This is a multi-part message in MIME format...

------------=_1155155053-9299-1023


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 _______________________________________________________________________
 
 Mandriva Linux Security Advisory                         MDKSA-2006:139
 http://www.mandriva.com/security/
 _______________________________________________________________________
 
 Package : krb5
 Date    : September 9, 2006
 Affected: 2006.0, Corporate 3.0, Multi Network Firewall 2.0
 _______________________________________________________________________
 
 Problem Description:
 
 A flaw was discovered in some bundled Kerberos-aware packages that
 would fail to check the results of the setuid() call.  This call can
 fail in some circumstances on the Linux 2.6 kernel if certain user
 limits are reached, which could be abused by a local attacker to get
 the applications to continue to run as root, possibly leading to an
 elevation of privilege.
 
 Updated packages have been patched to correct this issue.
 _______________________________________________________________________

 References:
 
 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3083
 _______________________________________________________________________
 
 Updated Packages:
 
 Mandriva Linux 2006.0:
 9769771585fb7b7fc6cf6feea1d6852d 
 2006.0/RPMS/ftp-client-krb5-1.4.2-1.1.20060mdk.i586.rpm
 132d70eb7cc47ac787ceb4490f87d308 
 2006.0/RPMS/ftp-server-krb5-1.4.2-1.1.20060mdk.i586.rpm
 ebcf417d249dc28511c8e6579ad832de 
 2006.0/RPMS/krb5-server-1.4.2-1.1.20060mdk.i586.rpm
 37eb990906dea9b113f8dde526a218ab 
 2006.0/RPMS/krb5-workstation-1.4.2-1.1.20060mdk.i586.rpm
 12bd0420fdfdf55433beaa839d245c7d 
 2006.0/RPMS/libkrb53-1.4.2-1.1.20060mdk.i586.rpm
 73ec87553b0dfdee4170c23fd42f9b33 
 2006.0/RPMS/libkrb53-devel-1.4.2-1.1.20060mdk.i586.rpm
 2e9bca676a7c89a2970105ec73dfd43a 
 2006.0/RPMS/telnet-client-krb5-1.4.2-1.1.20060mdk.i586.rpm
 309990a6c12954d0c742ae3fcc20d3f7 
 2006.0/RPMS/telnet-server-krb5-1.4.2-1.1.20060mdk.i586.rpm
 6b8f5083efd5c04230fb732636e78269  2006.0/SRPMS/krb5-1.4.2-1.1.20060mdk.src.rpm

 Mandriva Linux 2006.0/X86_64:
 7379da32042912507b45257c3ae7527a 
 x86_64/2006.0/RPMS/ftp-client-krb5-1.4.2-1.1.20060mdk.x86_64.rpm
 5b9c39f00856cbfe56c984636c9616ec 
 x86_64/2006.0/RPMS/ftp-server-krb5-1.4.2-1.1.20060mdk.x86_64.rpm
 dcbd8eb16edbaeab7f96bbbd61a63a42 
 x86_64/2006.0/RPMS/krb5-server-1.4.2-1.1.20060mdk.x86_64.rpm
 27f81fe2c23b1aadb77bf36a765f1f3a 
 x86_64/2006.0/RPMS/krb5-workstation-1.4.2-1.1.20060mdk.x86_64.rpm
 3ab0d3234686c559c0ca1363503f6632 
 x86_64/2006.0/RPMS/lib64krb53-1.4.2-1.1.20060mdk.x86_64.rpm
 b79453018b1fdfd10cd1e67ed77eeecb 
 x86_64/2006.0/RPMS/lib64krb53-devel-1.4.2-1.1.20060mdk.x86_64.rpm
 7ec7ec461afca7f7707e010310be4532 
 x86_64/2006.0/RPMS/telnet-client-krb5-1.4.2-1.1.20060mdk.x86_64.rpm
 e596730793941a4aedb582abb7bec0cf 
 x86_64/2006.0/RPMS/telnet-server-krb5-1.4.2-1.1.20060mdk.x86_64.rpm
 6b8f5083efd5c04230fb732636e78269 
 x86_64/2006.0/SRPMS/krb5-1.4.2-1.1.20060mdk.src.rpm

 Corporate 3.0:
 828af711a7bc04cee4de3fccba07543f 
 corporate/3.0/RPMS/ftp-client-krb5-1.3-6.7.C30mdk.i586.rpm
 fc41fbc471acd1d94716ba7b37094e2c 
 corporate/3.0/RPMS/ftp-server-krb5-1.3-6.7.C30mdk.i586.rpm
 d118695919843b28dc401994b2f8605f 
 corporate/3.0/RPMS/krb5-server-1.3-6.7.C30mdk.i586.rpm
 c75c0d61e7fc98123f4dbfce2b2d3109 
 corporate/3.0/RPMS/krb5-workstation-1.3-6.7.C30mdk.i586.rpm
 156f7354acd35590c33903d5dce0697d 
 corporate/3.0/RPMS/libkrb51-1.3-6.7.C30mdk.i586.rpm
 15c4329696fbcfecc7bedc62c56cf577 
 corporate/3.0/RPMS/libkrb51-devel-1.3-6.7.C30mdk.i586.rpm
 d88d3533f6993057eb01d9baeb8f9046 
 corporate/3.0/RPMS/telnet-client-krb5-1.3-6.7.C30mdk.i586.rpm
 be90de149ade08f77bf15481e4a65bf6 
 corporate/3.0/RPMS/telnet-server-krb5-1.3-6.7.C30mdk.i586.rpm
 b5ab69f2c45bd7fd8ddf24204126a0d1 
 corporate/3.0/SRPMS/krb5-1.3-6.7.C30mdk.src.rpm

 Corporate 3.0/X86_64:
 52e38def3585a04f2cec5dff30d1dad2 
 x86_64/corporate/3.0/RPMS/ftp-client-krb5-1.3-6.7.C30mdk.x86_64.rpm
 02a6c33fc49fe58013e999e2a4773f70 
 x86_64/corporate/3.0/RPMS/ftp-server-krb5-1.3-6.7.C30mdk.x86_64.rpm
 c3a9e4068740aeb23667ed5d46f0b48d 
 x86_64/corporate/3.0/RPMS/krb5-server-1.3-6.7.C30mdk.x86_64.rpm
 9196af8c916c889cbe234acb1393faf0 
 x86_64/corporate/3.0/RPMS/krb5-workstation-1.3-6.7.C30mdk.x86_64.rpm
 ae7336d754a485b4f24a42f3c36fbb59 
 x86_64/corporate/3.0/RPMS/lib64krb51-1.3-6.7.C30mdk.x86_64.rpm
 d38b0395a79d4ea909aeaf0eefcdc9d4 
 x86_64/corporate/3.0/RPMS/lib64krb51-devel-1.3-6.7.C30mdk.x86_64.rpm
 9e9bc222b2d7cbfc47c1af0fabd6ffd5 
 x86_64/corporate/3.0/RPMS/telnet-client-krb5-1.3-6.7.C30mdk.x86_64.rpm
 afd4f60af3022e6c319eb38fb658ca24 
 x86_64/corporate/3.0/RPMS/telnet-server-krb5-1.3-6.7.C30mdk.x86_64.rpm
 b5ab69f2c45bd7fd8ddf24204126a0d1 
 x86_64/corporate/3.0/SRPMS/krb5-1.3-6.7.C30mdk.src.rpm

 Multi Network Firewall 2.0:
 99da07eef578ea9634378d30310ea6da 
 mnf/2.0/RPMS/libkrb51-1.3-6.7.M20mdk.i586.rpm
 8fd9018ab4c3bed69af2466a5e587f25  mnf/2.0/SRPMS/krb5-1.3-6.7.M20mdk.src.rpm
 _______________________________________________________________________

 To upgrade automatically use MandrivaUpdate or urpmi.  The verification
 of md5 checksums and GPG signatures is performed automatically for you.

 All packages are signed by Mandriva for security.  You can obtain the
 GPG public key of the Mandriva Security Team by executing:

  gpg --recv-keys --keyserver pgp.mit.edu 0x22458A98

 You can view other update advisories for Mandriva Linux at:

  http://www.mandriva.com/security/advisories

 If you want to report vulnerabilities, please contact

  security_(at)_mandriva.com
 _______________________________________________________________________

 Type Bits/KeyID     Date       User ID
 pub  1024D/22458A98 2000-07-10 Mandriva Security Team
  <security*mandriva.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFE2hBLmqjQ0CJFipgRAos9AKC0mteYb2PDP8yhuU0LsgFtlkTCDgCgk2xi
d/ocXoroUAfnEQeE1BGP8LM=
=+vtq
-----END PGP SIGNATURE-----


------------=_1155155053-9299-1023
Content-Type: text/plain; name="message-footer.txt"
Content-Disposition: inline; filename="message-footer.txt"
Content-Transfer-Encoding: 8bit

To unsubscribe, send a email to sympa@mandrivalinux.org
with this subject : unsubscribe security-announce
_______________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://www.mandrivastore.com
Join the Club : http://www.mandrivaclub.com
_______________________________________________________

------------=_1155155053-9299-1023--