TITLE:
Debian update for kernel-source-2.4.16

SECUNIA ADVISORY ID:
SA20162

VERIFY ADVISORY:
http://secunia.com/advisories/20162/

CRITICAL:
Moderately critical

IMPACT:
Exposure of system information, Exposure of sensitive information,
Privilege escalation, DoS, System access

WHERE:
>From remote

OPERATING SYSTEM:
Debian GNU/Linux 3.0
http://secunia.com/product/143/

DESCRIPTION:
Debian has issued an update for kernel-source-2.4.16. This fixes some
vulnerabilities, which can be exploited by malicious, local users to
gain knowledge of sensitive information, cause a DoS (Denial of
Service), gain escalated privileges, and by malicious people to cause
a DoS, and disclose potentially sensitive information.

For more information:
SA10533
SA11464
SA11861
SA11943
SA13232
SA13469
SA13126
SA13308
SA13627
SA13756
SA13493
SA13822
SA14295
SA14570
SA13784

SOLUTION:
Apply updated packages.

-- Debian GNU/Linux 3.0 alias woody --

Source archives:

http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-lart/kernel-image-2.4.16-lart_20040419woody1.dsc
Size/MD5 checksum: 655 cbaba3ab1ea1f99557d717bb19908dc8
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-lart/kernel-image-2.4.16-lart_20040419woody1.tar.gz
Size/MD5 checksum: 16628 c10d76a01d03e58049b594270d7fd7c5
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-netwinder/kernel-image-2.4.16-netwinder_20040419woody1.dsc
Size/MD5 checksum: 693 be25ede481365d969f465a0356bfe047
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-netwinder/kernel-image-2.4.16-netwinder_20040419woody1.tar.gz
Size/MD5 checksum: 21947 12d6a2977ba7683e48e92293e4a87cf6
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-riscpc/kernel-image-2.4.16-riscpc_20040419woody1.dsc
Size/MD5 checksum: 661 6895c73dc50b56d48588e3f053fbcc05
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-riscpc/kernel-image-2.4.16-riscpc_20040419woody1.tar.gz
Size/MD5 checksum: 19300 3e60e7aa88e553221264f1b004d9091d
http://security.debian.org/pool/updates/main/k/kernel-source-2.4.16/kernel-source-2.4.16_2.4.16-1woody3.dsc
Size/MD5 checksum: 680 81e8e543d617f8464a222767e18aa261
http://security.debian.org/pool/updates/main/k/kernel-source-2.4.16/kernel-source-2.4.16_2.4.16-1woody3.diff.gz
Size/MD5 checksum: 46430 d164de27560966cb695141de9b004e7e
http://security.debian.org/pool/updates/main/k/kernel-source-2.4.16/kernel-source-2.4.16_2.4.16.orig.tar.gz
Size/MD5 checksum: 29364642 8e42e72848dc5098b6433d66d5cacffc

ARM architecture:

http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-lart/kernel-image-2.4.16-lart_20040419woody1_arm.deb
Size/MD5 checksum: 718814 87806c13fa914865ecc00f784c64a8f4
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-netwinder/kernel-headers-2.4.16_20040419woody1_arm.deb
Size/MD5 checksum: 3437272 3061b1a8212d2538bdbffa9609300322
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-netwinder/kernel-image-2.4.16-netwinder_20040419woody1_arm.deb
Size/MD5 checksum: 6675192 b588a74f3b53c06ef3ffb26218c6e191
http://security.debian.org/pool/updates/main/k/kernel-image-2.4.16-riscpc/kernel-image-2.4.16-riscpc_20040419woody1_arm.deb
Size/MD5 checksum: 2914360 3df4986a2bfa64ddea35cb2b76d390a5

Architecture independent components:

http://security.debian.org/pool/updates/main/k/kernel-source-2.4.16/kernel-doc-2.4.16_2.4.16-1woody3_all.deb
Size/MD5 checksum: 1718004 b458e950b6aabb99a781f507c2015dd3
http://security.debian.org/pool/updates/main/k/kernel-source-2.4.16/kernel-source-2.4.16_2.4.16-1woody3_all.deb
Size/MD5 checksum: 23820868 3001c4af6222fa22ecba3053a146e248

ORIGINAL ADVISORY:
http://www.us.debian.org/security/2006/dsa-1067

OTHER REFERENCES:
SA10533:
http://secunia.com/advisories/10533/

SA11464:
http://secunia.com/advisories/11464/

SA11861:
http://secunia.com/advisories/11861/

SA11943:
http://secunia.com/advisories/11943/

SA13232:
http://secunia.com/advisories/13232/

SA13469:
http://secunia.com/advisories/13469/

SA13126:
http://secunia.com/advisories/13126/

SA13308:
http://secunia.com/advisories/13308/

SA13627:
http://secunia.com/advisories/13627/

SA13756:
http://secunia.com/advisories/13756/

SA13493:
http://secunia.com/advisories/13493/

SA13822:
http://secunia.com/advisories/13822/

SA14295:
http://secunia.com/advisories/14295/

SA14570:
http://secunia.com/advisories/14570/

SA13784:
http://secunia.com/advisories/13784/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------