From security@linux-mandrake.com Mon Dec 6 23:23:56 2004 From: Mandrake Linux Security Team To: full-disclosure@lists.netsys.com Date: 7 Dec 2004 02:30:34 -0000 Subject: [Full-Disclosure] MDKSA-2004:144 - Updated lvm1 packages fix temporary file vulnerability -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandrakelinux Security Update Advisory _______________________________________________________________________ Package name: lvm Advisory ID: MDKSA-2004:144 Date: December 6th, 2004 Affected versions: 10.0, 10.1, 9.2, Corporate Server 2.1 ______________________________________________________________________ Problem Description: The Trustix developers discovered that the lvmcreate_initrd script, part of the lvm1 package, created a temporary directory in an insecure manner. This could allow for a symlink attack to create or overwrite arbitrary files with the privileges of the user running the script. The updated packages have been patched to prevent this problem. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0972 ______________________________________________________________________ Updated Packages: Mandrakelinux 10.0: 84d43ec2e89d54fde87b297433a1a827 10.0/RPMS/lvm1-1.0.8-3.1.100mdk.i586.rpm 87b5dfffb0fcae360a6bf15428837759 10.0/SRPMS/lvm1-1.0.8-3.1.100mdk.src.rpm Mandrakelinux 10.0/AMD64: 09b02989d8b53f199771631f103db1d0 amd64/10.0/RPMS/lvm1-1.0.8-3.1.100mdk.amd64.rpm 87b5dfffb0fcae360a6bf15428837759 amd64/10.0/SRPMS/lvm1-1.0.8-3.1.100mdk.src.rpm Mandrakelinux 10.1: 8e1650b55651b69b8fa24042485a93fc 10.1/RPMS/lvm1-1.0.8-3.1.101mdk.i586.rpm 703c69ea27f00b93825c0003b719412a 10.1/SRPMS/lvm1-1.0.8-3.1.101mdk.src.rpm Mandrakelinux 10.1/X86_64: 51e458895046be08a56f8117baee3fa2 x86_64/10.1/RPMS/lvm1-1.0.8-3.1.101mdk.x86_64.rpm 703c69ea27f00b93825c0003b719412a x86_64/10.1/SRPMS/lvm1-1.0.8-3.1.101mdk.src.rpm Corporate Server 2.1: 6c2e28a2b290b73e53cdebc81601778b corporate/2.1/RPMS/lvm-1.0.1-2.1.C21mdk.i586.rpm a3b6553b2a09c67e071e7e848de80f50 corporate/2.1/SRPMS/lvm-1.0.1-2.1.C21mdk.src.rpm Corporate Server 2.1/x86_64: 6a46c69afb9fba2eb34c44088d5ba9ef x86_64/corporate/2.1/RPMS/lvm-1.0.1-2.1.C21mdk.x86_64.rpm a3b6553b2a09c67e071e7e848de80f50 x86_64/corporate/2.1/SRPMS/lvm-1.0.1-2.1.C21mdk.src.rpm Mandrakelinux 9.2: fed619af65f9bbc180301e379d017d33 9.2/RPMS/lvm-1.0.7-2.1.92mdk.i586.rpm 9b677088ac2f0142b1d20cc743e71330 9.2/SRPMS/lvm-1.0.7-2.1.92mdk.src.rpm Mandrakelinux 9.2/AMD64: 59071b4206b86c306a1acb5287326076 amd64/9.2/RPMS/lvm-1.0.7-2.1.92mdk.amd64.rpm 9b677088ac2f0142b1d20cc743e71330 amd64/9.2/SRPMS/lvm-1.0.7-2.1.92mdk.src.rpm _______________________________________________________________________ To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandrakesoft for security. You can obtain the GPG public key of the Mandrakelinux Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandrakelinux at: http://www.mandrakesoft.com/security/advisories If you want to report vulnerabilities, please contact security_linux-mandrake.com Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQFBtRXKmqjQ0CJFipgRAn6SAKDqCoVnoS35g3cdJ+sdXkKh/aJojwCfXSza cSskOXLQj8g6q2XTeJkLhAw= =GX9e -----END PGP SIGNATURE----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html From security@linux-mandrake.com Tue Dec 7 22:42:18 2004 From: Mandrake Linux Security Team To: bugtraq@securityfocus.com Date: 7 Dec 2004 02:30:34 -0000 Subject: MDKSA-2004:144 - Updated lvm1 packages fix temporary file vulnerability -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 _______________________________________________________________________ Mandrakelinux Security Update Advisory _______________________________________________________________________ Package name: lvm Advisory ID: MDKSA-2004:144 Date: December 6th, 2004 Affected versions: 10.0, 10.1, 9.2, Corporate Server 2.1 ______________________________________________________________________ Problem Description: The Trustix developers discovered that the lvmcreate_initrd script, part of the lvm1 package, created a temporary directory in an insecure manner. This could allow for a symlink attack to create or overwrite arbitrary files with the privileges of the user running the script. The updated packages have been patched to prevent this problem. _______________________________________________________________________ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0972 ______________________________________________________________________ Updated Packages: Mandrakelinux 10.0: 84d43ec2e89d54fde87b297433a1a827 10.0/RPMS/lvm1-1.0.8-3.1.100mdk.i586.rpm 87b5dfffb0fcae360a6bf15428837759 10.0/SRPMS/lvm1-1.0.8-3.1.100mdk.src.rpm Mandrakelinux 10.0/AMD64: 09b02989d8b53f199771631f103db1d0 amd64/10.0/RPMS/lvm1-1.0.8-3.1.100mdk.amd64.rpm 87b5dfffb0fcae360a6bf15428837759 amd64/10.0/SRPMS/lvm1-1.0.8-3.1.100mdk.src.rpm Mandrakelinux 10.1: 8e1650b55651b69b8fa24042485a93fc 10.1/RPMS/lvm1-1.0.8-3.1.101mdk.i586.rpm 703c69ea27f00b93825c0003b719412a 10.1/SRPMS/lvm1-1.0.8-3.1.101mdk.src.rpm Mandrakelinux 10.1/X86_64: 51e458895046be08a56f8117baee3fa2 x86_64/10.1/RPMS/lvm1-1.0.8-3.1.101mdk.x86_64.rpm 703c69ea27f00b93825c0003b719412a x86_64/10.1/SRPMS/lvm1-1.0.8-3.1.101mdk.src.rpm Corporate Server 2.1: 6c2e28a2b290b73e53cdebc81601778b corporate/2.1/RPMS/lvm-1.0.1-2.1.C21mdk.i586.rpm a3b6553b2a09c67e071e7e848de80f50 corporate/2.1/SRPMS/lvm-1.0.1-2.1.C21mdk.src.rpm Corporate Server 2.1/x86_64: 6a46c69afb9fba2eb34c44088d5ba9ef x86_64/corporate/2.1/RPMS/lvm-1.0.1-2.1.C21mdk.x86_64.rpm a3b6553b2a09c67e071e7e848de80f50 x86_64/corporate/2.1/SRPMS/lvm-1.0.1-2.1.C21mdk.src.rpm Mandrakelinux 9.2: fed619af65f9bbc180301e379d017d33 9.2/RPMS/lvm-1.0.7-2.1.92mdk.i586.rpm 9b677088ac2f0142b1d20cc743e71330 9.2/SRPMS/lvm-1.0.7-2.1.92mdk.src.rpm Mandrakelinux 9.2/AMD64: 59071b4206b86c306a1acb5287326076 amd64/9.2/RPMS/lvm-1.0.7-2.1.92mdk.amd64.rpm 9b677088ac2f0142b1d20cc743e71330 amd64/9.2/SRPMS/lvm-1.0.7-2.1.92mdk.src.rpm _______________________________________________________________________ To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. All packages are signed by Mandrakesoft for security. You can obtain the GPG public key of the Mandrakelinux Security Team by executing: gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98 You can view other update advisories for Mandrakelinux at: http://www.mandrakesoft.com/security/advisories If you want to report vulnerabilities, please contact security_linux-mandrake.com Type Bits/KeyID Date User ID pub 1024D/22458A98 2000-07-10 Linux Mandrake Security Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQFBtRXKmqjQ0CJFipgRAn6SAKDqCoVnoS35g3cdJ+sdXkKh/aJojwCfXSza cSskOXLQj8g6q2XTeJkLhAw= =GX9e -----END PGP SIGNATURE-----