Linux Deep Symbolic Link Denial of Service Vulnerability

Linux Deep Symbolic Link Denial of Service Vulnerability

Solution:
This issue has reportedly been fully fixed in version 2.4.12 of the Linux kernel. A patch that rectifies this issue in version 2.2.19 is also available.

Vendor specific upgrades are also available.

Linux kernel 2.2.15

MandrakeSoft 1.0.1 i586 alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 1.0.1 i586 kernel-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 1.0.1 i586 kernel-doc-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 1.0.1 i586 kernel-headers-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 1.0.1 i586 kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 1.0.1 i586 kernel-secure-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 1.0.1 i586 kernel-smp-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 1.0.1 i586 kernel-source-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 1.0.1 i586 kernel-utils-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 1.0.1 i586 reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 alsa-source-2.2.19_0.5.10b-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 kernel-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 kernel-doc-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 kernel-headers-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 kernel-linus-2.2.20-1.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 kernel-secure-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 kernel-smp-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 kernel-source-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 kernel-utils-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.1 i586 reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

Linux kernel 2.2.17

MandrakeSoft 7.2 i586 alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.2 i586 alsa-source-2.2.19_0.5.10b-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.2 i586 kernel-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.2 i586 kernel-doc-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.2 i586 kernel-headers-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.2 i586 kernel-linus-2.2.20-1.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.2 i586 kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.2 i586 kernel-secure-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.2 i586 kernel-smp-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.2 i586 kernel-source-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.2 i586 kernel-utils-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 7.2 i586 reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

Linux kernel 2.2.19

MandrakeSoft 1.0.1 i586 alsa-2.2.19_0.5.10b-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel-linus2.2-2.2.20-1.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel22-2.2.19-20.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel22-secure-2.2.19-20.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel22-smp-2.2.19-20.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel22-source-2.2.19-20.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc kernel22-2.2.19-20.1mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc kernel22-secure-2.2.19-20.1mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc kernel22-smp-2.2.19-20.1mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc kernel22-source-2.2.19-20.1mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel-linus2.2-2.2.20-1.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel22-2.2.19-20.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel22-secure-2.2.19-20.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel22-smp-2.2.19-20.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel22-source-2.2.19-20.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft SN Firewall 7.2 i586 kernel-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft SN Firewall 7.2 i586 kernel-doc-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft SN Firewall 7.2 i586 kernel-headers-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft SN Firewall 7.2 i586 kernel-linus-2.2.20-1.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft SN Firewall 7.2 i586 kernel-pcmcia-cs-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft SN Firewall 7.2 i586 kernel-secure-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft SN Firewall 7.2 i586 kernel-smp-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft SN Firewall 7.2 i586 kernel-source-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft SN Firewall 7.2 i586 kernel-utils-2.2.19-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft SN Firewall 7.2 i586 reiserfs-utils-2.2.19_3.5.29-6.3mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

Rafal Wojtczuk 2.2.19-deep-symlink.patch
http://www.securityfocus.com/data/vulnerabilities/patches/2.2.19-deep- symlink.patch

SuSE 6.3 i386 k_i386_22-2.2.19-180.i386.rpm
A kernel upgrade for i386 systems running SuSE Linux 6.3.
ftp://ftp.suse.com/pub/suse/i386/update/6.3/kernel/2.2.19-20011026/

SuSE 6.3 k_deflt_22-2.2.19-162.i386.rpm
The default kernel upgrade for most systems running SuSE Linux 6.3.
ftp://ftp.suse.com/pub/suse/i386/update/6.3/kernel/2.2.19-20011026/

SuSE 6.3 k_smp_22-2.2.19-177.i386.rpm
A kernel upgrade for multi-processor systems running SuSE Linux 6.3.
ftp://ftp.suse.com/pub/suse/i386/update/6.3/kernel/2.2.19-20011026/

SuSE 6.4 i386 k_i386_22-2.2.19-180.i386.rpm
A kernel upgrade for i386 systems running SuSE Linux 6.4.
ftp://ftp.suse.com/pub/suse/i386/update/6.4/kernel/2.2.19-20011026

SuSE 6.4 k_deflt_22-2.2.19-162.i386.rpm
The default kernel upgrade for most systems running SuSE Linux 6.4.
ftp://ftp.suse.com/pub/suse/i386/update/6.4/kernel/2.2.19-20011026

SuSE 6.4 k_smp_22-2.2.19-177.i386.rpm
A kernel upgrade for multi-processor systems running SuSE Linux 6.4.
ftp://ftp.suse.com/pub/suse/i386/update/6.4/kernel/2.2.19-20011026

SuSE 7.0 i386 k_i386_22-2.2.19-180.i386.rpm
A kernel upgrade for i386 systems running SuSE Linux 7.0.
ftp://ftp.suse.com/pub/suse/i386/update/7.0/kernel/2.2.19-20011026

SuSE 7.0 k_deflt_22-2.2.19-162.i386.rpm
The default kernel upgrade for most systems running SuSE Linux 7.0.
ftp://ftp.suse.com/pub/suse/i386/update/7.0/kernel/2.2.19-20011026

SuSE 7.0 k_smp_22-2.2.19-177.i386.rpm
A kernel upgrade for multi-processor systems running SuSE Linux 7.0.
ftp://ftp.suse.com/pub/suse/i386/update/7.0/kernel/2.2.19-20011026

Linux kernel 2.4

Linux Kernel 2.4.12
ftp://ftp.us.kernel.org/pub/linux/kernel/v2.4/linux-2.4.12.tar.gz

Linux kernel 2.4.1

Linux Kernel 2.4.12
ftp://ftp.us.kernel.org/pub/linux/kernel/v2.4/linux-2.4.12.tar.gz

Linux kernel 2.4.10

Linux Kernel 2.4.12
ftp://ftp.us.kernel.org/pub/linux/kernel/v2.4/linux-2.4.12.tar.gz

SuSE 7.3 i386 k_i386-2.4.10-24.i386.rpm
A kernel upgrade for i386 systems running SuSE Linux 7.3.
ftp://ftp.suse.com/pub/suse/i386/update/7.3/kernel/2.4.10-20011026/

SuSE 7.3 k_deflt-2.4.10-25.i386.rpm
The default kernel upgrade for most systems running SuSE Linux 7.3.
ftp://ftp.suse.com/pub/suse/i386/update/7.3/kernel/2.4.10-20011026/

SuSE 7.3 k_psmp-2.4.10-26.i386.rpm
A kernel upgrade for dual Pentium-I processor systems running SuSE Linux 7.3.
ftp://ftp.suse.com/pub/suse/i386/update/7.3/kernel/2.4.10-20011026/

SuSE 7.3 k_smp-2.4.10-24.i386.rpm
A kernel upgrade for multi-processor systems running SuSE Linux 7.3.
ftp://ftp.suse.com/pub/suse/i386/update/7.3/kernel/2.4.10-20011026/

Linux kernel 2.4.2

Linux Kernel 2.4.12
ftp://ftp.us.kernel.org/pub/linux/kernel/v2.4/linux-2.4.12.tar.gz

Linux kernel 2.4.3

Linux Kernel 2.4.12
ftp://ftp.us.kernel.org/pub/linux/kernel/v2.4/linux-2.4.12.tar.gz

MandrakeSoft 8.0 i586 iptables-1.2.4-1.2mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 iptables-ipv6-1.2.4-1.2mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel-2.4.8-31.2mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel-doc-2.4.8-31.2mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel-enterprise-2.4.8-31.2mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel-headers-2.4.8-31.2mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel-pcmcia-cs-2.4.8-31.2mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel-smp-2.4.8-31.2mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 kernel-source-2.4.8-31.2mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc iptables-1.2.4-1.2mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc iptables-ipv6-1.2.4-1.2mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc kernel-2.4.8-31.3mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc kernel-doc-2.4.8-31.3mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc kernel-headers-2.4.8-31.3mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc kernel-pcmcia-cs-2.4.8-31.3mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc kernel-smp-2.4.8-31.3mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc kernel-source-2.4.8-31.3mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc mol-kmods-0.9.60-1.1mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

Linux kernel 2.4.4

Linux Kernel 2.4.12
ftp://ftp.us.kernel.org/pub/linux/kernel/v2.4/linux-2.4.12.tar.gz

Linux kernel 2.4.5

Linux Kernel 2.4.12
ftp://ftp.us.kernel.org/pub/linux/kernel/v2.4/linux-2.4.12.tar.gz

Linux kernel 2.4.6

Linux Kernel 2.4.12
ftp://ftp.us.kernel.org/pub/linux/kernel/v2.4/linux-2.4.12.tar.gz

Linux kernel 2.4.7

Linux Kernel 2.4.12
ftp://ftp.us.kernel.org/pub/linux/kernel/v2.4/linux-2.4.12.tar.gz

SuSE 7.1 i386 k_i386-2.4.7-21.i386.rpm
A kernel upgrade for i386 systems running SuSE Linux 7.1.
ftp://ftp.suse.com/pub/suse/i386/update/7.1/kernel/2.4.7-20011026/

SuSE 7.1 k_deflt-2.4.7-25.i386.rpm
The default kernel upgrade for most systems running SuSE Linux 7.1.
ftp://ftp.suse.com/pub/suse/i386/update/7.1/kernel/2.4.7-20011026/

SuSE 7.1 k_psmp-2.4.7-21.i386.rpm
A kernel upgrade for dual Pentium-I processor systems running SuSE Linux 7.1.
ftp://ftp.suse.com/pub/suse/i386/update/7.1/kernel/2.4.7-20011026/

SuSE 7.1 k_smp-2.4.7-22.i386.rpm
A kernel upgrade for multi-processor systems running SuSE Linux 7.1.
ftp://ftp.suse.com/pub/suse/i386/update/7.1/kernel/2.4.7-20011026/

SuSE 7.2 i386 k_i386-2.4.7-21.i386.rpm
A kernel upgrade for i386 systems running SuSE Linux 7.2.
ftp://ftp.suse.com/pub/suse/i386/update/7.2/kernel/2.4.7-20011026/

SuSE 7.2 k_deflt-2.4.7-25.i386.rpm
The default kernel upgrade for most systems running SuSE Linux 7.2.
ftp://ftp.suse.com/pub/suse/i386/update/7.2/kernel/2.4.7-20011026/

SuSE 7.2 k_psmp-2.4.7-21.i386.rpm
A kernel upgrade for dual Pentium-I processor systems running SuSE Linux 7.2.
ftp://ftp.suse.com/pub/suse/i386/update/7.2/kernel/2.4.7-20011026/

SuSE 7.2 k_smp-2.4.7-22.i386.rpm
A kernel upgrade for multi-processor systems running SuSE Linux 7.2.
ftp://ftp.suse.com/pub/suse/i386/update/7.2/kernel/2.4.7-20011026/

Linux kernel 2.4.8

Linux Kernel 2.4.12
ftp://ftp.us.kernel.org/pub/linux/kernel/v2.4/linux-2.4.12.tar.gz

MandrakeSoft 8.0 i586 lm_utils-2.4.8_2.6.1-31.2mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 i586 lm_utils-devel-2.4.8_2.6.1-31.2mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc lm_utils-2.4.8_2.6.1-31.3mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.0 ppc lm_utils-devel-2.4.8_2.6.1-31.3mdk.ppc.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 iptables-1.2.4-1.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 iptables-ipv6-1.2.4-1.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel-2.4.8-34.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel-doc-2.4.8-34.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel-enterprise-2.4.8-34.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel-headers-2.4.8-34.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel-pcmcia-cs-2.4.8-34.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel-smp-2.4.8-34.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 kernel-source-2.4.8-34.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 lm_utils-2.4.8_2.6.1-34.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

MandrakeSoft 8.1 i586 lm_utils-devel-2.4.8_2.6.1-34.1mdk.i586.rpm
http://www.linux-mandrake.com/en/ftp.php3

Linux kernel 2.4.9

Linux Kernel 2.4.12
ftp://ftp.us.kernel.org/pub/linux/kernel/v2.4/linux-2.4.12.tar.gz