regarding the use of apt and upgrade examples can be found at http://distro.conectiva.com.br/atualizacoes/#apt?idioma=en

All packages are signed with Conectiva's GPG key. The key and instructions on how to import it can be found at
http://distro.conectiva.com.br/seguranca/chave/?idioma=en Instructions on how to check the signatures of the RPM packages can be found at http://distro.conectiva.com.br/seguranca/politica/?idioma=en

All our advisories and generic update instructions can be viewed at http://distro.conectiva.com.br/atualizacoes/?idioma=en

Debian GNU/Linux

Debian Security Advisory DSA 701-1 security@debian.org
http://www.debian.org/security/ Martin Schulze
March 31st, 2005 http://www.debian.org/security/faq

Package : samba
Vulnerability : integer overflows
Problem-Type : remote
Debian-specific: no
CVE ID : CAN-2004-1154
CERT advisory : VU#226184

Greg MacManus discovered an integer overflow in the smb daemon from Samba, a LanManager like file and printer server for GNU/Linux and Unix-like systems. Requesting a very large number of access control descriptors from the server could exploit the integer overflow, which may result in a buffer overflow which could lead to the execution of arbitrary code with root privileges. Upstream developers have discovered more possible integer overflows that are fixed with this update as well.

For the stable distribution (woody) these problems have been fixed in version 2.2.3a-14.2.

For the unstable distribution (sid) these problems have been fixed in version 3.0.10-1.

We recommend that you upgrade your samba packages.

Upgrade Instructions

wget url

will fetch the file for you
dpkg -i file.deb

will install the referenced file.

If you are using the apt-get package manager, use the line for sources.list as given below:

apt-get update

will update the internal database apt-get upgrade

will install corrected packages

You may use an automated update by adding the resources from the footer to the proper configuration.

Debian GNU/Linux 3.0 alias woody

Source archives:

http://security.debian.org/pool/updates/main/s/samba/samba_2.2.3a-14.2.dsc
Size/MD5 checksum: 775 ed6d755e8e623a887796b1f483c09769
http://security.debian.org/pool/updates/main/s/samba/samba_2.2.3a-14.2.diff.gz
Size/MD5 checksum: 130208 cc39bb74c7553dda203d51f6d8c14aa3
http://security.debian.org/pool/updates/main/s/samba/samba_2.2.3a.orig.tar.gz
Size/MD5 checksum: 5460531 b6ec2f076af69331535a82b586f55254

Architecture independent components:

http://security.debian.org/pool/updates/main/s/samba/samba-doc_2.2.3a-14.2_all.deb
Size/MD5 checksum: 2447006 abf6acd83baeb484d105c8eb1101543b

Alpha architecture:

ARM architecture:

Intel IA-32 architecture:

Intel IA-64 architecture:

HP Precision architecture:

Motorola 680x0 architecture:

http://security.debian.org/pool/updates/main/s/samba/libpam-smbpass_2.2.3a-14.2_m68k.deb
Size/MD5 checksum: 399726 00f799e82545d582d860f46bf10dea70
http://security.debian.org/pool/updates/main/s/samba/libsmbclient_2.2.3a-14.2_m68k.deb
Size/MD5 checksum: 461030 a10f03d2fe355df7e797828fe962c800

Top White Papers

Subscribe to Our Daily Newsletter

Current Newswire:

More on LinuxToday

Advisories: March 31, 2005

Conectiva Linux

Debian GNU/Linux