Synopsis:          Moderate: kernel security and bug fix update
Issue Date:        2012-08-14
CVE Numbers:       CVE-2011-1078
                    CVE-2012-2383

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issues:

* An integer overflow flaw was found in the i915_gem_execbuffer2() function
in the Intel i915 driver in the Linux kernel. A local, unprivileged user
could use this flaw to cause a denial of service. This issue only affected
32-bit systems. (CVE-2012-2383, Moderate)

* A missing initialization flaw was found in the sco_sock_getsockopt_old()
function in the Linux kernel's Bluetooth implementation. A local,
unprivileged user could use this flaw to cause an information leak.
(CVE-2011-1078, Low)

This update also fixes several bugs.

Users should upgrade to these updated packages, which contain backported
patches to correct these issues. The system must be rebooted for this
update to take effect.

SL6
   x86_64
     kernel-2.6.32-279.5.1.el6.x86_64.rpm
     kernel-debug-2.6.32-279.5.1.el6.x86_64.rpm
     kernel-debug-devel-2.6.32-279.5.1.el6.x86_64.rpm
     kernel-devel-2.6.32-279.5.1.el6.x86_64.rpm
     kernel-headers-2.6.32-279.5.1.el6.x86_64.rpm
     perf-2.6.32-279.5.1.el6.x86_64.rpm
     python-perf-2.6.32-279.5.1.el6.x86_64.rpm
   i386
     kernel-2.6.32-279.5.1.el6.i686.rpm
     kernel-debug-2.6.32-279.5.1.el6.i686.rpm
     kernel-debug-devel-2.6.32-279.5.1.el6.i686.rpm
     kernel-devel-2.6.32-279.5.1.el6.i686.rpm
     kernel-headers-2.6.32-279.5.1.el6.i686.rpm
     perf-2.6.32-279.5.1.el6.i686.rpm
     python-perf-2.6.32-279.5.1.el6.i686.rpm
   noarch
     kernel-doc-2.6.32-279.5.1.el6.noarch.rpm
     kernel-firmware-2.6.32-279.5.1.el6.noarch.rpm

- Scientific Linux Development Team