-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1712-1 security@xxxxxxxxxx http://www.debian.org/security/ Moritz Muehlenhoff January 28, 2009 http://www.debian.org/security/faq - ------------------------------------------------------------------------ Package : rt2400 Vulnerability : integer overflow Problem type : remote Debian-specific: no CVE Id(s) : CVE-2009-0282 It was discovered that an integer overflow in the "Probe Request" packet parser of the Ralinktech wireless drivers might lead to remote denial of service or the execution of arbitrary code. Please note that you need to rebuild your driver from the source package in order to set this update into effect. Detailed instructions can be found in /usr/share/doc/rt2400-source/README.Debian For the stable distribution (etch), this problem has been fixed in version 1.2.2+cvs20060620-4+etch1. For the upcoming stable distribution (lenny) and the unstable distribution (sid), this problem has been fixed in version 1.2.2+cvs20080623-3. We recommend that you upgrade your rt2400 package. Upgrade instructions - -------------------- wget url will fetch the file for you dpkg -i file.deb will install the referenced file. If you are using the apt-get package manager, use the line for sources.list as given below: apt-get update will update the internal database apt-get upgrade will install corrected packages You may use an automated update by adding the resources from the footer to the proper configuration. Debian GNU/Linux 4.0 alias etch - ------------------------------- Stable updates are available for amd64, arm, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc. Source archives: http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1.diff.gz Size/MD5 checksum: 7714 8e2c4e3994e44d85fbeb2fa7008450e6 http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620.orig.tar.gz Size/MD5 checksum: 222661 333bf6d7fa81a6d78c72aad6a48e9bc3 http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1.dsc Size/MD5 checksum: 740 50541cf208cbf6ea4a1daa43fb3310e1 Architecture independent packages: http://security.debian.org/pool/updates/main/r/rt2400/rt2400-source_1.2.2+cvs20060620-4+etch1_all.deb Size/MD5 checksum: 173206 daa9749dbfce18e2b01dbd780d1ad72c amd64 architecture (AMD x86_64 (AMD64)) http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1_amd64.deb Size/MD5 checksum: 99638 01755d0da49a73c9fab80ac6a1578e2e arm architecture (ARM) http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1_arm.deb Size/MD5 checksum: 118484 6175c5c6e0b4cd9b8debaa2a0b1c9b27 hppa architecture (HP PA RISC) http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1_hppa.deb Size/MD5 checksum: 107430 7dd595c837b5da5d4a82cf0ada0e2e5c i386 architecture (Intel ia32) http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1_i386.deb Size/MD5 checksum: 96342 4175c89f1225fa118df7e39dcf1802e4 ia64 architecture (Intel ia64) http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1_ia64.deb Size/MD5 checksum: 127374 3edfc63723ea340604b7506e8b914f11 mips architecture (MIPS (Big Endian)) http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1_mips.deb Size/MD5 checksum: 98572 1d73f7d80336187bbd87640a8ad84938 mipsel architecture (MIPS (Little Endian)) http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1_mipsel.deb Size/MD5 checksum: 97994 4106b884f5ebf8256c1e5be167388333 powerpc architecture (PowerPC) http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1_powerpc.deb Size/MD5 checksum: 94938 f8674036f710a5614ff54bdc30b8cdb2 s390 architecture (IBM S/390) http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1_s390.deb Size/MD5 checksum: 83772 e70417720e8afd4521279964cc36ecda sparc architecture (Sun SPARC/UltraSPARC) http://security.debian.org/pool/updates/main/r/rt2400/rt2400_1.2.2+cvs20060620-4+etch1_sparc.deb Size/MD5 checksum: 91478 11d9a654f14f5385c03e874fd1f222f5 These files will probably be moved into the stable distribution on its next update. - --------------------------------------------------------------------------------- For apt-get: deb http://security.debian.org/ stable/updates main For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkmA0cAACgkQXm3vHE4uylq2wgCgvoDUWKX747jmrgGu6Lxz6UNr jyAAn33mDH3wZWGslWHWOlXQv0YEUi88 =Tpj1 -----END PGP SIGNATURE-----
