Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Fedora Core 2: FEDORA-2004-450 Critical Kernel Security Update

fedora
Calendar Grey November 22, 2004
Scroller Fedora
The recent update to Fedora Core 2's kernel version 2.6.9 introduces a range of security improvements and optimizations derived from the mainline kernel.
This update brings a rebase to 2.6.9, including various security fixes incorporated into the upstream kernel, and also includes Alan Cox's -ac patchset, which adds additional secur...

Summary

The kernel package contains the Linux kernel (vmlinuz), the core of any

Linux operating system. The kernel handles the basic functions

of the operating system: memory allocation, process allocation, device

input and output, etc.

This update brings a rebase to 2.6.9, including various security

fixes incorporated into the upstream kernel, and also includes

Alan Cox's -ac patchset, which adds additional security fixes.

* Thu Nov 18 2004 Dave Jones <davej@redhat.com>

- Drop 2.6.9 changes that broke megaraid. (#139723)

- Update to 2.6.9-ac10, fixing the SATA problems (#139674)

- Update the OOM-killer tamer to upstream.

- Implement an RCU scheme for the SELinux AVC

- Improve on the OOM-killer taming patch.

- device-mapper: Remove duplicate kfree in dm_register_target error path.

- Make SHA1 guard against misaligned accesses

- ASPM workaround for PCIe. (#123360)

- Hot-plug driver updates due to MSI change (#134290)

- Workaround for 80332 IOP hot-plug problem (#139041)

- ExpressCard hot-plug support for ICH6M (#131800)

- Fix boot crash on VIA systems (noted on x86-64)

- PPC64: Store correct backtracking info in ppc64 signal frames

- PPC64: Prevent HVSI from oopsing on hangup (#137912)

- Fix poor performance b/c of noncacheable mapping in 4g/4g (#130842)

- Fix PCI-X hotplug issues (#132852, #134290)

- Re-export force_sig() (#139503)

- Various fixes for more security issues from latest -ac patch.

- Fix d_find_alias brokenness (#137791)

- tg3: Fix fiber hw autoneg bounces (#138738)

- diskdump: Fix issue with NMI watchdog. (#138041)

- diskdump: Export disk_dump_state. (#138132)

- diskdump: Tickle NMI watchdog in diskdump_mdelay() (#138036)

- diskdump: Fix mem= for x86-64 (#138139)

- diskdump: Fix missing system_state setting. (#138130)

- diskdump: Fix diskdump completion message (#138028)

- Re-add aic host raid support.

- Take a few more export removal patches from 2.6.10rc

- SATA: Make AHCI work

- SATA: Core updates.

- S390: Fix Incorrect registers in core dumps. (#138206)

- S390: Fix up lcs device state. (#131167)

- S390: Fix possible qeth IP registration failure.

- S390: Support broadcast on z800/z900 HiperSockets

- S390: Allow FCP port to recover after aborted nameserver request.

- Flush error in pci_mmcfg_write (#129338)

- hugetlb_get_unmapped_area fix (#135364, #129525)

- Fix ia64 cyclone timer on ia64 (#137842, #136684)

- Fix ipv6 MTU calculation. (#130397)

- ACPI: Don't display messages about ACPI breakpoints. (#135856)

- Fix x86_64 copy_user_generic (#135655)

- lockd: remove hardcoded maximum NLM cookie length

- Fix SCSI bounce limit

- Disable polling mode on hotplug controllers in favour of interrupt driven. (#138737)

This update can be downloaded from:

66ab5382ed9eec4982fc402d6ce4f9bf SRPMS/kernel-2.6.9-1.6_FC2.src.rpm

401f7fa645779cc90d496b646aeea273 x86_64/kernel-2.6.9-1.6_FC2.x86_64.rpm

1c19136bce772dc221f6870ccfbbefa6 x86_64/kernel-smp-2.6.9-1.6_FC2.x86_64.rpm

0cd4b464f8ed4b69e4619d0c82f52d9e x86_64/debug/kernel-debuginfo-2.6.9-1.6_FC2.x86_64.rpm

7fcd816a030aad2cf1e6ab5b60202835 x86_64/kernel-sourcecode-2.6.9-1.6_FC2.noarch.rpm

db300bdf5e4a41c9652ce4b9ca4ff7fc x86_64/kernel-doc-2.6.9-1.6_FC2.noarch.rpm

6342fa5a3f23a27be3b1cadf50d6cc65 i386/kernel-2.6.9-1.6_FC2.i586.rpm

2732787265b857fb428341dfd8d127e2 i386/kernel-smp-2.6.9-1.6_FC2.i586.rpm

f8ebb80a0b184c000f81cd3dc177a5d4 i386/debug/kernel-debuginfo-2.6.9-1.6_FC2.i586.rpm

a143a0c9bd6ce972bd5019edb2317de1 i386/kernel-2.6.9-1.6_FC2.i686.rpm

bfcc2673b0cd246de0ef5f29173392ad i386/kernel-smp-2.6.9-1.6_FC2.i686.rpm

b96f00956a40ba467506d8fce61fea49 i386/debug/kernel-debuginfo-2.6.9-1.6_FC2.i686.rpm

7fcd816a030aad2cf1e6ab5b60202835 i386/kernel-sourcecode-2.6.9-1.6_FC2.noarch.rpm

db300bdf5e4a41c9652ce4b9ca4ff7fc i386/kernel-doc-2.6.9-1.6_FC2.noarch.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

--

fedora-announce-list mailing list

fedora-announce-list@redhat.com

fedora-announce-list Info Page

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora Core 2
Name: kernel
Version: 2.6.9
Release: 1.6_FC2
Summary: The Linux kernel (the core of the Linux operating system)

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.