DESCRIPTION
The Linux kernel is responsible for handling the basic functions of
the GNU/Linux operating system.
A vulnerability in the do_brk() function allows local attackers to
obtain root privileges. Exploits for this vulnerability have already
been published.
Additionally, the following vulnerabilities have been fixed in a
previous kernel release which was available on the ftp server but
lacked an official announcement:
- CAN-2003-0550[2] and CAN-2003-0551[3]: fixes for the STP protocol
- CAN-2003-0501[4]: fix for /proc/information disclosure
- CAN-2003-0464[5]: fix for RPC code (affects only CL9)
- CAN-2003-0476[6]: fix for the execve system call which could allow
local users to gain access to restricted file descriptors
Specific for Conectiva Linux 8 (already fixed in a previous
announcement for CL9[7]):
- CAN-2003-0619[8]: fix for XDR code
- CAN-2003-0246[9]: ioperm fix
- CAN-2003-0248[10]: mxcsr fix
- CAN-2003-0364[11]: TCP/IP fragments denial of service
- CAN-2003-0244[12]: denial of service in routing table
- CAN-2003-0247[13]: denial of service in the TTY layer
Starting with this update, Conectiva Linux 9 has support for the PPTP
protocol, which also requires an update for the iptables package.
SOLUTION
It is recommended that all Conectiva Linux users upgrade the kernel
package.
IMPORTANT: exercise caution and preparation when upgrading the
kernel, since it will require a reboot after the new packages are
installed. In particular, Conectiva Linux 9 will most likely require
an initrd file (which is automatically created in the /boot directory
after the new packages are installed). Generic kernel update
instructions can be obtained in the manuals and in our updates
page[15]. More detailed instructions are also available in Portuguese
at our Moin[14] page.
