Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Sign up!
EnGarde Community
What is the most important Linux security technology?
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Latest Newsletters
Linux Advisory Watch: March 27th, 2015
Linux Security Week: March 23rd, 2015
LinuxSecurity Newsletters
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

Mandrake: 'kernel' devfs vulnerability Print E-mail
User Rating:      How can I rate this item?
Posted by Team   
Mandrake As a workaround, until an update becomes available, please boot with the devfs=nomount option.


                Mandrake Linux Security Update Advisory

Package name:           kernel
Date:                   November 20th, 2001
Original Advisory Date: October 8th, 2001
Advisory ID:            MDKSA-2001:079-1

Affected versions:      8.0, 8.1

Problem Description:

 Alexander Viro discovered a vulnerability in the devfs implementation
 that is shipped with Mandrake Linux 8.1.  We are aware of the problem
 and are currently working on a solution.  As a workaround, until an
 update becomes available, please boot with the devfs=nomount option.


 Rafal Wojtczuk found a vulnerability in the 2.2.19 and 2.4.11 Linux
 kernels with the ptrace code and deeply nested symlinks spending an
 arbitrary amount of time in the kernel code.  The ptrace vulnerability
 could be used by local users to gain root privilege, the symlink
 vulnerability could result in a local DoS.

 There is an additional vulnerability in the kernel's syncookie code
 which could potentially allow a remote attacker to guess the cookie
 and bypass existing firewall rules.  The discovery was found by Manfred
 Spraul and Andi Kleen.

 NOTE: This update is *not* meant to be done via MandrakeUpdate!  You
 must download the necessary RPMs and upgrade manually by following
 these steps:

   1.  Type: rpm -ivh kernel-[version].i586.rpm
   2.  Type: mv kernel-[version].i586.rpm /tmp
   3.  Type: rpm -Fvh *.rpm
   4a. You may wish to edit /etc/lilo.conf to ensure a new entry is in
       place.  The new kernel will be the last entry.  Change any options
       you need to change.  You will also want to create a new entry with
       the initrd and image directives pointing to the old kernel's
       vmlinuz and initrd images so you may also boot from the old
       images if required.
   4b. PPC users must execute some additional instructions.  First edit
       /etc/yaboot.conf and add a new entry for the kernel and change
       any options that you need to change.  You must also create a new
       initrd image to enable USB support for keyboards and mice by
         mkinitrd --with=usb-ohci /boot/initrd-2.4.8-31.3mdk 2.4.8-31.3mdk
   5a. If you use lilo, type: /sbin/lilo -v
   5b. If you use GRUB, type: sh /boot/grub/
   5c. PPC users must type: /sbin/ybin -v

 You may then reboot and use the new kernel and remove the older kernel
 when you are comfortable using the upgraded one.


Please verify the update prior to upgrading to ensure the integrity of
the downloaded package.  You can do this with the command:
  rpm --checksig package.rpm
You can get the GPG public key of the Mandrake Linux Security Team at
If you use MandrakeUpdate, the verification of md5 checksum and GPG
signature is performed automatically for you.

Mandrake Linux 8.0:
c06d61d09887f1e5ac96688b417d5530  8.0/RPMS/kernel-2.4.8-31.2mdk.i586.rpm
b68609db486f9ad32478a8e8ae3002bb  8.0/RPMS/kernel-doc-2.4.8-31.2mdk.i586.rpm
5d16f8f9d6af21f7454663715ec586c7  8.0/RPMS/kernel-enterprise-2.4.8-31.2mdk.i586.rpm
845e68323ad61919b8702b3352114537  8.0/RPMS/kernel-headers-2.4.8-31.2mdk.i586.rpm
cc08db1a3df3f1ac9f4093246c06e5be  8.0/RPMS/kernel-pcmcia-cs-2.4.8-31.2mdk.i586.rpm
202531142a98174a62249d0d31131d17  8.0/RPMS/kernel-smp-2.4.8-31.2mdk.i586.rpm
8d7bd827e13b1d76f75569e92b8ecd1c  8.0/RPMS/kernel-source-2.4.8-31.2mdk.i586.rpm
5d26269acdd4a9c495c641472a4e3997  8.0/RPMS/iptables-1.2.4-1.2mdk.i586.rpm
cc5f29b474658d4a62c36921ac481994  8.0/RPMS/iptables-ipv6-1.2.4-1.2mdk.i586.rpm
b94a340b5dbd786a064408a0cce86378  8.0/SRPMS/kernel-2.4.8-31.2mdk.src.rpm
0594f5c83b5211a3b7e53e33573cd624  8.0/SRPMS/iptables-1.2.4-1.2mdk.src.rpm

Mandrake Linux 8.0 (PPC):
0aa32aede5b608d28b6d9fbaa4c63cc6  ppc/8.0/RPMS/kernel-2.4.8-31.3mdk.ppc.rpm
f149d44938b761469cc2e7cb3941ba35  ppc/8.0/RPMS/kernel-doc-2.4.8-31.3mdk.ppc.rpm
1e6a534996f0607691017558d29e4d25  ppc/8.0/RPMS/kernel-headers-2.4.8-31.3mdk.ppc.rpm
de3d61cd0fc4607b4d0d06218c038abd  ppc/8.0/RPMS/kernel-pcmcia-cs-2.4.8-31.3mdk.ppc.rpm
497d1605e64307f3a59a59950cf859d4  ppc/8.0/RPMS/kernel-smp-2.4.8-31.3mdk.ppc.rpm
b89aeb776055a44482e30f0b517b0a3a  ppc/8.0/RPMS/kernel-source-2.4.8-31.3mdk.ppc.rpm
5f56bcb641218c4400b557856c9803a5  ppc/8.0/RPMS/iptables-1.2.4-1.2mdk.ppc.rpm
bdec7f857adc7714ba94f3a8c33892e4  ppc/8.0/RPMS/iptables-ipv6-1.2.4-1.2mdk.ppc.rpm
239f261222d20e7ba02a22dbc688083b  ppc/8.0/RPMS/mol-kmods-0.9.60-1.1mdk.ppc.rpm
955de0bd16773e32dc05d0a924d9af8d  ppc/8.0/SRPMS/kernel-2.4.8-31.3mdk.src.rpm
0594f5c83b5211a3b7e53e33573cd624  ppc/8.0/SRPMS/iptables-1.2.4-1.2mdk.src.rpm
c347a001bc50800b063b0bcc4042baf9  ppc/8.0/SRPMS/mol-kmods-0.9.60-1.1mdk.src.rpm

Mandrake Linux 8.1:
ac948f0f05c237828b9be37f294192f9  8.1/RPMS/kernel-2.4.8-34.1mdk.i586.rpm
456abd9dd5678c2e01ec35ebf2401a39  8.1/RPMS/kernel-doc-2.4.8-34.1mdk.i586.rpm
2e96d98445e0b89d64295a79839ef27c  8.1/RPMS/kernel-enterprise-2.4.8-34.1mdk.i586.rpm
0aa5966f6d53af5e1473e6bf1b891403  8.1/RPMS/kernel-headers-2.4.8-34.1mdk.i586.rpm
429325fb8bc48392ea182d6f2e0f2849  8.1/RPMS/kernel-pcmcia-cs-2.4.8-34.1mdk.i586.rpm
f0cfd6472b15f22b1820b948a3c78537  8.1/RPMS/kernel-smp-2.4.8-34.1mdk.i586.rpm
9564cb8602d480dc035b7e5919af7fe6  8.1/RPMS/kernel-source-2.4.8-34.1mdk.i586.rpm
6196af50631c01ad75224ad224509b2d  8.1/RPMS/iptables-1.2.4-1.1mdk.i586.rpm
e374e4488342312a8deaa28e2d8796ac  8.1/RPMS/iptables-ipv6-1.2.4-1.1mdk.i586.rpm
12f133a9760bce2c7fb06939c2afd180  8.1/SRPMS/kernel-2.4.8-34.1mdk.src.rpm
24bdff60d2a6fadc8abe2a47619590d8  8.1/SRPMS/iptables-1.2.4-1.1mdk.src.rpm

Bug IDs fixed (see for more information):


To upgrade automatically, use MandrakeUpdate.

If you want to upgrade manually, download the updated package from one
of our FTP server mirrors and upgrade with "rpm -Fvh *.rpm".

You can download the updates directly from one of the mirror sites
listed at:

Updated packages are available in the "updates/[ver]/RPMS/" directory.
For example, if you are looking for an updated RPM package for
Mandrake Linux 8.0, look for it in "updates/8.0/RPMS/".  Updated source
RPMs are available as well, but you generally do not need to download

Please be aware that sometimes it takes the mirrors a few hours to

You can view other security advisories for Mandrake Linux at:

If you want to report vulnerabilities, please contact

Mandrake Linux has two security-related mailing list services that
anyone can subscribe to:

  Mandrake Linux's security announcements mailing list.  Only
  announcements are sent to this list and it is read-only.

  Mandrake Linux's security discussion mailing list.  This list is open
  to anyone to discuss Mandrake Linux security specifically and Linux
  security in general.

To subscribe to either list, send a message to
with "subscribe [listname]" in the body of the message.

To remove yourself from either list, send a message to
with "unsubscribe [listname]" in the body of the message.

To get more information on either list, send a message to
with "info [listname]" in the body of the message.

Optionally, you can use the web interface to subscribe to or unsubscribe
from either list:

Type Bits/KeyID     Date       User ID
pub  1024D/22458A98 2000-07-10 Linux Mandrake Security Team

Version: GnuPG v1.0.5 (GNU/Linux)
Comment: For info see


< Prev   Next >


Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
FBI Quietly Removes Recommendation To Encrypt Your Phone
And the prize for LEAST SECURE BROWSER goes to ... Chrome!
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2015 Guardian Digital, Inc. All rights reserved.