Share your story
The central voice for Linux and Open Source security news
Home News Topics Advisories HOWTOs Features Newsletters About Register

Sign up!
EnGarde Community
What is the most important Linux security technology?
Linux Events
Linux User Groups
Link to Us
Security Center
Book Reviews
Security Dictionary
Security Tips
White Papers
Featured Blogs
All About Linux
DanWalsh LiveJournal
Latest Newsletters
Linux Security Week: January 27th, 2015
Linux Advisory Watch: January 23rd, 2015
LinuxSecurity Newsletters
Choose Lists:
About our Newsletters
RSS Feeds
Get the LinuxSecurity news you want faster with RSS
Powered By

Mandriva: Updated kernel packages fix multiple vulnerabilities and bugs Print E-mail
User Rating:      How can I rate this item?
Posted by Benjamin D. Thomas   
Mandrake Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel. The following CVEIDs have been addressed by this vulnerability: (CVE-2006-4813), (CVE-2006-4997), (CVE-2006-5158), (CVE-2006-5619), (CVE-2006-5749), (CVE-2006-5751), (CVE-2006-5757), (CVE-2006-6106)
 Mandriva Linux Security Advisory                         MDKSA-2007:012
 Package : kernel
 Date    : January 12, 2007
 Affected: 2006.0, Corporate 4.0
 Problem Description:
 Some vulnerabilities were discovered and corrected in the Linux 2.6

 The __block_prepate_write function in the 2.6 kernel before 2.6.13 does
 not properly clear buffers during certain error conditions, which
 allows users to read portions of files that have been unlinked

 The clip_mkip function of the ATM subsystem in the 2.6 kernel allows
 remote attackers to dause a DoS (panic) via unknown vectors that cause
 the ATM subsystem to access the memory of socket buffers after they are
 freed (CVE-2006-4997).

 The NFS lockd in the 2.6 kernel before 2.6.16 allows remote attackers
 to cause a DoS (process crash) and deny access to NFS exports via
 unspecified vectors that trigger a kernel oops and a deadlock

 The seqfile handling in the 2.6 kernel up to 2.6.18 allows local users
 to cause a DoS (hang or oops) via unspecified manipulations that
 trigger an infinite loop while searching for flowlabels

 A missing call to init_timer() in the isdn_ppp code of the Linux kernel
 can allow remote attackers to send a special kind of PPP pakcet which
 may trigger a kernel oops (CVE-2006-5749).

 An integer overflow in the 2.6 kernel prior to could allow a
 local user to execute arbitrary code via a large maxnum value in an
 ioctl request (CVE-2006-5751).

 A race condition in the ISO9660 filesystem handling could allow a local
 user to cause a DoS (infinite loop) by mounting a crafted ISO9660
 filesystem containing malformed data structures (CVE-2006-5757).

 A vulnerability in the bluetooth support could allow for overwriting
 internal CMTP and CAPI data structures via malformed packets

 The provided packages are patched to fix these vulnerabilities.  All
 users are encouraged to upgrade to these updated kernels immediately
 and reboot to effect the fixes.

 In addition to these security fixes, other fixes have been included
 such as:

 - __bread oops fix

 - added e1000_ng (nineveh support)

 - added sata_svw (Broadcom SATA support)

 - added Marvell PATA chipset support

 - disabled mmconf on some broken hardware/BIOSes

 - use GENERICARCH and enable bigsmp apic model for tulsa machines

 To update your kernel, please follow the directions located at:

 Updated Packages:
 Mandriva Linux 2006.0:
 216001d652fabd832ececf7cf9c95c06  2006.0/i586/kernel-
 cdbd68f744d8d3ee6f0a0ed06b026009  2006.0/i586/kernel-BOOT-
 7d2a30c05269de7665eeb4e7cf70c331  2006.0/i586/kernel-doc-
 bcc0dbbdb3fab97b48ba7e8f8222726d  2006.0/i586/kernel-i586-up-1GB-
 4e5f28170ff06990ebd5161628768788  2006.0/i586/kernel-i686-up-4GB-
 e2b082f507336f699b15a7b9ac6ab690  2006.0/i586/kernel-smp-
 5340dc709650361a7e00aa348650dffb  2006.0/i586/kernel-source-
 2816a03b52913c6e49cb0624b16818e4  2006.0/i586/kernel-source-stripped-
 280c941e5a443928475e7a2bdb6dafc2  2006.0/i586/kernel-xbox-
 d8dac00da6f9404192d080f9afa121ec  2006.0/i586/kernel-xen0-
 9f82a34d60c3eee2b3346f5613de8118  2006.0/i586/kernel-xenU- 
 428e0b597e1aeeb045a809b610678276  2006.0/SRPMS/kernel-

 Mandriva Linux 2006.0/X86_64:
 f7f2e8ee35b0110a43c9d1efab28c64f  2006.0/x86_64/kernel-
 8b7b2786b0b41ddc8184e89cbc19040b  2006.0/x86_64/kernel-BOOT-
 2be165973d0f5aae26a0c1648858bd1b  2006.0/x86_64/kernel-doc-
 bf7e5235f52befa60c7593f8d3a586ea  2006.0/x86_64/kernel-smp-
 2578c75a975945e0dd4b6d851f847c6a  2006.0/x86_64/kernel-source-
 40bcc0d30d9966a6ee6d25bf2ae16956  2006.0/x86_64/kernel-source-stripped-
 1692695d617d9d7bd6449e5ac2008b67  2006.0/x86_64/kernel-xen0-
 ed3afd03e76be23d0cda2e7f9e181993  2006.0/x86_64/kernel-xenU- 
 428e0b597e1aeeb045a809b610678276  2006.0/SRPMS/kernel-

 Corporate 4.0:
 216001d652fabd832ececf7cf9c95c06  corporate/4.0/i586/kernel-
 cdbd68f744d8d3ee6f0a0ed06b026009  corporate/4.0/i586/kernel-BOOT-
 7d2a30c05269de7665eeb4e7cf70c331  corporate/4.0/i586/kernel-doc-
 bcc0dbbdb3fab97b48ba7e8f8222726d  corporate/4.0/i586/kernel-i586-up-1GB-
 4e5f28170ff06990ebd5161628768788  corporate/4.0/i586/kernel-i686-up-4GB-
 e2b082f507336f699b15a7b9ac6ab690  corporate/4.0/i586/kernel-smp-
 5340dc709650361a7e00aa348650dffb  corporate/4.0/i586/kernel-source-
 2816a03b52913c6e49cb0624b16818e4  corporate/4.0/i586/kernel-source-stripped-
 280c941e5a443928475e7a2bdb6dafc2  corporate/4.0/i586/kernel-xbox-
 d8dac00da6f9404192d080f9afa121ec  corporate/4.0/i586/kernel-xen0-
 9f82a34d60c3eee2b3346f5613de8118  corporate/4.0/i586/kernel-xenU- 
 428e0b597e1aeeb045a809b610678276  corporate/4.0/SRPMS/kernel-

 Corporate 4.0/X86_64:
 f7f2e8ee35b0110a43c9d1efab28c64f  corporate/4.0/x86_64/kernel-
 8b7b2786b0b41ddc8184e89cbc19040b  corporate/4.0/x86_64/kernel-BOOT-
 2be165973d0f5aae26a0c1648858bd1b  corporate/4.0/x86_64/kernel-doc-
 bf7e5235f52befa60c7593f8d3a586ea  corporate/4.0/x86_64/kernel-smp-
 2578c75a975945e0dd4b6d851f847c6a  corporate/4.0/x86_64/kernel-source-
 40bcc0d30d9966a6ee6d25bf2ae16956  corporate/4.0/x86_64/kernel-source-stripped-
 1692695d617d9d7bd6449e5ac2008b67  corporate/4.0/x86_64/kernel-xen0-
 ed3afd03e76be23d0cda2e7f9e181993  corporate/4.0/x86_64/kernel-xenU- 
 428e0b597e1aeeb045a809b610678276  corporate/4.0/SRPMS/kernel-

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver 0x22458A98

 You can view other update advisories for Mandriva Linux at:

 If you want to report vulnerabilities, please contact


 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
< Prev   Next >


Latest Features
Peter Smith Releases Linux Network Security Online
Securing a Linux Web Server
Password guessing with Medusa 2.0
Password guessing as an attack vector
Squid and Digest Authentication
Squid and Basic Authentication
Demystifying the Chinese Hacking Industry: Earning 6 Million a Night
Free Online security course (LearnSIA) - A Call for Help
What You Need to Know About Linux Rootkits
Review: A Practical Guide to Fedora and Red Hat Enterprise Linux - Fifth Edition
Yesterday's Edition
No, Department of Justice, 80 Percent of Tor Traffic Is Not Child Porn
Is your platform secure? Really?
'Mastermind' hacker steals 20 million credentials from dating website
Partner Sponsor

Community | HOWTOs | Blogs | Features | Book Reviews | Networking
 Security Projects |  Latest News |  Newsletters |  SELinux |  Privacy |  Home
 Hardening |   About Us |   Advertise |   Legal Notice |   RSS |   Guardian Digital
(c)Copyright 2015 Guardian Digital, Inc. All rights reserved.