Fedora Core 2: 2005-014 Critical Kernel Update for Privilege Escalation

The kernel package contains the Linux kernel (vmlinuz), the core of any

Linux operating system. The kernel handles the basic functions

of the operating system: memory allocation, process allocation, device

input and output, etc.

This update rebases the kernel to match the upstream 2.6.10 release,

and adds a number of security fixes by means of adding the latest -ac patch.

CAN-2004-1235

Paul Starzetz from isec.pl found a problem in the binary format loaders uselib()

function that could lead to potential priveledge escalation.

https://isec.pl/en/vulnerabilities/isec-0021-uselib.txt

NO-CAN-ASSIGNED

Brad Spengler found several problems.

- An integer overflow in the random poolsize sysctl handler.

- SCSI ioctl integer overflow and information leak.

- RLIMIT_MEMLOCK bypass and unprivileged user DoS.

NO-CAN-ASSIGNED

Coverity Inc. found a number of bugs with their automated source checker

in coda, xfs, network bridging, rose network protocol, and the sdla wan driver.

- Periodic slab debug is incompatable with pagealloc debug.

Disable the latter.

- Update to 2.6.10-ac8

* Fri Jan 07 2005 Dave Jones

- Bump up to -ac7

- Another new card reader.

* Thu Jan 06 2005 Dave Jones

- Rebase to 2.6.10-ac5

* Tue Jan 04 2005 Dave Jones

- Rebase to 2.6.10-ac4

- Add periodic slab debug checker.

* Mon Jan 03 2005 Dave Jones

- Drop patch which meant we needed a newer gcc. (#144035)

- Rebase to 2.6.10-ac2

- Enable SL82C104 IDE driver as built-in on PPC64 (#131033)

2567737b275271fdfe07a945bfcf589c SRPMS/kernel-2.6.10-1.8_FC2.src.rpm

ba0e3dd4951b16604367c6b89ed28259 x86_64/kernel-2.6.10-1.8_FC2.x86_64.rpm

f65bd59399f26e0acfe9959778b7e5c1 x86_64/kernel-smp-2.6.10-1.8_FC2.x86_64.rpm

05938f7dd41af2f123c3708875799b92 x86_64/debug/kernel-debuginfo-2.6.10-1.8_FC2.x86_64.rpm

d7483c386856100b92e7b74815fd440c x86_64/kernel-sourcecode-2.6.10-1.8_FC2.noarch.rpm

2a11a413fde60aa1e56629f1475b732c x86_64/kernel-doc-2.6.10-1.8_FC2.noarch.rpm

e27242948960d9599769d71fec2a3456 i386/kernel-2.6.10-1.8_FC2.i586.rpm

c27dedd762701392a71d26fc682d9e32 i386/kernel-smp-2.6.10-1.8_FC2.i586.rpm

05645feaa5c84a21fd7a795e7d5afd2c i386/debug/kernel-debuginfo-2.6.10-1.8_FC2.i586.rpm

ac41f896f312dfd23654ed073e91f090 i386/kernel-2.6.10-1.8_FC2.i686.rpm

ee41150aeab7e2242245dfd49e22138e i386/kernel-smp-2.6.10-1.8_FC2.i686.rpm

e731c190eba0e65a1ba401ec9d8db14e i386/debug/kernel-debuginfo-2.6.10-1.8_FC2.i686.rpm

d7483c386856100b92e7b74815fd440c i386/kernel-sourcecode-2.6.10-1.8_FC2.noarch.rpm

2a11a413fde60aa1e56629f1475b732c i386/kernel-doc-2.6.10-1.8_FC2.noarch.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com