![[LWN Logo]](/images/lcorner.png) |
|
![[Timeline]](/images/Included.png) |
Date: Thu, 8 Feb 2001 14:52:45 -0800
From: Greg KH <greg@WIREX.COM>
Subject: Immunix OS Security update for kernel
To: BUGTRAQ@SECURITYFOCUS.COM
--3siQDZowHQqNOShm
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
-----------------------------------------------------------------------
Immunix OS Security Advisory
Packages updated: kernel
Effected products: Immunix OS 6.2 and 7.0-beta
Bugs Fixed: immunix/1324
Date: February 8, 2001
Advisory ID: IMNX-2001-70-002-01
Author: Greg Kroah-Hartman <greg@wirex.com>
-----------------------------------------------------------------------
Description:
Chris Evans has discovered a security problem in the kernel select()
call that can lead to information leakage in the kernel. There has
also been discovered a race condition that could allow an attacker to
attach to a setuid process using ptrace, which would then allow them
to modify that process.
Packages have been created and released for Immunix 6.2 and 7.0-beta
to fix these problems.
Many thanks to Chris Evans for finding and reporting this problem and
to Solar Designer for creating a patch to solve the ptrace problem.
Package names and locations:
Precompiled binary packages for Immunix 6.2 are available at:
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-2.2.16-22_6.x_imnx_17.i586.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-2.2.16-22_6.x_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-BOOT-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-doc-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-enterprise-2.2.16-22_6.x_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-ibcs-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-pcmcia-cs-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-smp-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-smp-2.2.16-22_6.x_imnx_17.i586.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-smp-2.2.16-22_6.x_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-source-2.2.16-22_6.x_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/6.2/updates/RPMS/kernel-utils-2.2.16-22_6.x_imnx_17.i386.rpm
Source package for Immunix 6.2 is available at:
http://immunix.org/ImmunixOS/6.2/updates/SRPMS/kernel-2.2.16-22_6.x_imnx_17.src.rpm
Precompiled binary packages for Immunix 7.0-beta are available at:
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-2.2.16-22_imnx_17.i586.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-2.2.16-22_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-BOOT-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-doc-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-enterprise-2.2.16-22_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-ibcs-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-pcmcia-cs-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-smp-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-smp-2.2.16-22_imnx_17.i586.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-smp-2.2.16-22_imnx_17.i686.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-source-2.2.16-22_imnx_17.i386.rpm
http://immunix.org/ImmunixOS/7.0-beta/updates/RPMS/kernel-utils-2.2.16-22_imnx_17.i386.rpm
Source package for Immunix 7.0-beta is available at:
http://immunix.org/ImmunixOS/7.0-beta/updates/SRPMS/kernel-2.2.16-22_imnx_17.src.rpm
md5sums of the packages:
df5dbb74a15c613fe64318e536de1e66 kernel-2.2.16-22_6.x_imnx_17.i386.rpm
8bbf749f8395bd4d0bd0ea926a265808 kernel-2.2.16-22_6.x_imnx_17.i586.rpm
3dc63a20cfe7170474613e9327ad2675 kernel-2.2.16-22_6.x_imnx_17.i686.rpm
0ef1d08dccec22c90ac18ad132464e4c kernel-BOOT-2.2.16-22_6.x_imnx_17.i386.rpm
f0654f27046912077430f9b1fed57d60 kernel-doc-2.2.16-22_6.x_imnx_17.i386.rpm
15d1d1c683f973faebaa8ba829780294 kernel-enterprise-2.2.16-22_6.x_imnx_17.i686.rpm
f9357a873caf90f046ef76340790f87b kernel-ibcs-2.2.16-22_6.x_imnx_17.i386.rpm
6808ea183ea542320c22bd2f72265256 kernel-pcmcia-cs-2.2.16-22_6.x_imnx_17.i386.rpm
41f7a17a04c657675c14adaf009aba65 kernel-smp-2.2.16-22_6.x_imnx_17.i386.rpm
2fb7856e837ef0a594d16f78a0cc7ab3 kernel-smp-2.2.16-22_6.x_imnx_17.i586.rpm
bfde5df73f35c86753527fa4ba6bd33c kernel-smp-2.2.16-22_6.x_imnx_17.i686.rpm
79c99ff6a9c622c61bc1d3df4810de95 kernel-source-2.2.16-22_6.x_imnx_17.i386.rpm
6c2e3883c4cdf7933cbf718a087e867e kernel-utils-2.2.16-22_6.x_imnx_17.i386.rpm
76297ed4c9573e54e991b8f1b500b9c8 kernel-2.2.16-22_6.x_imnx_17.src.rpm
0816d4f1a4abe8dbd846e5ee0c61a1cb kernel-2.2.16-22_imnx_17.i386.rpm
6425f6dd92945fd3d85833a3fffc331b kernel-2.2.16-22_imnx_17.i586.rpm
d5bdc98964ae349533b00c289eeab254 kernel-2.2.16-22_imnx_17.i686.rpm
564d13e8011f94c6c43d6e6ddd4e6e0c kernel-BOOT-2.2.16-22_imnx_17.i386.rpm
c00d7628f26e3f5c562cf734a08d8af4 kernel-doc-2.2.16-22_imnx_17.i386.rpm
6ec7422ca74e198b644642ae2f038ccd kernel-enterprise-2.2.16-22_imnx_17.i686.rpm
11484bad82b5f53ce482985203d4d2b0 kernel-ibcs-2.2.16-22_imnx_17.i386.rpm
a6b8d80fbf01525be7c243bf83c7e9f8 kernel-pcmcia-cs-2.2.16-22_imnx_17.i386.rpm
015f1da64940e0a8ef436412990ad817 kernel-smp-2.2.16-22_imnx_17.i386.rpm
c1707351a66d7d48c04f00a3078ff956 kernel-smp-2.2.16-22_imnx_17.i586.rpm
744917b6dbc99e31adb6d60452045b90 kernel-smp-2.2.16-22_imnx_17.i686.rpm
223fbcae699730aae461ce87528b00d4 kernel-source-2.2.16-22_imnx_17.i386.rpm
7a477544650ff1725b78f7badfa029ef kernel-utils-2.2.16-22_imnx_17.i386.rpm
f89f3d7842020ac5c260e1160f1ebbcd kernel-2.2.16-22_imnx_17.src.rpm
Online version of all Immunix 6.2 updates and advisories:
http://immunix.org/ImmunixOS/6.2/updates/
Online version of all Immunix 7.0-beta updates and advisories:
http://immunix.org/ImmunixOS/7.0-beta/updates/
NOTE:
Ibiblio is graciously mirroring our updates, so if the links above are
slow, please try:
ftp://ftp.ibiblio.org/pub/Linux/distributions/immunix/
or one of the many mirrors available at:
http://www.ibiblio.org/pub/Linux/MIRRORS.html
--3siQDZowHQqNOShm
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.3 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE6gyM9Al5ylTeuKpURAnKaAJwL/Kh5lia72fZAkpuFISqUMkFQGQCfXDxg
FEG2DpYb3uIfl9XBWkGKGq4=mpIc
-----END PGP SIGNATURE-----
--3siQDZowHQqNOShm--