==========================================================Ubuntu Security Notice USN-869-1          December 10, 2009
linux vulnerability
CVE-2009-1298, CVE-2009-4131
==========================================================
A security issue affects the following Ubuntu releases:

Ubuntu 9.10

This advisory also applies to the corresponding versions of
Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the
following package versions:

Ubuntu 9.10:
  linux-image-2.6.31-16-386       2.6.31-16.53
  linux-image-2.6.31-16-generic   2.6.31-16.53
  linux-image-2.6.31-16-generic-pae  2.6.31-16.53
  linux-image-2.6.31-16-ia64      2.6.31-16.53
  linux-image-2.6.31-16-lpia      2.6.31-16.53
  linux-image-2.6.31-16-powerpc   2.6.31-16.53
  linux-image-2.6.31-16-powerpc-smp  2.6.31-16.53
  linux-image-2.6.31-16-powerpc64-smp  2.6.31-16.53
  linux-image-2.6.31-16-server    2.6.31-16.53
  linux-image-2.6.31-16-sparc64   2.6.31-16.53
  linux-image-2.6.31-16-sparc64-smp  2.6.31-16.53
  linux-image-2.6.31-16-virtual   2.6.31-16.53

After a standard system upgrade you need to reboot your computer to
effect the necessary changes.

Details follow:

David Ford discovered that the IPv4 defragmentation routine did not
correctly handle oversized packets.  A remote attacker could send
specially crafted traffic that would cause a system to crash, leading
to a denial of service. (The fix was included in the earlier kernels
from USN-864-1.) (CVE-2009-1298)

Akira Fujita discovered that the Ext4 "move extents" ioctl did not
correctly check permissions.  A local attacker could exploit this to
overwrite arbitrary files on the system, leading to root privilege
escalation. (CVE-2009-4131)


Updated packages for Ubuntu 9.10:

  Source archives:

          Size/MD5:  2759717 46bb1e1c70f8cd4b8a426f36145b96b3
          Size/MD5:     3781 ba87d38489ec61b8f83824717d524fec
          Size/MD5: 78278595 16c0355d3612806ef87addf7c9f8c9f9

  Architecture independent packages:

          Size/MD5:  3788070 2066149ef4cf1eb56029b0b474f8dc1f
          Size/MD5:  9527628 a98981b3a5da26fe246fdf35a2119b7e
          Size/MD5: 62153736 e31831df66d0fcd0b78a3ce4d3fe2400

  amd64 architecture (Athlon64, Opteron, EM64T Xeon):

          Size/MD5:   221392 4c65682a6d8ddd0a8cdc554b4e0d0432
          Size/MD5:    15536 f8f213f30fe031fa429271f3b08c7770
          Size/MD5:    52136 035e9db4477d2333520d7e1c2174868c
          Size/MD5:    44828 7f8ff1f4b3c491d7a773d898d7bd3d7e
          Size/MD5:    50078 8dce43d818f98e78187a593ca9bb081c
          Size/MD5:    92520 fca83159eb7dd5c4452d91380382e3ff
          Size/MD5:    37778 48f05c3aa331765f9ed01c78f67dbd37
          Size/MD5:   522822 4b4831946d3e38ffda45d2adc0ba4a6c
          Size/MD5:   130552 1f1bba06aef4f3b5b14f84182a833fcb
          Size/MD5:    53838 ebb5bba585bfd0530a7367e753c70780
          Size/MD5:   310124 fcef46eda5c7a3765e9b8b224d4c59b0
          Size/MD5:  4352774 229a983cec5009fcbefa87113d292fe7
          Size/MD5:   691698 f2950c44f90969a7c2d288723a6b38ad
          Size/MD5:   691650 f62b9f8f16a9ce1f6a607ebb3c4487bf
          Size/MD5: 28921388 f34bb6516ad428f132ea616b47298e93
          Size/MD5: 28883496 7fdb7bd0d2a12e416818737e0fb92942
          Size/MD5: 11737718 9f77e06415c8b1dd874e55127df81615
          Size/MD5:   739364 aed6a158c3e5d9ca30856e10d4017867
          Size/MD5:   168280 ffc7a08805d77f7f25019118ea5a30ae
          Size/MD5:   202762 30bc7511f5126c9941a68934232d654d
          Size/MD5:    27268 cefc15496c2a29de9c9cb179cb7e8e3c
          Size/MD5:   311814 1d6917dcbfb73c3ef17f12aa6342f73a
          Size/MD5:  2281968 cc8fc02dfc7f7911bf1e84e13869e286
          Size/MD5:   158686 b36dea5de2bca6981fc9828ebf0d1a3c
          Size/MD5:   203100 383915d44594f4f621bb7e376cb1f8bd
          Size/MD5:   161070 9a49f1f23db4eca300d2de08ac4ad549
          Size/MD5:    38064 3569916e727b0f9b9ae24c96705f44d0
          Size/MD5:     5762 2777b91c8a8ffaaa0c42e0c159e49c75
          Size/MD5:    73498 6df9ccff527e0f5aeb40ae4ff145a098
          Size/MD5:    22248 860de3b51003b30d58084223e89cb04e
          Size/MD5:     9548 8bbce0c3a6db3862ee6d5382b943556c
          Size/MD5:    39842 aaa53c5dae5952028ccb8f230515e5ff
          Size/MD5:    23504 94a306087cbadbb8f396a06281a43189
          Size/MD5:  1389572 2d2e7744d79462eef3e8a67f3e4028e6
          Size/MD5:    47380 e84090b8d7eec619e3ab49d9982897f2
          Size/MD5:    51616 4097f56d2e1b125f762cdc96cf81d606
          Size/MD5:   128718 baa6b9a44688e7479bbf93310d5522fa
          Size/MD5:    15818 726d41aa9553b604f3dc9c259261cf58

  i386 architecture (x86 compatible Intel/AMD):

          Size/MD5:   198834 33ef2b92f7fdfcfbff013c2e4b5ecbb3
          Size/MD5:    32462 2659032807cd1a2e924b0fa329a2f527
          Size/MD5:    49942 4c1ff905601f271495776ef921121f67
          Size/MD5:    42114 2c4c2ecce0b9920f1caf305ac6549420
          Size/MD5:    45950 ef462b137eff2ff78f061a95e0bbd6a1
          Size/MD5:    87380 fece903fdf84f7e6791f1d1d5716f54d
          Size/MD5:    33752 9c4b1e0874773522b8578deb0863e810
          Size/MD5:   519412 3a0acfa536549cd40ec94900da11a053
          Size/MD5:   128062 8343238782469e3dbb9f668f53ff314b
          Size/MD5:    49740 b31a0b3690d030ff6324beb4a9aceb29
          Size/MD5:   295736 e29e8b8ea3c8210ca6e5e9347a4cca58
          Size/MD5:  4185966 8db0b59495e0cb4aecc7d95e7bdc9cdf
          Size/MD5:   671048 e29694f4aedfd0a0ed0c78a21b226066
          Size/MD5:   670694 c26dab3b275ec9848c23bb62c9b64c85
          Size/MD5:   670992 374081ef1662d125d99138c4574d32f0
          Size/MD5: 28771668 9861afb3445411397664cf7ae44c555a
          Size/MD5: 28935472 48a65223efa3b3b1a1c54c3586fb521a
          Size/MD5: 28832722 809c454e238dae4cb749df93ba542a8b
          Size/MD5: 11190188 6c15e81718fd41c007bb612cb6bb5db4
          Size/MD5:   739344 90b28b13be2518c935a06f368a0c1038
          Size/MD5:   172778 b775ca8fcd7a408ff6ec1e89bb5748e3
          Size/MD5:   186130 cc4d5dca631cdbed74b9f2661eb30057
          Size/MD5:    28374 c6fe97908c37bca567e5675f1411510d
          Size/MD5:   292768 a0059aa2de973a9199806eca936ebad2
          Size/MD5:  2400212 a6223d598dfb807ea7112843ee71a6ef
          Size/MD5:   142004 6607d27d8dad6847f41bab71cbfde9d9
          Size/MD5:   189572 72291ac0ce3268792f6bb53afcc6aeb2
          Size/MD5:   148500 40cd8d52c2dc417fe5546a0509bf8460
          Size/MD5:    35308 962ea3d7096d8f1e370b748acb663bac
          Size/MD5:     6844 dcab82ea44f1f535c09438e4806500e7
          Size/MD5:    85696 966b54b4f6ec4c294714acd8a9ee3dd6
          Size/MD5:    46414 8e39cd1e4924b43bfca024a6a6dce667
          Size/MD5:     8910 1681a86723ce87c7f4b35795c45f4019
          Size/MD5:    36276 a5446dfc19cdb998ccbaa4b1c3ca07ae
          Size/MD5:    21688 bb2e9413b9d57b1fbf2b16112c6a3140
          Size/MD5:  1495046 4bb94158e75034134625f19679240249
          Size/MD5:    44080 c739073970d8c4519c291c69322a1069
          Size/MD5:    48458 169870f8cfb4a51f87b0359e2aaa5cb0
          Size/MD5:   117578 49d3e9ab048e66359d32053862148def
          Size/MD5:    14516 73a7ae93726bbc740d7bf002ec2f47ba

  lpia architecture (Low Power Intel Architecture):

          Size/MD5:   198808 c1ea3c9a24a402a8df3a7fb01a0fe18f
          Size/MD5:    32448 b6d46b76ca3a818c7c53edadbbca9082
          Size/MD5:    49944 aaba7e556ccaf57678acc28ab5eacaad
          Size/MD5:    42156 6d6665963a478444299b1971e8bcb782
          Size/MD5:    45946 4265f05b2e183d28c6fa85627ca01b83
          Size/MD5:    87380 08aa24407a8eae43612427458a685d3c
          Size/MD5:    33750 bb3a4fa9316fb9116a1f6e4cb8ab4e83
          Size/MD5:   519594 3a9df45ec664d4b7eddc6cf71aedcde6
          Size/MD5:   128096 e83ca3e5610fb1eecbf039cd2fc572d8
          Size/MD5:    49742 93d34cdae126a65118cb6112c5cb68b2
          Size/MD5:   295726 e8981b5221408017df40658f10cf5027
          Size/MD5:  4187394 8fe5aa554b19e84514be382166bf3e40
          Size/MD5:   670146 d6c22d50659820697933d9aca2d843f2
          Size/MD5: 28827002 b2529960e06aada8a47e7fd186ec44dc
          Size/MD5:   739328 1eeb403661a63bebd2b655cc81fedfcd
          Size/MD5:   172834 a5c931d816560410b79b63b5b672b864
          Size/MD5:   186108 93fc03887028a74eba6ac16bcd6c6ed1
          Size/MD5:    28364 ba960c2c3f8f04d5d8076ba7d59caca4
          Size/MD5:   292774 8586ee587a26bf84b19530cb44503537
          Size/MD5:  2400294 58bd5adc0268224cae95f39600372a57
          Size/MD5:   141994 cb3321864dc1491e2b4b3d564929b4a5
          Size/MD5:   189554 c4531eca5bcd1e352ccc95c56ed77db3
          Size/MD5:   148480 a4e0704d41d16a1e54f21739084145c2
          Size/MD5:    35294 6c8a356ffc371d49ed135192794bc9a3
          Size/MD5:     6828 7ab376d2da0796954be3a91127d9c7c7
          Size/MD5:    85668 bc0a44587d1d7d23bc912e2d7325f33b
          Size/MD5:    46418 8dc517682170fd664db9ed7d04bff8ee
          Size/MD5:     8902 59be4bb6554bbc28a39389592a93fa15
          Size/MD5:    36264 7e23372cea5c7588eab2f7b422c173dc
          Size/MD5:    21680 c07bb93108ddcea594b6f7afac2392f7
          Size/MD5:  1494786 738987519bb0737dd86af28567a5158d
          Size/MD5:    44070 a1dc502b8648935e9ee3ed3feadb3ad3
          Size/MD5:    48460 7e1ecc9658479055b377e57f07673636
          Size/MD5:   117558 236c6d98cb859537b39042cab44e7408
          Size/MD5:    14506 f912fc9edcb6b82f4dbd43b49135c9c1

  powerpc architecture (Apple Macintosh G3/G4/G5):

          Size/MD5:   321464 769c4a9959cb77777ffc23705c0d3bb8
          Size/MD5:   263644 7f094fb48a893baa441f7bd1b648f9ab
          Size/MD5:    58854 49215a4931f5645a84dba696cb2ce1e4
          Size/MD5:    67046 1b8250d0bfa863ca44a6dab45a0c0d48
          Size/MD5:    45920 fe05ce15f61ae007d9f3c1d8ec2057c0
          Size/MD5:    51300 29d33d613d76d11aaabfb90a580fb5da
          Size/MD5:    90682 9fbcb097d7854f3d27e6cd5ba085c15f
          Size/MD5:   105156 bd4943b06b91094123f99e8df3eb431e
          Size/MD5:    39494 cf471cd4951499cb4100af5cd150924b
          Size/MD5:    39276 08c35a86e3d3163fad312d61e2c77c70
          Size/MD5:   565186 b2b16befe390774c0f770cd0350d5a95
          Size/MD5:   609026 ca80ea7702aac8a1275ec790944a103e
          Size/MD5:   149188 dba6b24f3fccb8fdeb902a5bb504cef0
          Size/MD5:   147250 94853c02dc20e1fdeee28886e9f7305d
          Size/MD5:    79744 099f436fec0e649ba1ed5f58652cf8bf
          Size/MD5:    84136 45554e43d12547077835d6201170771c
          Size/MD5:   402960 f166345b039bbd1a6fc2ce9b4b34688a
          Size/MD5:   342536 57059512ed5842751d74e9a565f7eec2
          Size/MD5:  3812340 0048fed3305831c8e8386983dff67de1
          Size/MD5:  5192026 54b566210835793c92f390a8ba9330ee
          Size/MD5:   778696 ac1e22e6a4cab2fcdda46f5ec0e44f7a
          Size/MD5:   798248 4ca8d1f42bb308ed493f89b1c2bae59a
          Size/MD5:   779670 d034bbd642e72c5b1c82046aaeca60cf
          Size/MD5: 24816072 5750fd6003a9ff4e52ef71b160d35f78
          Size/MD5: 25826970 f2616393d03ebc241c15ad373abe24a7
          Size/MD5: 24655164 f0d2e7732c1ee927f8c8ecc40c050c29
          Size/MD5:   724426 fc160908eba33700010ee2950599e267
          Size/MD5:   271890 0eb05e4797f932e5366297b6e65694ec
          Size/MD5:   294594 ba55ad947909f8a12dc2e908a8e9e16c
          Size/MD5:   210550 27ed645c98e1c02b16c1d9a8e1d1ddc3
          Size/MD5:   216972 f4a4e8bb270ecf136d7b000eb3f599d2
          Size/MD5:    25800 bbdc9b4ceb2a7bbfd6e7ba26ad7e24de
          Size/MD5:    28984 30afe13ea4ee74b683ca2920e70e19c0
          Size/MD5:   315002 7d7aac4b116d227e54da6d1850450e66
          Size/MD5:   357746 3b9728ec25f31a98b0773dca1e82e817
          Size/MD5:  2027584 5d3c2778b0c48002ebabee346dd44c48
          Size/MD5:  2247608 19f6eca7f6a05b56d33254fb56ac96ca
          Size/MD5:   213574 196db8eb3ef9b6e5356d566ab5b6e8ef
          Size/MD5:   209806 5950c2adc86e4df0c26e2331a65af118
          Size/MD5:   210164 59cfbef54d417c72f2dd25a742d664b6
          Size/MD5:   244810 5c46a2340f2cc4e922c2fa37cd4f18ca
          Size/MD5:   111838 7f6738b2af571e914d9d70ae6cbf28f9
          Size/MD5:   131608 bb79aad4f00af9dcfef21549134f6aaf
          Size/MD5:    49034 69f72a0deea2e1273b64bc17f033e324
          Size/MD5:    44088 1d178cd3bcef112628749882e9103829
          Size/MD5:     5848 0faf314df8692394e35954f45aa0aa6d
          Size/MD5:     6506 01f5e1746d96d6f86d3bfdff38996e70
          Size/MD5:    78780 5a02f6d950b1a5b075f07ceec394aef5
          Size/MD5:    84602 397cab612077d45c5eb2ddda534c7801
          Size/MD5:    74320 e17da9fa1509479da99d47144d094c5e
          Size/MD5:    27228 852c7fa0836589a87eb1d88d0ff05c7a
          Size/MD5:     8538 4cc3e8637e2b52084d96803bbaec57a0
          Size/MD5:     9818 7a25f3d4cd257003e0592d3363a0d2c9
          Size/MD5:    58814 0805944d3d6eef8fb1b96c6bd3c1f512
          Size/MD5:    70146 665ccc2165aefc8f5e45b07e79017307
          Size/MD5:    23730 1d30532fd77337b3328646f4bfd08f5b
          Size/MD5:    30818 ebb9ec306b10177f089bd04dfa445cd5
          Size/MD5:  1556922 fb29cda48f271f2aaec192cebc36a99e
          Size/MD5:  1509144 36ed69e13bcab5332bdb9bef8130e821
          Size/MD5:    81690 5dce76f2d239dcdd660fa456ad79230c
          Size/MD5:    88530 27872a5f1b0570e9cd0f3a8ef58d11c0
          Size/MD5:    64388 85fd20ff5f8d59b1a72db4f5858177a5
          Size/MD5:    77008 534b3392722aae864b5f12ffa7c5612d
          Size/MD5:   141270 8fbc608e986eabe480e3d4e0ec283c46
          Size/MD5:   150886 e4e003d93d9cb6f8dc995bc82ab1bff4

  sparc architecture (Sun SPARC/UltraSPARC):

          Size/MD5:   139442 db449d9e66e05862a6cbcc19cead2c8e
          Size/MD5:    70120 493ae2e44f9b025347bcc1caad2d301c
          Size/MD5:    46514 2f7812137b6b7e3b66e8f1ec29c0a620
          Size/MD5:    93980 66f5531eb917c16a384d2c1f1b3c432d
          Size/MD5:   572222 13a8b6c104c2c9ee155ea26c27245572
          Size/MD5:   148316 95dd38a1f61ad2c84834d5a712931731
          Size/MD5:    75858 17e16db718d27ccf11c2f01198886150
          Size/MD5:  2892430 135cdfe87f7d10d486c777cfa5af5297
          Size/MD5:   596954 ac010958e1c9b69205a216f53c94f226
          Size/MD5:   595726 9ea69b32d9ffceb9c4653b28f7912089
          Size/MD5: 20488622 9a289a515f9de4935c66bee671bbe8ab
          Size/MD5: 20185556 cfa14881ceba0726d2c0c63c6947c05a
          Size/MD5:   736544 18ffdfe90df3b94d4e1b05b3085db27e
          Size/MD5:   266058 7a529388680469f46a89c086241b7b53
          Size/MD5:   209180 3ca26807f73644f1a05b3920c3bc8811
          Size/MD5:    26266 3da629ae5770e252d1909cd84431cbbe
          Size/MD5:   314162 7983479e6afe18838ed72a3174753c56
          Size/MD5:  1675478 f6d39c90a35b79fd040b52bbf1478704
          Size/MD5:   222818 e32c0fe4992722f0da2748462a7b2057
          Size/MD5:   121956 a4cc44e5c2a7c714841c37aefca00ec3
          Size/MD5:    38800 231f1e448f02a7a7f86e4e3574572381
          Size/MD5:   100806 b6dbff7d356b38d4996fa2b680cd2393
          Size/MD5:     8930 420a7ce2591ba2c938b410ff0eeed81b
          Size/MD5:    62916 2fd3da5dbf807810ca118d594dece6d6
          Size/MD5:   120986 a64d7dcd2da9ea7ce763c444aeb9532f
          Size/MD5:  1217922 566834a7a6e003bb44758975d487b5ca
          Size/MD5:   101340 0fa5b3364e0df9e25ffc37edf080215f
          Size/MD5:   200096 d19248fc78812e9897455e069d9f4719
          Size/MD5:   184462 b3f342dd19c09ed89bb410e147268aa9

Ubuntu 869-1: Linux kernel vulnerabilities

December 10, 2009
David Ford discovered that the IPv4 defragmentation routine did not correctly handle oversized packets

Summary

Update Instructions

References

Severity
linux vulnerability

Package Information

Related News