TITLE: Debian update for xpvm SECUNIA ADVISORY ID: SA19251 VERIFY ADVISORY: http://secunia.com/advisories/19251/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Debian GNU/Linux unstable alias sid http://secunia.com/product/530/ Debian GNU/Linux 3.1 http://secunia.com/product/5307/ Debian GNU/Linux 3.0 http://secunia.com/product/143/ DESCRIPTION: Debian has issued an update for xpvm. This fixes a vulnerability, which can be exploited by malicious, local users to perform certain actions on a vulnerable system with escalated privileges. For more information: SA16040 SOLUTION: Apply updated packages. -- Debian GNU/Linux 3.0 alias woody -- Source archives: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1.dsc Size/MD5 checksum: 578 e23e82b7f0ff80c89f5d398487e9bae0 http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1.diff.gz Size/MD5 checksum: 6818 9f38fd365ee274cbd6bf4e7a11f2e64f http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5.orig.tar.gz Size/MD5 checksum: 193901 dfdaa0dc8433ab15d6899312c2355e56 Alpha architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1_alpha.deb Size/MD5 checksum: 192732 03aa819d7f03740ea88c8c4f62185cbe ARM architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1_arm.deb Size/MD5 checksum: 179226 8b369479bb83d81b380e9b9d74def5ec Intel IA-32 architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1_i386.deb Size/MD5 checksum: 170050 2bb210c8f0c22a468bfc0e625db6c784 Intel IA-64 architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1_ia64.deb Size/MD5 checksum: 231764 e4bc6ee3f41fc8a401d66b8fb81afeb4 HP Precision architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1_hppa.deb Size/MD5 checksum: 192568 55fe8f452a97e8ebeb570abb6189762c Motorola 680x0 architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1_m68k.deb Size/MD5 checksum: 161240 0acf0fe7d58ec17e7eb2022ab974631e Big endian MIPS architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1_mips.deb Size/MD5 checksum: 185354 3b64125f1b9e9d7e0a9cd3e68884bbe4 Little endian MIPS architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1_mipsel.deb Size/MD5 checksum: 184380 9cd8290f7a8079e5aacfb72992052c51 PowerPC architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1_powerpc.deb Size/MD5 checksum: 177318 e886c63da2ec9c1709f42581fd099580 IBM S/390 architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1_s390.deb Size/MD5 checksum: 170366 2d178c7ea0cd7adf104def5ec1ff04e8 Sun Sparc architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.2woody1_sparc.deb Size/MD5 checksum: 174756 c032fe787399c178a923e18c580eabe6 -- Debian GNU/Linux 3.1 alias sarge -- Source archives: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1.dsc Size/MD5 checksum: 583 91a79d771abce0da5a05f39b51db43d6 http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1.diff.gz Size/MD5 checksum: 6879 4f34cd8274c09a525854ae010e41725e http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5.orig.tar.gz Size/MD5 checksum: 193901 dfdaa0dc8433ab15d6899312c2355e56 Alpha architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_alpha.deb Size/MD5 checksum: 192062 dcf8219bac63f15bea7b0b40c0e23f76 AMD64 architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_amd64.deb Size/MD5 checksum: 183628 2b96de199d1338304b6eacd29fc40ef8 ARM architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_arm.deb Size/MD5 checksum: 177014 cba9b291cae3abc50d9ac26f7902f681 Intel IA-32 architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_i386.deb Size/MD5 checksum: 169324 94df4be6e588c2bbff9feebf54619029 Intel IA-64 architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_ia64.deb Size/MD5 checksum: 231828 9ab6ec07bf07c7f4be3e92769e7e7802 HP Precision architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_hppa.deb Size/MD5 checksum: 188456 b2955f5feac34e688551c3a484d8df33 Motorola 680x0 architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_m68k.deb Size/MD5 checksum: 160628 065589b295db8dc2b12f215546926c11 Big endian MIPS architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_mips.deb Size/MD5 checksum: 186396 6ce18345a87cca216ca6000be3f96e50 Little endian MIPS architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_mipsel.deb Size/MD5 checksum: 185472 e65916eaf162cb2b6cf495327464de60 PowerPC architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_powerpc.deb Size/MD5 checksum: 178756 a2bb8090e991be8769075142527049f5 IBM S/390 architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_s390.deb Size/MD5 checksum: 177650 2ec3250465c9a77a5bde822b0b8e1726 Sun Sparc architecture: http://security.debian.org/pool/updates/main/x/xpvm/xpvm_1.2.5-7.3sarge1_sparc.deb Size/MD5 checksum: 173938 5b9fc48d92e940297bcfbf6bfd7d0d7f -- Debian GNU/Linux unstable alias sid -- Fixed in version 1.2.5-8. ORIGINAL ADVISORY: http://www.debian.org/security/2006/dsa-1003 OTHER REFERENCES: SA16040: http://secunia.com/advisories/16040/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------