Mandrake Linux Advisories: cdrecord, lpr

Mandrake Linux Security Update Advisory

Problem Description:

A vulnerability in cdrecord was discovered that can be used to
obtain root access because Mandrake Linux ships with the cdrecord
binary suid root and sgid cdwriter.

Updated packages are provided that fix this vulnerability. You
may also elect to remove the suid and sgid bits from cdrecord
manually, which can be done by executing, as root:

   chmod ug-s /usr/bin/cdrecord
 

This is not required to protect yourself from this particular
vulnerability, however.

Update:

Two additional format string problems were discovered by Olaf
Kirch and an updated patch has been applied to fix those problems
as well.

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0289

http://marc.theaimsgroup.com/?l=bugtraq&m=105285564307225&w=2

Updated Packages:

Corporate Server 2.1:

Mandrake Linux 8.2:

Mandrake Linux 8.2/PPC:

Mandrake Linux 9.0:

Mandrake Linux 9.1:

Mandrake Linux 9.1/PPC:

Bug IDs fixed (see https://qa.mandrakesoft.com for
more information):

To upgrade automatically, use MandrakeUpdate. The verification
of md5 checksums and GPG signatures is performed automatically for
you.

If you want to upgrade manually, download the updated package
from one of our FTP server mirrors and upgrade with “rpm -Fvh
*.rpm”. A list of FTP mirrors can be obtained from:

http://www.mandrakesecure.net/en/ftp.php

Please verify the update prior to upgrading to ensure the
integrity of the downloaded package. You can do this with the
command:

rpm –checksig <filename>

All packages are signed by MandrakeSoft for security. You can
obtain the GPG public key of the Mandrake Linux Security Team
from:

https://www.mandrakesecure.net/RPM-GPG-KEYS

Please be aware that sometimes it takes the mirrors a few hours
to update.

You can view other update advisories for Mandrake Linux at:

http://www.mandrakesecure.net/en/advisories/

MandrakeSoft has several security-related mailing list services
that anyone can subscribe to. Information on these lists can be
obtained by visiting:

http://www.mandrakesecure.net/en/mlist.php

If you want to report vulnerabilities, please contact

security_linux-mandrake.com

<security linux-mandrake.com>

Mandrake Linux Security Update Advisory

Problem Description:

A buffer overflow was discovered in the lpr printer spooling
system that can be exploited by a local user to gain root
privileges. This can be done even if the printer is configured
properly.

References:

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0144

Updated Packages:

Mandrake Linux 8.2:

Mandrake Linux 8.2/PPC:

Bug IDs fixed (see https://qa.mandrakesoft.com for
more information):

To upgrade automatically, use MandrakeUpdate. The verification
of md5 checksums and GPG signatures is performed automatically for
you.

If you want to upgrade manually, download the updated package
from one of our FTP server mirrors and upgrade with “rpm -Fvh
*.rpm”. A list of FTP mirrors can be obtained from:

http://www.mandrakesecure.net/en/ftp.php

Please verify the update prior to upgrading to ensure the
integrity of the downloaded package. You can do this with the
command:

rpm –checksig <filename>

All packages are signed by MandrakeSoft for security. You can
obtain the GPG public key of the Mandrake Linux Security Team
from:

https://www.mandrakesecure.net/RPM-GPG-KEYS

Please be aware that sometimes it takes the mirrors a few hours
to update.

You can view other update advisories for Mandrake Linux at:

http://www.mandrakesecure.net/en/advisories/

MandrakeSoft has several security-related mailing list services
that anyone can subscribe to. Information on these lists can be
obtained by visiting:

http://www.mandrakesecure.net/en/mlist.php

If you want to report vulnerabilities, please contact

security_linux-mandrake.com

<security linux-mandrake.com>