The following ERRATA for SL 301,302,303,304,305 i386 are now available from: ftp://ftp.scientificlinux.org/linux/scientific/301,302,303,304,305/i386/errata/SL/RPMS/ ftp://ftp.scientificlinux.org/linux/scientific/302,303,304,305/x86_64/errata/SL/RPMS/ Synopsis: Updated kernel packages that fix several security issues in the Scientific Linux 3x kernel are now available Severity: important Issued on: 2006-01-19 CVEs: CVE-2002-2185 CVE-2004-1057 CVE-2005-2708 CVE-2005-2709 CVE-2005-2973 CVE-2005-3044 CVE-2005-3180 CVE-2005-3275 CVE-2005-3806 CVE-2005-3848 CVE-2005-3857 CVE-2005-3858 Details: - flaw in network IGMP processing that a allowed a remote user on the local network to cause a denial of service (disabling of multicast reports) if the system is running multicast applications (CVE-2002-2185, moderate) - flaw in remap_page_range() with O_DIRECT writes that allowed a local user to cause a denial of service (crash) (CVE-2004-1057, important) - flaw in exec() handling on some 64-bit architectures that allowed a local user to cause a denial of service (crash) (CVE-2005-2708, important) - flaw in procfs handling during unloading of modules that allowed a local user to cause a denial of service or potentially gain privileges (CVE-2005-2709, moderate) - flaw in IPv6 network UDP port hash table lookups that allowed a local user to cause a denial of service (hang) (CVE-2005-2973, important) - flaw in 32-bit-compat handling of the TIOCGDEV ioctl that allowed a local user to cause a denial of service (crash) (CVE-2005-3044, important) - network buffer info leak using the orinoco driver that allowed a remote user to possibly view uninitialized data (CVE-2005-3180, important) - flaw in IPv4 network TCP and UDP netfilter handling that allowed a local user to cause a denial of service (crash) (CVE-2005-3275, important) - flaw in the IPv6 flowlabel code that allowed a local user to cause a denial of service (crash) (CVE-2005-3806, important) - flaw in network ICMP processing that allowed a local user to cause a denial of service (memory exhaustion) (CVE-2005-3848, important) - flaw in file lease time-out handling that allowed a local user to cause a denial of service (log file overflow) (CVE-2005-3857, moderate) - flaw in network IPv6 xfrm handling that allowed a local user to cause a denial of service (memory exhaustion) (CVE-2005-3858, important) SRPMS kernel-2.4.21-37.0.1.EL.src.rpm i386 kernel-2.4.21-37.0.1.EL.athlon.rpm kernel-2.4.21-37.0.1.EL.i686.rpm kernel-BOOT-2.4.21-37.0.1.EL.i386.rpm kernel-doc-2.4.21-37.0.1.EL.i386.rpm kernel-hugemem-2.4.21-37.0.1.EL.i686.rpm kernel-hugemem-unsupported-2.4.21-37.0.1.EL.i686.rpm kernel-smp-2.4.21-37.0.1.EL.athlon.rpm kernel-smp-2.4.21-37.0.1.EL.i686.rpm kernel-smp-unsupported-2.4.21-37.0.1.EL.athlon.rpm kernel-smp-unsupported-2.4.21-37.0.1.EL.i686.rpm kernel-source-2.4.21-37.0.1.EL.i386.rpm kernel-unsupported-2.4.21-37.0.1.EL.athlon.rpm kernel-unsupported-2.4.21-37.0.1.EL.i686.rpm kernel-module-openafs-2.4.21-37.0.1.EL-1.2.13-15.17.SL.athlon.rpm kernel-module-openafs-2.4.21-37.0.1.EL-1.2.13-15.17.SL.i686.rpm kernel-module-openafs-2.4.21-37.0.1.ELsmp-1.2.13-15.17.SL.athlon.rpm kernel-module-openafs-2.4.21-37.0.1.ELsmp-1.2.13-15.17.SL.i686.rpm x86_64 kernel-2.4.21-37.0.1.EL.ia32e.rpm kernel-2.4.21-37.0.1.EL.x86_64.rpm kernel-doc-2.4.21-37.0.1.EL.x86_64.rpm kernel-smp-2.4.21-37.0.1.EL.x86_64.rpm kernel-smp-unsupported-2.4.21-37.0.1.EL.x86_64.rpm kernel-source-2.4.21-37.0.1.EL.x86_64.rpm kernel-unsupported-2.4.21-37.0.1.EL.ia32e.rpm kernel-unsupported-2.4.21-37.0.1.EL.x86_64.rpm kernel-module-openafs-2.4.21-37.0.1.EL-1.2.13-15.17.SL.ia32e.rpm kernel-module-openafs-2.4.21-37.0.1.EL-1.2.13-15.17.SL.x86_64.rpm kernel-module-openafs-2.4.21-37.0.1.ELsmp-1.2.13-15.17.SL.x86_64.rpm -Connie Sieh -Troy Dawson