lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Fri, 12 Jan 2007 12:57:09 -0700
Subject: [ MDKSA-2007:012 ] - Updated kernel packages fix multiple vulnerabilities and bugs

Hash: SHA1

 Mandriva Linux Security Advisory                         MDKSA-2007:012
 Package : kernel
 Date    : January 12, 2007
 Affected: 2006.0, Corporate 4.0
 Problem Description:
 Some vulnerabilities were discovered and corrected in the Linux 2.6

 The __block_prepate_write function in the 2.6 kernel before 2.6.13 does
 not properly clear buffers during certain error conditions, which
 allows users to read portions of files that have been unlinked

 The clip_mkip function of the ATM subsystem in the 2.6 kernel allows
 remote attackers to dause a DoS (panic) via unknown vectors that cause
 the ATM subsystem to access the memory of socket buffers after they are
 freed (CVE-2006-4997).

 The NFS lockd in the 2.6 kernel before 2.6.16 allows remote attackers
 to cause a DoS (process crash) and deny access to NFS exports via
 unspecified vectors that trigger a kernel oops and a deadlock

 The seqfile handling in the 2.6 kernel up to 2.6.18 allows local users
 to cause a DoS (hang or oops) via unspecified manipulations that
 trigger an infinite loop while searching for flowlabels

 A missing call to init_timer() in the isdn_ppp code of the Linux kernel
 can allow remote attackers to send a special kind of PPP pakcet which
 may trigger a kernel oops (CVE-2006-5749).

 An integer overflow in the 2.6 kernel prior to could allow a
 local user to execute arbitrary code via a large maxnum value in an
 ioctl request (CVE-2006-5751).

 A race condition in the ISO9660 filesystem handling could allow a local
 user to cause a DoS (infinite loop) by mounting a crafted ISO9660
 filesystem containing malformed data structures (CVE-2006-5757).

 A vulnerability in the bluetooth support could allow for overwriting
 internal CMTP and CAPI data structures via malformed packets

 The provided packages are patched to fix these vulnerabilities.  All
 users are encouraged to upgrade to these updated kernels immediately
 and reboot to effect the fixes.

 In addition to these security fixes, other fixes have been included
 such as:

 - __bread oops fix

 - added e1000_ng (nineveh support)

 - added sata_svw (Broadcom SATA support)

 - added Marvell PATA chipset support

 - disabled mmconf on some broken hardware/BIOSes

 - use GENERICARCH and enable bigsmp apic model for tulsa machines

 To update your kernel, please follow the directions located at:

 Updated Packages:
 Mandriva Linux 2006.0:
 216001d652fabd832ececf7cf9c95c06  2006.0/i586/kernel-
 cdbd68f744d8d3ee6f0a0ed06b026009  2006.0/i586/kernel-BOOT-
 7d2a30c05269de7665eeb4e7cf70c331  2006.0/i586/kernel-doc-
 bcc0dbbdb3fab97b48ba7e8f8222726d  2006.0/i586/kernel-i586-up-1GB-
 4e5f28170ff06990ebd5161628768788  2006.0/i586/kernel-i686-up-4GB-
 e2b082f507336f699b15a7b9ac6ab690  2006.0/i586/kernel-smp-
 5340dc709650361a7e00aa348650dffb  2006.0/i586/kernel-source-
 2816a03b52913c6e49cb0624b16818e4  2006.0/i586/kernel-source-stripped-
 280c941e5a443928475e7a2bdb6dafc2  2006.0/i586/kernel-xbox-
 d8dac00da6f9404192d080f9afa121ec  2006.0/i586/kernel-xen0-
 9f82a34d60c3eee2b3346f5613de8118  2006.0/i586/kernel-xenU- 
 428e0b597e1aeeb045a809b610678276  2006.0/SRPMS/kernel-

 Mandriva Linux 2006.0/X86_64:
 f7f2e8ee35b0110a43c9d1efab28c64f  2006.0/x86_64/kernel-
 8b7b2786b0b41ddc8184e89cbc19040b  2006.0/x86_64/kernel-BOOT-
 2be165973d0f5aae26a0c1648858bd1b  2006.0/x86_64/kernel-doc-
 bf7e5235f52befa60c7593f8d3a586ea  2006.0/x86_64/kernel-smp-
 2578c75a975945e0dd4b6d851f847c6a  2006.0/x86_64/kernel-source-
 40bcc0d30d9966a6ee6d25bf2ae16956  2006.0/x86_64/kernel-source-stripped-
 1692695d617d9d7bd6449e5ac2008b67  2006.0/x86_64/kernel-xen0-
 ed3afd03e76be23d0cda2e7f9e181993  2006.0/x86_64/kernel-xenU- 
 428e0b597e1aeeb045a809b610678276  2006.0/SRPMS/kernel-

 Corporate 4.0:
 216001d652fabd832ececf7cf9c95c06  corporate/4.0/i586/kernel-
 cdbd68f744d8d3ee6f0a0ed06b026009  corporate/4.0/i586/kernel-BOOT-
 7d2a30c05269de7665eeb4e7cf70c331  corporate/4.0/i586/kernel-doc-
 bcc0dbbdb3fab97b48ba7e8f8222726d  corporate/4.0/i586/kernel-i586-up-1GB-
 4e5f28170ff06990ebd5161628768788  corporate/4.0/i586/kernel-i686-up-4GB-
 e2b082f507336f699b15a7b9ac6ab690  corporate/4.0/i586/kernel-smp-
 5340dc709650361a7e00aa348650dffb  corporate/4.0/i586/kernel-source-
 2816a03b52913c6e49cb0624b16818e4  corporate/4.0/i586/kernel-source-stripped-
 280c941e5a443928475e7a2bdb6dafc2  corporate/4.0/i586/kernel-xbox-
 d8dac00da6f9404192d080f9afa121ec  corporate/4.0/i586/kernel-xen0-
 9f82a34d60c3eee2b3346f5613de8118  corporate/4.0/i586/kernel-xenU- 
 428e0b597e1aeeb045a809b610678276  corporate/4.0/SRPMS/kernel-

 Corporate 4.0/X86_64:
 f7f2e8ee35b0110a43c9d1efab28c64f  corporate/4.0/x86_64/kernel-
 8b7b2786b0b41ddc8184e89cbc19040b  corporate/4.0/x86_64/kernel-BOOT-
 2be165973d0f5aae26a0c1648858bd1b  corporate/4.0/x86_64/kernel-doc-
 bf7e5235f52befa60c7593f8d3a586ea  corporate/4.0/x86_64/kernel-smp-
 2578c75a975945e0dd4b6d851f847c6a  corporate/4.0/x86_64/kernel-source-
 40bcc0d30d9966a6ee6d25bf2ae16956  corporate/4.0/x86_64/kernel-source-stripped-
 1692695d617d9d7bd6449e5ac2008b67  corporate/4.0/x86_64/kernel-xen0-
 ed3afd03e76be23d0cda2e7f9e181993  corporate/4.0/x86_64/kernel-xenU- 
 428e0b597e1aeeb045a809b610678276  corporate/4.0/SRPMS/kernel-

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver 0x22458A98

 You can view other update advisories for Mandriva Linux at:

 If you want to report vulnerabilities, please contact


 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
Version: GnuPG v1.4.6 (GNU/Linux)


Powered by blists - more mailing lists