| Summary: | Update request: kernel-3.4.34-1.mga2 | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Thomas Backlund <tmb> |
| Component: | Security | Assignee: | QA Team <qa-bugs> |
| Status: | RESOLVED FIXED | QA Contact: | Sec team <security> |
| Severity: | critical | ||
| Priority: | High | CC: | davidwhodgins, philippedidier, sysadmin-bugs |
| Version: | 2 | Keywords: | validated_update |
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | has_procedure mga2-64-ok MGA2-32-OK | ||
| Source RPM: | kernel-3.4.34-1.mga2 | CVE: | |
| Status comment: | |||
|
Description
Thomas Backlund
2013-03-01 00:47:09 CET
Thomas Backlund
2013-03-01 00:47:25 CET
Priority:
Normal =>
High Confirmed we're vulnerable using this one: http://downloads.securityfocus.com/vulnerabilities/exploits/58137_1.c Saved it as kbug.c $ gcc -o kbug kbug.c kbug.c: In function âmainâ: kbug.c:55:3: warning: incompatible implicit declaration of built-in function âmemcpyâ [enabled by default] kbug.c:55:3: warning: passing argument 1 of âmemcpyâ makes pointer from integer without a cast [enabled by default] kbug.c:55:3: note: expected âvoid *â but argument is of type âintâ kbug.c:59:10: warning: incompatible implicit declaration of built-in function âexeclâ [enabled by default] Shows warnings but does work. Escalates privileges to root. $ ./kbug -sh-4.2# cd /root -sh-4.2# ls drakx/ tmp/ -sh-4.2# touch test -sh-4.2# ls drakx/ test tmp/ -sh-4.2# ls -l test -rw-r--r-- 1 root root 0 Mar 1 09:19 test -sh-4.2# exit Testing x86_64 Installed all the kernels and -latest from the list and started MageiaUpdate from terminal so I could watch the output. Ensured all dkms were installed on all kernels as the updates installed and none were missed: DKMS: install Completed. vboxadditions, 4.1.24-1.mga2, 3.4.32-netbook-2.mga2, x86_64: installed-binary from 3.4.32-netbook-2.mga2 vboxadditions, 4.1.24-1.mga2, 3.4.32-server-2.mga2, x86_64: installed-binary from 3.4.32-server-2.mga2 vboxadditions, 4.1.24-1.mga2, 3.4.34-server-1.mga2, x86_64: installed-binary from 3.4.34-server-1.mga2 vboxadditions, 4.1.24-1.mga2, 3.4.34-netbook-1.mga2, x86_64: installed-binary from 3.4.34-netbook-1.mga2 vboxadditions, 4.1.24-1.mga2, 3.4.32-desktop-2.mga2, x86_64: installed-binary from 3.4.32-desktop-2.mga2 vboxadditions, 4.1.24-1.mga2, 3.4.34-desktop-1.mga2, x86_64: installed-binary from 3.4.34-desktop-1.mga2 DKMS: install Completed. xtables-addons, 1.41-3.mga2, 3.4.32-netbook-2.mga2, x86_64: installed-binary from 3.4.32-netbook-2.mga2 xtables-addons, 1.41-3.mga2, 3.4.32-server-2.mga2, x86_64: installed-binary from 3.4.32-server-2.mga2 xtables-addons, 1.41-3.mga2, 3.4.34-server-1.mga2, x86_64: installed-binary from 3.4.34-server-1.mga2 xtables-addons, 1.41-3.mga2, 3.4.34-netbook-1.mga2, x86_64: installed-binary from 3.4.34-netbook-1.mga2 xtables-addons, 1.41-3.mga2, 3.4.32-desktop-2.mga2, x86_64: installed-binary from 3.4.32-desktop-2.mga2 xtables-addons, 1.41-3.mga2, 3.4.34-desktop-1.mga2, x86_64: installed-binary from 3.4.34-desktop-1.mga2 DKMS: install Completed. virtualbox, 4.1.24-1.mga2, 3.4.32-netbook-2.mga2, x86_64: installed-binary from 3.4.32-netbook-2.mga2 virtualbox, 4.1.24-1.mga2, 3.4.32-server-2.mga2, x86_64: installed-binary from 3.4.32-server-2.mga2 virtualbox, 4.1.24-1.mga2, 3.4.34-server-1.mga2, x86_64: installed-binary from 3.4.34-server-1.mga2 virtualbox, 4.1.24-1.mga2, 3.4.34-netbook-1.mga2, x86_64: installed-binary from 3.4.34-netbook-1.mga2 virtualbox, 4.1.24-1.mga2, 3.4.32-desktop-2.mga2, x86_64: installed-binary from 3.4.32-desktop-2.mga2 virtualbox, 4.1.24-1.mga2, 3.4.34-desktop-1.mga2, x86_64: installed-binary from 3.4.34-desktop-1.mga2 DKMS: install Completed. fglrx, 8.961-2.mga2.nonfree, 3.4.32-netbook-2.mga2, x86_64: installed-binary from 3.4.32-netbook-2.mga2 fglrx, 8.961-2.mga2.nonfree, 3.4.32-server-2.mga2, x86_64: installed-binary from 3.4.32-server-2.mga2 fglrx, 8.961-2.mga2.nonfree, 3.4.34-server-1.mga2, x86_64: installed-binary from 3.4.34-server-1.mga2 fglrx, 8.961-2.mga2.nonfree, 3.4.34-netbook-1.mga2, x86_64: installed-binary from 3.4.34-netbook-1.mga2 fglrx, 8.961-2.mga2.nonfree, 3.4.32-desktop-2.mga2, x86_64: installed-binary from 3.4.32-desktop-2.mga2 fglrx, 8.961-2.mga2.nonfree, 3.4.34-desktop-1.mga2, x86_64: installed-binary from 3.4.34-desktop-1.mga2 DKMS: install Completed. broadcom-wl, 5.100.82.112-7.mga2.nonfree, 3.4.32-netbook-2.mga2, x86_64: installed-binary from 3.4.32-netbook-2.mga2 broadcom-wl, 5.100.82.112-7.mga2.nonfree, 3.4.32-server-2.mga2, x86_64: installed-binary from 3.4.32-server-2.mga2 broadcom-wl, 5.100.82.112-7.mga2.nonfree, 3.4.34-server-1.mga2, x86_64: installed-binary from 3.4.34-server-1.mga2 broadcom-wl, 5.100.82.112-7.mga2.nonfree, 3.4.34-netbook-1.mga2, x86_64: installed-binary from 3.4.34-netbook-1.mga2 broadcom-wl, 5.100.82.112-7.mga2.nonfree, 3.4.32-desktop-2.mga2, x86_64: installed-binary from 3.4.32-desktop-2.mga2 broadcom-wl, 5.100.82.112-7.mga2.nonfree, 3.4.34-desktop-1.mga2, x86_64: installed-binary from 3.4.34-desktop-1.mga2 DKMS: install Completed. nvidia-current, 295.71-1.mga2.nonfree, 3.4.32-netbook-2.mga2, x86_64: installed-binary from 3.4.32-netbook-2.mga2 nvidia-current, 295.71-1.mga2.nonfree, 3.4.32-server-2.mga2, x86_64: installed-binary from 3.4.32-server-2.mga2 nvidia-current, 295.71-1.mga2.nonfree, 3.4.34-server-1.mga2, x86_64: installed-binary from 3.4.34-server-1.mga2 nvidia-current, 295.71-1.mga2.nonfree, 3.4.34-netbook-1.mga2, x86_64: installed-binary from 3.4.34-netbook-1.mga2 nvidia-current, 295.71-1.mga2.nonfree, 3.4.32-desktop-2.mga2, x86_64: installed-binary from 3.4.32-desktop-2.mga2 nvidia-current, 295.71-1.mga2.nonfree, 3.4.34-desktop-1.mga2, x86_64: installed-binary from 3.4.34-desktop-1.mga2 Rebooted into each kernel checked with uname -a, recompiled the PoC for each one (not sure this is necessary) and checked to ensure it failed. $ ./kbug -sh-4.2$ whoami claire -sh-4.2$ cd /root -sh: cd: /root: Permission denied Also checked with dkms after the reboot, eg: # dkms status -m virtualbox -v 4.1.24-1.mga2 virtualbox, 4.1.24-1.mga2, 3.4.32-netbook-2.mga2, x86_64: installed-binary from 3.4.32-netbook-2.mga2 virtualbox, 4.1.24-1.mga2, 3.4.32-server-2.mga2, x86_64: installed-binary from 3.4.32-server-2.mga2 virtualbox, 4.1.24-1.mga2, 3.4.34-server-1.mga2, x86_64: installed-binary from 3.4.34-server-1.mga2 virtualbox, 4.1.24-1.mga2, 3.4.34-netbook-1.mga2, x86_64: installed-binary from 3.4.34-netbook-1.mga2 virtualbox, 4.1.24-1.mga2, 3.4.32-desktop-2.mga2, x86_64: installed-binary from 3.4.32-desktop-2.mga2 virtualbox, 4.1.24-1.mga2, 3.4.34-desktop-1.mga2, x86_64: installed-binary from 3.4.34-desktop-1.mga2 It takes a long time to respond but shows all updates applied ok. Whiteboard:
(none) =>
has_procedure mga2-64-ok kernel-server-3.4.34-1.mga2-1-1.mga2.i586.rpm kernel-server-devel-3.4.34-1.mga2-1-1.mga2.i586.rpm installed on MGA2 32 bits the nvidia module is built by dkms during the installation Booting on it is OK (the nvidia module is used) No regression found I didn't test the vulnerability Philippe CC:
(none) =>
philippedidier Also tested Mageia 2 i586. The poc doesn't work on i586, so just testing that the updating works properly, etc. Validating the update. Could someone from the sysadmin team push the kernel-3.4.34-1.mga2 srpms from Mageia 2 updates testing to updates. See Description for list of srpms and advisory. Keywords:
(none) =>
validated_update Update pushed: https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0079 Status:
NEW =>
RESOLVED |