Synopsis:          Important: kernel security, bug fix, and enhancement update
Advisory ID:       SLSA-2013:0911-1
Issue Date:        2013-06-10
CVE Numbers:       CVE-2013-1935
                   CVE-2013-1943
                   CVE-2013-2017
--

This update fixes the following security issues:

* A flaw was found in the way KVM (Kernel-based Virtual Machine)
initialized a guest's registered pv_eoi (paravirtualized end-of-interrupt)
indication flag when entering the guest. An unprivileged guest user could
potentially use this flaw to crash the host. (CVE-2013-1935, Important)

* A missing sanity check was found in the kvm_set_memory_region() function
in KVM, allowing a user-space process to register memory regions pointing
to the kernel address space. A local, unprivileged user could use this
flaw to escalate their privileges. (CVE-2013-1943, Important)

* A double free flaw was found in the Linux kernel's Virtual Ethernet
Tunnel driver (veth). A remote attacker could possibly use this flaw to
crash a target system. (CVE-2013-2017, Moderate)

The system must be rebooted for this update to take effect.
--

SL6
  x86_64
    kernel-2.6.32-358.11.1.el6.x86_64.rpm
    kernel-debug-2.6.32-358.11.1.el6.x86_64.rpm
    kernel-debug-debuginfo-2.6.32-358.11.1.el6.x86_64.rpm
    kernel-debug-devel-2.6.32-358.11.1.el6.x86_64.rpm
    kernel-debuginfo-2.6.32-358.11.1.el6.x86_64.rpm
    kernel-debuginfo-common-x86_64-2.6.32-358.11.1.el6.x86_64.rpm
    kernel-devel-2.6.32-358.11.1.el6.x86_64.rpm
    kernel-headers-2.6.32-358.11.1.el6.x86_64.rpm
    perf-2.6.32-358.11.1.el6.x86_64.rpm
    perf-debuginfo-2.6.32-358.11.1.el6.x86_64.rpm
    python-perf-debuginfo-2.6.32-358.11.1.el6.x86_64.rpm
    python-perf-2.6.32-358.11.1.el6.x86_64.rpm
  i386
    kernel-2.6.32-358.11.1.el6.i686.rpm
    kernel-debug-2.6.32-358.11.1.el6.i686.rpm
    kernel-debug-debuginfo-2.6.32-358.11.1.el6.i686.rpm
    kernel-debug-devel-2.6.32-358.11.1.el6.i686.rpm
    kernel-debuginfo-2.6.32-358.11.1.el6.i686.rpm
    kernel-debuginfo-common-i686-2.6.32-358.11.1.el6.i686.rpm
    kernel-devel-2.6.32-358.11.1.el6.i686.rpm
    kernel-headers-2.6.32-358.11.1.el6.i686.rpm
    perf-2.6.32-358.11.1.el6.i686.rpm
    perf-debuginfo-2.6.32-358.11.1.el6.i686.rpm
    python-perf-debuginfo-2.6.32-358.11.1.el6.i686.rpm
    python-perf-2.6.32-358.11.1.el6.i686.rpm
  noarch
    kernel-doc-2.6.32-358.11.1.el6.noarch.rpm
    kernel-firmware-2.6.32-358.11.1.el6.noarch.rpm

- Scientific Linux Development Team