Synopsis: Important: kernel security and bug fix update
Issue date: 2008-01-31
CVE Names: CVE-2007-4130 CVE-2007-5500 CVE-2007-6063
CVE-2007-6151 CVE-2007-6206 CVE-2007-6694
CVE-2008-0001
These updated kernel packages fix the following security issues:
A flaw was found in the virtual filesystem (VFS). A local unprivileged
user could truncate directories to which they had write permission; this
could render the contents of the directory inaccessible. (CVE-2008-0001,
Important)
A flaw was found in the implementation of ptrace. A local unprivileged
user could trigger this flaw and possibly cause a denial of service
(system hang). (CVE-2007-5500, Important)
A flaw was found in the way the Red Hat Enterprise Linux 4 kernel
handled page faults when a CPU used the NUMA method for accessing memory
on Itanium architectures. A local unprivileged user could trigger this
flaw and cause a denial of service (system panic). (CVE-2007-4130,
Important)
A possible NULL pointer dereference was found in the chrp_show_cpuinfo
function when using the PowerPC architecture. This may have allowed a
local unprivileged user to cause a denial of service (crash).
(CVE-2007-6694, Moderate)
A flaw was found in the way core dump files were created. If a local
user can get a root-owned process to dump a core file into a directory,
which the user has write access to, they could gain read access to that
core file. This could potentially grant unauthorized access to sensitive
information. (CVE-2007-6206, Moderate)
Two buffer overflow flaws were found in the Linux kernel ISDN subsystem.
A local unprivileged user could use these flaws to cause a denial of
service. (CVE-2007-6063, CVE-2007-6151, Moderate)
As well, these updated packages fix the following bug:
* when moving volumes that contain multiple segments, and a mirror
segment is not the first in the mapping table, running the "pvmove
/dev/[device] /dev/[device]" command caused a kernel panic. A "kernel:
Unable to handle kernel paging request at virtual address [address]"
error was logged by syslog.
SL 4.x
SRPMS:
i386:
kernel-2.6.9-67.0.4.EL.i686.rpm
kernel-devel-2.6.9-67.0.4.EL.i686.rpm
kernel-doc-2.6.9-67.0.4.EL.noarch.rpm
kernel-hugemem-2.6.9-67.0.4.EL.i686.rpm
kernel-hugemem-devel-2.6.9-67.0.4.EL.i686.rpm
kernel-smp-2.6.9-67.0.4.EL.i686.rpm
kernel-smp-devel-2.6.9-67.0.4.EL.i686.rpm
kernel-xenU-2.6.9-67.0.4.EL.i686.rpm
kernel-xenU-devel-2.6.9-67.0.4.EL.i686.rpm
Dependancies:
kernel-module-fuse-2.6.9-67.0.4.EL-2.5.3-1.el4_6.i686.rpm
kernel-module-fuse-2.6.9-67.0.4.ELhugemem-2.5.3-1.el4_6.i686.rpm
kernel-module-fuse-2.6.9-67.0.4.ELsmp-2.5.3-1.el4_6.i686.rpm
kernel-module-fuse-2.6.9-67.0.4.ELxenU-2.5.3-1.el4_6.i686.rpm
kernel-module-ipw3945-2.6.9-67.0.4.EL-1.1.0-1.SL4.i686.rpm
kernel-module-ipw3945-2.6.9-67.0.4.ELhugemem-1.1.0-1.SL4.i686.rpm
kernel-module-ipw3945-2.6.9-67.0.4.ELsmp-1.1.0-1.SL4.i686.rpm
kernel-module-ipw3945-2.6.9-67.0.4.ELxenU-1.1.0-1.SL4.i686.rpm
kernel-module-madwifi-2.6.9-67.0.4.EL-0.9.3.1-10.sl4.i686.rpm
kernel-module-madwifi-2.6.9-67.0.4.ELhugemem-0.9.3.1-10.sl4.i686.rpm
kernel-module-madwifi-2.6.9-67.0.4.ELsmp-0.9.3.1-10.sl4.i686.rpm
kernel-module-madwifi-hal-2.6.9-67.0.4.EL-0.9.3.1-10.sl4.i686.rpm
kernel-module-madwifi-hal-2.6.9-67.0.4.ELhugemem-0.9.3.1-10.sl4.i686.rpm
kernel-module-madwifi-hal-2.6.9-67.0.4.ELsmp-0.9.3.1-10.sl4.i686.rpm
kernel-module-ndiswrapper-2.6.9-67.0.4.EL-1.41-1.SL.i686.rpm
kernel-module-ndiswrapper-2.6.9-67.0.4.ELhugemem-1.41-1.SL.i686.rpm
kernel-module-ndiswrapper-2.6.9-67.0.4.ELsmp-1.41-1.SL.i686.rpm
kernel-module-ndiswrapper-2.6.9-67.0.4.ELxenU-1.41-1.SL.i686.rpm
kernel-module-openafs-2.6.9-67.0.4.EL-1.4.4-46.SL4.i686.rpm
kernel-module-openafs-2.6.9-67.0.4.ELhugemem-1.4.4-46.SL4.i686.rpm
kernel-module-openafs-2.6.9-67.0.4.ELsmp-1.4.4-46.SL4.i686.rpm
kernel-module-openafs-2.6.9-67.0.4.ELxenU-1.4.4-46.SL4.i686.rpm
kernel-module-r1000-2.6.9-67.0.4.EL-2.2-2.SL4x.i686.rpm
kernel-module-r1000-2.6.9-67.0.4.ELhugemem-2.2-2.SL4x.i686.rpm
kernel-module-r1000-2.6.9-67.0.4.ELsmp-2.2-2.SL4x.i686.rpm
kernel-module-r1000-2.6.9-67.0.4.ELxenU-2.2-2.SL4x.i686.rpm
x86_64:
kernel-2.6.9-67.0.4.EL.x86_64.rpm
kernel-devel-2.6.9-67.0.4.EL.x86_64.rpm
kernel-doc-2.6.9-67.0.4.EL.noarch.rpm
kernel-largesmp-2.6.9-67.0.4.EL.x86_64.rpm
kernel-largesmp-devel-2.6.9-67.0.4.EL.x86_64.rpm
kernel-smp-2.6.9-67.0.4.EL.x86_64.rpm
kernel-smp-devel-2.6.9-67.0.4.EL.x86_64.rpm
kernel-xenU-2.6.9-67.0.4.EL.x86_64.rpm
kernel-xenU-devel-2.6.9-67.0.4.EL.x86_64.rpm
Dependancies:
kernel-module-fuse-2.6.9-67.0.4.EL-2.5.3-1.el4.x86_64.rpm
kernel-module-fuse-2.6.9-67.0.4.ELlargesmp-2.5.3-1.el4.x86_64.rpm
kernel-module-fuse-2.6.9-67.0.4.ELsmp-2.5.3-1.el4.x86_64.rpm
kernel-module-fuse-2.6.9-67.0.4.ELxenU-2.5.3-1.el4.x86_64.rpm
kernel-module-ipw3945-2.6.9-67.0.4.EL-1.1.0-1.SL4.x86_64.rpm
kernel-module-ipw3945-2.6.9-67.0.4.ELlargesmp-1.1.0-1.SL4.x86_64.rpm
kernel-module-ipw3945-2.6.9-67.0.4.ELsmp-1.1.0-1.SL4.x86_64.rpm
kernel-module-ipw3945-2.6.9-67.0.4.ELxenU-1.1.0-1.SL4.x86_64.rpm
kernel-module-madwifi-2.6.9-67.0.4.EL-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-madwifi-2.6.9-67.0.4.ELlargesmp-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-madwifi-2.6.9-67.0.4.ELsmp-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-madwifi-hal-2.6.9-67.0.4.EL-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-madwifi-hal-2.6.9-67.0.4.ELlargesmp-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-madwifi-hal-2.6.9-67.0.4.ELsmp-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-67.0.4.EL-1.41-1.SL.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-67.0.4.ELlargesmp-1.41-1.SL.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-67.0.4.ELsmp-1.41-1.SL.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-67.0.4.ELxenU-1.41-1.SL.x86_64.rpm
kernel-module-openafs-2.6.9-67.0.4.EL-1.4.4-46.SL4.x86_64.rpm
kernel-module-openafs-2.6.9-67.0.4.ELlargesmp-1.4.4-46.SL4.x86_64.rpm
kernel-module-openafs-2.6.9-67.0.4.ELsmp-1.4.4-46.SL4.x86_64.rpm
kernel-module-openafs-2.6.9-67.0.4.ELxenU-1.4.4-46.SL4.x86_64.rpm
kernel-module-r1000-2.6.9-67.0.4.EL-2.2-2.SL4x.x86_64.rpm
kernel-module-r1000-2.6.9-67.0.4.ELlargesmp-2.2-2.SL4x.x86_64.rpm
kernel-module-r1000-2.6.9-67.0.4.ELsmp-2.2-2.SL4x.x86_64.rpm
kernel-module-r1000-2.6.9-67.0.4.ELxenU-2.2-2.SL4x.x86_64.rpm
-Connie Sieh
-Troy Dawson
