-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandriva Linux Security Advisory MDVSA-2010:034-1 http://www.mandriva.com/security/ _______________________________________________________________________ Package : kernel Date : February 18, 2010 Affected: Enterprise Server 5.0 _______________________________________________________________________ Problem Description: Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel: Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request. (CVE-2009-3080) The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read. (CVE-2009-4005) Additionally, the Linux kernel was updated to the stable release 2.6.27.45. To update your kernel, please follow the directions located at: http://www.mandriva.com/en/security/kernelupdate Update: The virtualbox DKMS modules was not provided with MDVSA-2010:034 for the Enterprise 5 product. This advisory provides the missing virtualbox packages. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3080 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4005 https://qa.mandriva.com/55826 https://qa.mandriva.com/55823 _______________________________________________________________________ Updated Packages: Mandriva Enterprise Server 5: 1d25250893f3a105b61ed3e97b4b11f6 mes5/i586/vboxadd-kernel-2.6.27.45-desktop-1mnb-2.0.2-2.1mdv2009.0.i586.rpm 75fa8d3b7e74383df1ff77c88be804ae mes5/i586/vboxadd-kernel-2.6.27.45-desktop586-1mnb-2.0.2-2.1mdv2009.0.i586.rpm 99737375be65536ddbdab6c7a38c29eb mes5/i586/vboxadd-kernel-2.6.27.45-server-1mnb-2.0.2-2.1mdv2009.0.i586.rpm 01c29a7defdb87120bbe4c136e0d2834 mes5/i586/vboxadd-kernel-desktop586-latest-2.0.2-1.20100217.2.1mdv2009.0.i586.rpm 1c1bb7de641d0e1d799d37eceaf71377 mes5/i586/vboxadd-kernel-desktop-latest-2.0.2-1.20100217.2.1mdv2009.0.i586.rpm 726a748944fa7bc3ffd8473b9ad56be1 mes5/i586/vboxadd-kernel-server-latest-2.0.2-1.20100217.2.1mdv2009.0.i586.rpm 1a3fd940682e7cc613322deff2897dc1 mes5/i586/vboxvfs-kernel-2.6.27.45-desktop-1mnb-2.0.2-2.1mdv2009.0.i586.rpm 98b29953f5df51d478167178518a8fe8 mes5/i586/vboxvfs-kernel-2.6.27.45-desktop586-1mnb-2.0.2-2.1mdv2009.0.i586.rpm d11d658ef60f7b2f7c34cc007e7cb342 mes5/i586/vboxvfs-kernel-2.6.27.45-server-1mnb-2.0.2-2.1mdv2009.0.i586.rpm 84ed845747ad2c7304e7c9763a111b5d mes5/i586/vboxvfs-kernel-desktop586-latest-2.0.2-1.20100217.2.1mdv2009.0.i586.rpm 354ecd54dd0fba574a5ac99af8252f63 mes5/i586/vboxvfs-kernel-desktop-latest-2.0.2-1.20100217.2.1mdv2009.0.i586.rpm 72a3a802f765e7540b80509b71f197b9 mes5/i586/vboxvfs-kernel-server-latest-2.0.2-1.20100217.2.1mdv2009.0.i586.rpm b9425dcc6fedfca34a450d332877cbb4 mes5/i586/virtualbox-kernel-2.6.27.45-desktop-1mnb-2.0.2-2.1mdv2009.0.i586.rpm fcfd06a59ad505a2f040b50c06d73620 mes5/i586/virtualbox-kernel-2.6.27.45-desktop586-1mnb-2.0.2-2.1mdv2009.0.i586.rpm 0ef11f77b2c5582ab9590b5cc41c6fa5 mes5/i586/virtualbox-kernel-2.6.27.45-server-1mnb-2.0.2-2.1mdv2009.0.i586.rpm e6f996dd071ecd244e23480e4ea96d6c mes5/i586/virtualbox-kernel-desktop586-latest-2.0.2-1.20100217.2.1mdv2009.0.i586.rpm 3e6d11bc2a933340a154abcc7b242768 mes5/i586/virtualbox-kernel-desktop-latest-2.0.2-1.20100217.2.1mdv2009.0.i586.rpm 8ec2403c7aa58d6ecc5ac8e72181d3aa mes5/i586/virtualbox-kernel-server-latest-2.0.2-1.20100217.2.1mdv2009.0.i586.rpm Mandriva Enterprise Server 5/X86_64: fe74817799deab87af423dd280fd3299 mes5/x86_64/vboxadd-kernel-2.6.27.45-desktop-1mnb-2.0.2-2.1mdv2009.0.x86_64.rpm fd4390597e5801350e66b229548da2a3 mes5/x86_64/vboxadd-kernel-2.6.27.45-server-1mnb-2.0.2-2.1mdv2009.0.x86_64.rpm 08a8d30b75ef39b1e4b9ead21df205d1 mes5/x86_64/vboxadd-kernel-desktop-latest-2.0.2-1.20100217.2.1mdv2009.0.x86_64.rpm f6d36dee0a4f8b709fd56c1447eaefda mes5/x86_64/vboxadd-kernel-server-latest-2.0.2-1.20100217.2.1mdv2009.0.x86_64.rpm 9c925080e86e84e6224544f9d40f473b mes5/x86_64/vboxvfs-kernel-2.6.27.45-desktop-1mnb-2.0.2-2.1mdv2009.0.x86_64.rpm c8dddc58d0d52cd9091b8dd23df4af02 mes5/x86_64/vboxvfs-kernel-2.6.27.45-server-1mnb-2.0.2-2.1mdv2009.0.x86_64.rpm 28c20e20b96317c16de254a863b2bb9b mes5/x86_64/vboxvfs-kernel-desktop-latest-2.0.2-1.20100217.2.1mdv2009.0.x86_64.rpm ff34f21a8621a48e959f5c3e5a227f70 mes5/x86_64/vboxvfs-kernel-server-latest-2.0.2-1.20100217.2.1mdv2009.0.x86_64.rpm 01c07d08e77dd8e383bb37b2fdf88c8d mes5/x86_64/virtualbox-kernel-2.6.27.45-desktop-1mnb-2.0.2-2.1mdv2009.0.x86_64.rpm 15257d8715d44c1972473e79996284f7 mes5/x86_64/virtualbox-kernel-2.6.27.45-server-1mnb-2.0.2-2.1mdv2009.0.x86_64.rpm d9dc5587b173b8c79d89104186de3d4d mes5/x86_64/virtualbox-kernel-desktop-latest-2.0.2-1.20100217.2.1mdv2009.0.x86_64.rpm d5349b67c41f880db828018f45a4a7c7 mes5/x86_64/virtualbox-kernel-server-latest-2.0.2-1.20100217.2.1mdv2009.0.x86_64.rpm _______________________________________________________________________ To upgrade automatically use MandrivaUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandriva for security. You can obtain the GPG public key of the Mandriva Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandriva Linux at: http://www.mandriva.com/security/advisories If you want to report vulnerabilities, please contact security_(at)_mandriva.com _______________________________________________________________________ Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Mandriva Security Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iD8DBQFLfUo/mqjQ0CJFipgRAg9wAJ0bBFMOpvMcBqmyFiufrENL/Tb7YQCcCpqk J0CJ8nxh6k89jANLE6fSbkY= =nOzk -----END PGP SIGNATURE-----