6323763 2001-04-05 17:59 +0200 /70 rader/ <tsl@TRUSTIX.COM>
Sänt av: joel@lysator.liu.se
Importerad: 2001-04-06 06:47 av Brevbäraren
Extern mottagare: BUGTRAQ@SECURITYFOCUS.COM
Externa svar till: tsl@TRUSTIX.COM
Mottagare: Bugtraq (import) <16349>
Ärende: Trustix Security Advisory #2001-0003 - kernel
------------------------------------------------------------
From: tsl@TRUSTIX.COM
To: BUGTRAQ@SECURITYFOCUS.COM
Message-ID: <20010405175944.A6584@thunder.trustix.com>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --------------------------------------------------------------------------
Trustix Secure Linux Security Advisory #2001-0003
Package name: kernel
Severity: Local root exploit
Date: 2001-04-05
Affected versions: TSL 1.01, 1.1, 1.2
- --------------------------------------------------------------------------
Problem description:
Some time ago, a vulnerability was discovered that allowed for root
access through ptrace call in the linux kernel. This was
originally considered fixed in a previous patch, but as it turns
out, it wasn't. This is fixed in kernel version 2.2.19.
Action:
We recommend all systems which has this package installed to be upgraded.
Please see the Kernel Upgrade Howto, available from
<URL:http://www.trustix.net/doc/kernel-upgrade/kernel-upgrade.html>
for more information on how to upgrade your TSL kernel.
Location:
All TSL updates are available from
<URL:http://www.trustix.net/pub/Trustix/updates/>
<URL:ftp://ftp.trustix.net/pub/Trustix/updates/>
Users of the SWUP tool, can enjoy having the security updates
automatically installed using 'swup --upgrade'.
Get SWUP from:
ftp://ftp.trustix.net/pub/Trustix/software/swup/
Note that you may not want to use SWUP to do unattended kernel
upgrades, and it does not do so by default.
Questions?
Check out our mailinglists:
http://www.trustix.net/support/
Verification:
This advisory is signed with the TSL sign key. It is available from:
http://www.trustix.net/TSL-GPG-KEY
Trustix Security Team
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE6zI25wRTcg4BxxS0RAnTXAJ9e/T9ysKpK9TQnXhP7V2aXsCiArgCdF12s
K17kWuT59qtzxW64YMduZFQ=
=m9sm
-----END PGP SIGNATURE-----
--
Trustix Secure Linux Advisor
Homepage: http://www.trustix.net/
Errata: http://www.trustix.net/errata/
Automatic updates: http://www.trustix.net/pub/Trustix/software/swup/
(6323763) / <tsl@TRUSTIX.COM>/------------(Ombruten)