Secunia Logo
Netsikker nu! 2008
 
Debian update for xfs
Secunia Advisory: SA26282
Release Date: 2007-07-31
Popularity: 3,935 views

Critical:
Not critical
Impact: Privilege escalation
Where: Local system
Solution Status: Partial Fix

OS:Debian GNU/Linux 3.1
Debian GNU/Linux 4.0
Debian GNU/Linux unstable alias sid

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2007-3103


Description:
Debian has issued an update for xfs. This fixes a vulnerability, which can be exploited by malicious, local users to perform actions with escalated privileges.

For more information:
SA26056

Solution:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

There are no updated packages yet. Reportedly, these will be provided in an upcoming security update.

-- Debian GNU/Linux 4.0 alias etch --

Source archives:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6.dsc
Size/MD5 checksum: 794 938a05eb2b1638fc49b4d7101084c69b
http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6.diff.gz
Size/MD5 checksum: 28440 0eeacd5783c66b937eaa1dbde6145401
http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1.orig.tar.gz
Size/MD5 checksum: 174623 32e8b6b24ec3d4c0de11d81061640cc2

Alpha architecture:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6_alpha.deb
Size/MD5 checksum: 75520 0becb7909f5d9df1621d1a8b153eab2b

AMD64 architecture:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6_amd64.deb
Size/MD5 checksum: 65224 632e1a2416a91e079fe16f19f8c18f37

ARM architecture:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6_arm.deb
Size/MD5 checksum: 61330 41a50afe7ca54708028f8929ef9f62a8

HP Precision architecture:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6_hppa.deb
Size/MD5 checksum: 68312 31b1450c324283337298f0671491eddd

Intel IA-32 architecture:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6_i386.deb
Size/MD5 checksum: 56856 40191532dd37541d09a9ff62bf9e6189

Intel IA-64 architecture:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6_ia64.deb
Size/MD5 checksum: 97348 31aacc8828c1dc532db8d5b630de5f5c

Big endian MIPS architecture:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6_mips.deb
Size/MD5 checksum: 69112 c0797a23074512e31edeef83a57817b5

Little endian MIPS architecture:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6_mipsel.deb
Size/MD5 checksum: 69032 3a44f04fd9e3f4b84fd03889bcebeb56

PowerPC architecture:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6_powerpc.deb
Size/MD5 checksum: 64512 00d156e38ef0cf5f5257ae90cef496a2

IBM S/390 architecture:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6_s390.deb
Size/MD5 checksum: 67514 710d362f9183b98f817736e466c89d35

Sun Sparc architecture:

http://security.debian.org/pool/updates/main/x/xfs/xfs_1.0.1-6_sparc.deb
Size/MD5 checksum: 57382 8a32daa22fd7630ff4101e21a4cfaf7d

-- Debian GNU/Linux unstable alias sid --

Fixed in version 1.0.4-2.

Original Advisory:
http://lists.debian.org/debian-securi...-security-announce-2007/msg00104.html

Other References:
SA26056:
http://secunia.com/advisories/26056/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. noName CMS "index.php" SQL Injection Vulnerabilities // 107 views
2. Juniper Products Neighbor Discovery Protocol Neighbor Solicitation Vulnerability // 67 views
3. Fedora update for mediawiki // 64 views
4. SUSE update for MozillaFirefox // 60 views
5. IBM Lotus Quickr Security Issues and Denial of Service // 59 views
6. D-Bus "_dbus_validate_signature_with_reason()" Denial of Service // 50 views
7. Debian update for lighttpd // 47 views
8. HP-UX NFS/ONCplus Denial of Service Vulnerability // 46 views
9. Kwalbum "UploaditemsPage.php" File Upload Vulnerability // 45 views
10. iseemedia LPViewer ActiveX Control Multiple Buffer Overflow Vulnerabilities // 41 views