Synopsis: Low: openafs security update Issue date: 21-Dec-2007 CVE Names: OpenAFS Security Advisory 2007-003 In pthread-aware fileservers, the "host_glock" pthread lock, accessed via the H_LOCK and H_UNLOCK macros, is used to provide safe access to host structures. This lock is required to be held when updating information pertaining to a host. The RPC handler for the GiveUpAllCallBacks RPC did not hold this lock while performing its work. This errata is already in SL 4.6. So it only applies to SL 40-45 SL 4.x SRPMS: openafs.SLx-1.4.6-58.src.rpm i386: openafs-1.4.6-58.SL4.i386.rpm openafs-authlibs-1.4.6-58.SL4.i386.rpm openafs-authlibs-devel-1.4.6-58.SL4.i386.rpm openafs-client-1.4.6-58.SL4.i386.rpm openafs-compat-1.4.6-58.SL4.i386.rpm openafs-debug-1.4.6-58.SL4.i386.rpm openafs-devel-1.4.6-58.SL4.i386.rpm openafs-kernel-source-1.4.6-58.SL4.i386.rpm openafs-kpasswd-1.4.6-58.SL4.i386.rpm openafs-krb5-1.4.6-58.SL4.i386.rpm openafs-server-1.4.6-58.SL4.i386.rpm x86_64: openafs-1.4.6-58.SL4.x86_64.rpm openafs-authlibs-1.4.6-58.SL4.x86_64.rpm openafs-authlibs-devel-1.4.6-58.SL4.x86_64.rpm openafs-client-1.4.6-58.SL4.x86_64.rpm openafs-compat-1.4.6-58.SL4.x86_64.rpm openafs-debug-1.4.6-58.SL4.x86_64.rpm openafs-devel-1.4.6-58.SL4.x86_64.rpm openafs-kernel-source-1.4.6-58.SL4.x86_64.rpm openafs-kpasswd-1.4.6-58.SL4.x86_64.rpm openafs-krb5-1.4.6-58.SL4.x86_64.rpm openafs-server-1.4.6-58.SL4.x86_64.rpm -Connie Sieh -Troy Dawson