WINDOWS CENTER: ubuntu-security-announce Digest, Vol 50, Issue 11

Send ubuntu-security-announce mailing list submissions to
ubuntu-security-announce@lists.ubuntu.com

To subscribe or unsubscribe via the World Wide Web, visit
https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
or, via email, send a message with subject or body 'help' to
ubuntu-security-announce-request@lists.ubuntu.com

You can reach the person managing the list at
ubuntu-security-announce-owner@lists.ubuntu.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of ubuntu-security-announce digest..."

Today's Topics:

1. [USN-680-1] Samba vulnerability (Marc Deslauriers)
2. [USN-679-1] Linux kernel vulnerabilities (Kees Cook)

----------------------------------------------------------------------

Message: 1
Date: Thu, 27 Nov 2008 09:22:56 -0500
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Subject: [USN-680-1] Samba vulnerability
To: ubuntu-security-announce@lists.ubuntu.com
Cc: full-disclosure@lists.grok.org.uk, "bugtraq@securityfocus.com"
<bugtraq@securityfocus.com>
Message-ID: <1227795776.7497.25.camel@mdlinux.technorage.com>
Content-Type: text/plain; charset="us-ascii"

===========================================================
Ubuntu Security Notice USN-680-1 November 27, 2008
samba vulnerability
CVE-2008-4314
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 8.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 8.10:
samba 2:3.2.3-1ubuntu3.3

In general, a standard system upgrade is sufficient to effect the
necessary changes.

Details follow:

It was discovered that Samba did not properly perform bounds checking
in certain operations. A remote attacker could possibly exploit this to
read arbitrary memory contents of the smb process, which could contain
sensitive infomation or possibly have other impacts, such as a denial of
service.

Updated packages for Ubuntu 8.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.2.3-1ubuntu3.3.diff.gz
Size/MD5: 228354 f83899fe1c0310461296b328ad6bfd8a
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.2.3-1ubuntu3.3.dsc
Size/MD5: 1902 bddef52582baae072593399147119e19
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba_3.2.3.orig.tar.gz
Size/MD5: 23704996 c1630a57ac0ec24bc364c6d11c93ec35

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-doc-pdf_3.2.3-1ubuntu3.3_all.deb
Size/MD5: 6261250 3cba32a86b765dfea7077fa0ef8a3672
http://security.ubuntu.com/ubuntu/pool/main/s/samba/samba-doc_3.2.3-1ubuntu3.3_all.deb
Size/MD5: 7954632 af31dc4ce959b1a05be7944262bb460a

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

i386 architecture (x86 compatible Intel/AMD):

lpia architecture (Low Power Intel Architecture):

powerpc architecture (Apple Macintosh G3/G4/G5):

sparc architecture (Sun SPARC/UltraSPARC):

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20081127/e29c4eb6/attachment-0001.pgp

------------------------------

Message: 2
Date: Thu, 27 Nov 2008 09:51:15 -0800
From: Kees Cook <kees@ubuntu.com>
Subject: [USN-679-1] Linux kernel vulnerabilities
To: ubuntu-security-announce@lists.ubuntu.com
Cc: full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com
Message-ID: <20081127175115.GK25309@outflux.net>
Content-Type: text/plain; charset="us-ascii"

===========================================================
Ubuntu Security Notice USN-679-1 November 27, 2008
linux, linux-source-2.6.15/22 vulnerabilities
CVE-2007-5498, CVE-2008-3831, CVE-2008-4210, CVE-2008-4554,
CVE-2008-4576, CVE-2008-4618, CVE-2008-4933, CVE-2008-4934,
CVE-2008-5025, CVE-2008-5029, CVE-2008-5033
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 6.06 LTS
Ubuntu 7.10
Ubuntu 8.04 LTS
Ubuntu 8.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 6.06 LTS:
linux-image-2.6.15-53-386 2.6.15-53.74
linux-image-2.6.15-53-686 2.6.15-53.74
linux-image-2.6.15-53-amd64-generic 2.6.15-53.74
linux-image-2.6.15-53-amd64-k8 2.6.15-53.74
linux-image-2.6.15-53-amd64-server 2.6.15-53.74
linux-image-2.6.15-53-amd64-xeon 2.6.15-53.74
linux-image-2.6.15-53-hppa32 2.6.15-53.74
linux-image-2.6.15-53-hppa32-smp 2.6.15-53.74
linux-image-2.6.15-53-hppa64 2.6.15-53.74
linux-image-2.6.15-53-hppa64-smp 2.6.15-53.74
linux-image-2.6.15-53-itanium 2.6.15-53.74
linux-image-2.6.15-53-itanium-smp 2.6.15-53.74
linux-image-2.6.15-53-k7 2.6.15-53.74
linux-image-2.6.15-53-mckinley 2.6.15-53.74
linux-image-2.6.15-53-mckinley-smp 2.6.15-53.74
linux-image-2.6.15-53-powerpc 2.6.15-53.74
linux-image-2.6.15-53-powerpc-smp 2.6.15-53.74
linux-image-2.6.15-53-powerpc64-smp 2.6.15-53.74
linux-image-2.6.15-53-server 2.6.15-53.74
linux-image-2.6.15-53-server-bigiron 2.6.15-53.74
linux-image-2.6.15-53-sparc64 2.6.15-53.74
linux-image-2.6.15-53-sparc64-smp 2.6.15-53.74

Ubuntu 7.10:
linux-image-2.6.22-16-386 2.6.22-16.60
linux-image-2.6.22-16-cell 2.6.22-16.60
linux-image-2.6.22-16-generic 2.6.22-16.60
linux-image-2.6.22-16-hppa32 2.6.22-16.60
linux-image-2.6.22-16-hppa64 2.6.22-16.60
linux-image-2.6.22-16-itanium 2.6.22-16.60
linux-image-2.6.22-16-lpia 2.6.22-16.60
linux-image-2.6.22-16-lpiacompat 2.6.22-16.60
linux-image-2.6.22-16-mckinley 2.6.22-16.60
linux-image-2.6.22-16-powerpc 2.6.22-16.60
linux-image-2.6.22-16-powerpc-smp 2.6.22-16.60
linux-image-2.6.22-16-powerpc64-smp 2.6.22-16.60
linux-image-2.6.22-16-rt 2.6.22-16.60
linux-image-2.6.22-16-server 2.6.22-16.60
linux-image-2.6.22-16-sparc64 2.6.22-16.60
linux-image-2.6.22-16-sparc64-smp 2.6.22-16.60
linux-image-2.6.22-16-ume 2.6.22-16.60
linux-image-2.6.22-16-virtual 2.6.22-16.60
linux-image-2.6.22-16-xen 2.6.22-16.60

Ubuntu 8.04 LTS:
linux-image-2.6.24-22-386 2.6.24-22.45
linux-image-2.6.24-22-generic 2.6.24-22.45
linux-image-2.6.24-22-hppa32 2.6.24-22.45
linux-image-2.6.24-22-hppa64 2.6.24-22.45
linux-image-2.6.24-22-itanium 2.6.24-22.45
linux-image-2.6.24-22-lpia 2.6.24-22.45
linux-image-2.6.24-22-lpiacompat 2.6.24-22.45
linux-image-2.6.24-22-mckinley 2.6.24-22.45
linux-image-2.6.24-22-openvz 2.6.24-22.45
linux-image-2.6.24-22-powerpc 2.6.24-22.45
linux-image-2.6.24-22-powerpc-smp 2.6.24-22.45
linux-image-2.6.24-22-powerpc64-smp 2.6.24-22.45
linux-image-2.6.24-22-rt 2.6.24-22.45
linux-image-2.6.24-22-server 2.6.24-22.45
linux-image-2.6.24-22-sparc64 2.6.24-22.45
linux-image-2.6.24-22-sparc64-smp 2.6.24-22.45
linux-image-2.6.24-22-virtual 2.6.24-22.45
linux-image-2.6.24-22-xen 2.6.24-22.45

Ubuntu 8.10:
linux-image-2.6.27-9-generic 2.6.27-9.19
linux-image-2.6.27-9-server 2.6.27-9.19
linux-image-2.6.27-9-virtual 2.6.27-9.19

After a standard system upgrade you need to reboot your computer to
effect the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.

Details follow:

It was discovered that the Xen hypervisor block driver did not correctly
validate requests. A user with root privileges in a guest OS could make a
malicious IO request with a large number of blocks that would crash the
host OS, leading to a denial of service. This only affected Ubuntu 7.10.
(CVE-2007-5498)

It was discovered the the i915 video driver did not correctly validate
memory addresses. A local attacker could exploit this to remap memory that
could cause a system crash, leading to a denial of service. This issue did
not affect Ubuntu 6.06 and was previous fixed for Ubuntu 7.10 and 8.04 in
USN-659-1. Ubuntu 8.10 has now been corrected as well. (CVE-2008-3831)

David Watson discovered that the kernel did not correctly strip permissions
when creating files in setgid directories. A local user could exploit this
to gain additional group privileges. This issue only affected Ubuntu 6.06.
(CVE-2008-4210)

Olaf Kirch and Miklos Szeredi discovered that the Linux kernel did
not correctly reject the "append" flag when handling file splice
requests. A local attacker could bypass append mode and make changes to
arbitrary locations in a file. This issue only affected Ubuntu 7.10 and
8.04. (CVE-2008-4554)

It was discovered that the SCTP stack did not correctly handle INIT-ACK. A
remote user could exploit this by sending specially crafted SCTP traffic
which would trigger a crash in the system, leading to a denial of service.
This issue did not affect Ubuntu 8.10. (CVE-2008-4576)

It was discovered that the SCTP stack did not correctly handle bad packet
lengths. A remote user could exploit this by sending specially crafted SCTP
traffic which would trigger a crash in the system, leading to a denial of
service. This issue did not affect Ubuntu 8.10. (CVE-2008-4618)

Eric Sesterhenn discovered multiple flaws in the HFS+ filesystem. If a
local user or automated system were tricked into mounting a malicious HFS+
filesystem, the system could crash, leading to a denial of service.
(CVE-2008-4933, CVE-2008-4934, CVE-2008-5025)

It was discovered that the Unix Socket handler did not correctly process
the SCM_RIGHTS message. A local attacker could make a malicious socket
request that would crash the system, leading to a denial of service.
(CVE-2008-5029)

It was discovered that the driver for simple i2c audio interfaces did not
correctly validate certain function pointers. A local user could exploit
this to gain root privileges or crash the system, leading to a denial of
service. (CVE-2008-5033)

Updated packages for Ubuntu 6.06 LTS:

Source archives:

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/l/linux-source-2.6.15/linux-doc-2.6.15_2.6.15-53.74_all.deb
Size/MD5: 5166380 c6afc206ff366f01fe55663b31326ddc
http://security.ubuntu.com/ubuntu/pool/main/l/linux-source-2.6.15/linux-kernel-devel_2.6.15-53.74_all.deb
Size/MD5: 94056 f9390a18f55d57dddc3bf270ecf437c6
http://security.ubuntu.com/ubuntu/pool/main/l/linux-source-2.6.15/linux-source-2.6.15_2.6.15-53.74_all.deb
Size/MD5: 44739762 bb4514867960faa53d18e6e523902fb1
http://security.ubuntu.com/ubuntu/pool/restricted/l/linux-restricted-modules-2.6.15/linux-restricted-modules-common_2.6.15.12-53.4_all.deb
Size/MD5: 18500 a58b710bf66257769c29240a2842b545

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

i386 architecture (x86 compatible Intel/AMD):

powerpc architecture (Apple Macintosh G3/G4/G5):

sparc architecture (Sun SPARC/UltraSPARC):

Updated packages for Ubuntu 7.10:

Source archives:

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/l/linux-source-2.6.22/linux-doc-2.6.22_2.6.22-16.60_all.deb
Size/MD5: 4616162 deebca20c0f89ab5df7c1c65eeed1375
http://security.ubuntu.com/ubuntu/pool/main/l/linux-source-2.6.22/linux-headers-2.6.22-16_2.6.22-16.60_all.deb
Size/MD5: 7777910 f0fafa7b7fa7ed522f19a76169ed7b95
http://security.ubuntu.com/ubuntu/pool/main/l/linux-source-2.6.22/linux-kernel-devel_2.6.22-16.60_all.deb
Size/MD5: 49334 da13f4bfb6403c5419107e22465f7e6e
http://security.ubuntu.com/ubuntu/pool/main/l/linux-source-2.6.22/linux-source-2.6.22_2.6.22-16.60_all.deb
Size/MD5: 45361584 0ef0e848fd8afdbc2b51bf1bbb1679a2
http://security.ubuntu.com/ubuntu/pool/restricted/l/linux-restricted-modules-2.6.22/linux-restricted-modules-common_2.6.22.4-16.12_all.deb
Size/MD5: 23414 8259b63ed18f62f6f26e433ea0fe88aa

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

i386 architecture (x86 compatible Intel/AMD):

lpia architecture (Low Power Intel Architecture):

powerpc architecture (Apple Macintosh G3/G4/G5):

sparc architecture (Sun SPARC/UltraSPARC):

Updated packages for Ubuntu 8.04 LTS:

Source archives:

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-doc-2.6.24_2.6.24-22.45_all.deb
Size/MD5: 4922442 51e09b89fc2010bf4b77b7b0102fab20
http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-headers-2.6.24-22_2.6.24-22.45_all.deb
Size/MD5: 8134818 1ee831497ed969cf312ef5ddd157f0ee
http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-kernel-devel_2.6.24-22.45_all.deb
Size/MD5: 90716 406b0c17cab6c9f2b83aa025a23e110f
http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-source-2.6.24_2.6.24-22.45_all.deb
Size/MD5: 46953376 215f90ee782300ff8b8d05cfeafb1058
http://security.ubuntu.com/ubuntu/pool/restricted/l/linux-restricted-modules-2.6.24/linux-restricted-modules-common_2.6.24.14-22.53_all.deb
Size/MD5: 28754 d251b1e5ccf3ad5d94a2ff67c8fc609a

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

i386 architecture (x86 compatible Intel/AMD):

lpia architecture (Low Power Intel Architecture):

powerpc architecture (Apple Macintosh G3/G4/G5):

sparc architecture (Sun SPARC/UltraSPARC):

Updated packages for Ubuntu 8.10:

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/l/linux-backports-modules-2.6.27/linux-backports-modules-2.6.27_2.6.27-9.5.dsc
Size/MD5: 1197 1e58dbca8fcf2d1c5909adacd46838fb
http://security.ubuntu.com/ubuntu/pool/main/l/linux-backports-modules-2.6.27/linux-backports-modules-2.6.27_2.6.27-9.5.tar.gz
Size/MD5: 2307067 a3ba50f9fcd202c7db71b19af7017569
http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux_2.6.27-9.19.diff.gz
Size/MD5: 2866197 97fbb127a65212812ebdb2ddc9e19d53
http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux_2.6.27-9.19.dsc
Size/MD5: 1513 5d7e1846733f6d3d52985fdd127e0312
http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux_2.6.27.orig.tar.gz
Size/MD5: 63721466 482b04f680ce6676114ccfaaf8f66a55
http://security.ubuntu.com/ubuntu/pool/restricted/l/linux-restricted-modules/linux-restricted-modules_2.6.27-9.13.dsc
Size/MD5: 1096 d0ed37205b0d78d66f93e881b4c223a6
http://security.ubuntu.com/ubuntu/pool/restricted/l/linux-restricted-modules/linux-restricted-modules_2.6.27-9.13.tar.gz
Size/MD5: 4859110 7e36c796ad4b0a32af27a68a5df8756d

Architecture independent packages:

http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-doc-2.6.27_2.6.27-9.19_all.deb
Size/MD5: 3469484 414628c928d650b2f67f63c0a813264a
http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-headers-2.6.27-9_2.6.27-9.19_all.deb
Size/MD5: 5770938 9084c471371c7f5571e5f9c94273030c
http://security.ubuntu.com/ubuntu/pool/main/l/linux/linux-source-2.6.27_2.6.27-9.19_all.deb
Size/MD5: 51953458 a547d2d3b2daf4cfe2557d977f012be0
http://security.ubuntu.com/ubuntu/pool/restricted/l/linux-restricted-modules/linux-restricted-modules-common_2.6.27-9.13_all.deb
Size/MD5: 10174 4a05ccdbb98b3a4f3291574cb8cbb44b

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

i386 architecture (x86 compatible Intel/AMD):

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 235 bytes
Desc: Digital signature
Url : https://lists.ubuntu.com/archives/ubuntu-security-announce/attachments/20081127/9725fc94/attachment.pgp

------------------------------

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

End of ubuntu-security-announce Digest, Vol 50, Issue 11
********************************************************

News

Thursday, November 27, 2008

ubuntu-security-announce Digest, Vol 50, Issue 11

No comments:

WINDOWS CENTER

Blog Archive