Scientific Linux 5.x Kernel Critical Denial Of Service CVE-2006-7203

Date: Mon, 18 Jun 2007 15:35:31 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA for kernel on SL5.x i386/x86_64
Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it.

Synopsis:	Important: kernel security and bug fix update
Issue date:	2007-06-14
CVE Names:	CVE-2006-7203 CVE-2007-1353 CVE-2007-2453
 CVE-2007-2525

a flaw in the mount handling routine for 64-bit systems that allowed a
local user to cause denial of service (CVE-2006-7203, Important).

a flaw in the PPP over Ethernet implementation that allowed a remote user
to cause a denial of service (CVE-2007-2525, Important).

a flaw in the Bluetooth subsystem that allowed a local user to trigger an
information leak (CVE-2007-1353, Low).

a bug in the random number generator that prevented the manual seeding of
the entropy pool (CVE-2007-2453, Low).

In addition to the security issues described above, fixes for the following
have been included:

* a race condition between ext3_link/unlink that could create an orphan
inode list corruption.

* a bug in the e1000 driver that could lead to a watchdog timeout panic.

SL 5.x

 SRPMS:
	kernel-2.6.18-8.1.6.el5.src.rpm
 i386:
	kernel-2.6.18-8.1.6.el5.i686.rpm
	kernel-devel-2.6.18-8.1.6.el5.i686.rpm
	kernel-doc-2.6.18-8.1.6.el5.noarch.rpm
	kernel-headers-2.6.18-8.1.6.el5.i386.rpm
	kernel-PAE-2.6.18-8.1.6.el5.i686.rpm
	kernel-PAE-devel-2.6.18-8.1.6.el5.i686.rpm
	kernel-xen-2.6.18-8.1.6.el5.i686.rpm
	kernel-xen-devel-2.6.18-8.1.6.el5.i686.rpm
Dependancies:
 kernel-module-fuse-2.6.18-8.1.6.el5-2.6.3-1.el5.i686.rpm
 kernel-module-fuse-2.6.18-8.1.6.el5PAE-2.6.3-1.el5.i686.rpm
 kernel-module-fuse-2.6.18-8.1.6.el5xen-2.6.3-1.el5.i686.rpm
 kernel-module-ipw3945-2.6.18-8.1.6.el5-1.2.0-1.sl5.i686.rpm
 kernel-module-ipw3945-2.6.18-8.1.6.el5PAE-1.2.0-1.sl5.i686.rpm
 kernel-module-ipw3945-2.6.18-8.1.6.el5xen-1.2.0-1.sl5.i686.rpm
 kernel-module-madwifi-2.6.18-8.1.6.el5-0.9.3.1-11.sl5.i686.rpm
 kernel-module-madwifi-2.6.18-8.1.6.el5PAE-0.9.3.1-11.sl5.i686.rpm
 kernel-module-madwifi-2.6.18-8.1.6.el5xen-0.9.3.1-11.sl5.i686.rpm
 kernel-module-madwifi-hal-2.6.18-8.1.6.el5-0.9.3.1-11.sl5.i686.rpm
 kernel-module-madwifi-hal-2.6.18-8.1.6.el5PAE-0.9.3.1-11.sl5.i686.rpm
 kernel-module-madwifi-hal-2.6.18-8.1.6.el5xen-0.9.3.1-11.sl5.i686.rpm
 kernel-module-ndiswrapper-2.6.18-8.1.6.el5-1.41-1.SL.i686.rpm
 kernel-module-ndiswrapper-2.6.18-8.1.6.el5PAE-1.41-1.SL.i686.rpm
 kernel-module-ndiswrapper-2.6.18-8.1.6.el5xen-1.41-1.SL.i686.rpm
 kernel-module-openafs-2.6.18-8.1.6.el5-1.4.4-42.SL5.i686.rpm
 kernel-module-openafs-2.6.18-8.1.6.el5PAE-1.4.4-42.SL5.i686.rpm
 kernel-module-openafs-2.6.18-8.1.6.el5xen-1.4.4-42.SL5.i686.rpm
 kernel-module-r1000-2.6.18-8.1.6.el5-1.05-1.sl.i686.rpm
 kernel-module-r1000-2.6.18-8.1.6.el5PAE-1.05-1.sl.i686.rpm
 kernel-module-r1000-2.6.18-8.1.6.el5xen-1.05-1.sl.i686.rpm
 kmod-gfs-0.1.16-5.2.6.18_8.1.6.el5.i686.rpm
 kmod-gfs-PAE-0.1.16-5.2.6.18_8.1.6.el5.i686.rpm
 kmod-gfs-xen-0.1.16-5.2.6.18_8.1.6.el5.i686.rpm
 kmod-gnbd-0.1.3-4.2.6.18_8.1.6.el5.i686.rpm
 kmod-gnbd-PAE-0.1.3-4.2.6.18_8.1.6.el5.i686.rpm
 kmod-gnbd-xen-0.1.3-4.2.6.18_8.1.6.el5.i686.rpm

 x86_64:
	kernel-2.6.18-8.1.6.el5.x86_64.rpm
	kernel-devel-2.6.18-8.1.6.el5.x86_64.rpm
	kernel-doc-2.6.18-8.1.6.el5.noarch.rpm
	kernel-headers-2.6.18-8.1.6.el5.x86_64.rpm
	kernel-xen-2.6.18-8.1.6.el5.x86_64.rpm
	kernel-xen-devel-2.6.18-8.1.6.el5.x86_64.rpm
Dependancies:
 kernel-module-fuse-2.6.18-8.1.6.el5-2.6.3-1.SL.x86_64.rpm
 kernel-module-fuse-2.6.18-8.1.6.el5xen-2.6.3-1.SL.x86_64.rpm
 kernel-module-ipw3945-2.6.18-8.1.6.el5-1.2.0-1.sl5.x86_64.rpm
 kernel-module-ipw3945-2.6.18-8.1.6.el5xen-1.2.0-1.sl5.x86_64.rpm
 kernel-module-madwifi-2.6.18-8.1.6.el5-0.9.3.1-11.sl5.x86_64.rpm
 kernel-module-madwifi-2.6.18-8.1.6.el5xen-0.9.3.1-11.sl5.x86_64.rpm
 kernel-module-madwifi-hal-2.6.18-8.1.6.el5-0.9.3.1-11.sl5.x86_64.rpm
 kernel-module-madwifi-hal-2.6.18-8.1.6.el5xen-0.9.3.1-11.sl5.x86_64.rpm
 kernel-module-ndiswrapper-2.6.18-8.1.6.el5-1.41-1.SL.x86_64.rpm
 kernel-module-ndiswrapper-2.6.18-8.1.6.el5xen-1.41-1.SL.x86_64.rpm
 kernel-module-openafs-2.6.18-8.1.6.el5-1.4.4-42.SL5.x86_64.rpm
 kernel-module-openafs-2.6.18-8.1.6.el5xen-1.4.4-42.SL5.x86_64.rpm
 kernel-module-r1000-2.6.18-8.1.6.el5-1.05-1.sl.x86_64.rpm
 kernel-module-r1000-2.6.18-8.1.6.el5xen-1.05-1.sl.x86_64.rpm
 kmod-gfs-0.1.16-5.2.6.18_8.1.6.el5.x86_64.rpm
 kmod-gfs-xen-0.1.16-5.2.6.18_8.1.6.el5.x86_64.rpm
 kmod-gnbd-0.1.3-4.2.6.18_8.1.6.el5.x86_64.rpm
 kmod-gnbd-xen-0.1.3-4.2.6.18_8.1.6.el5.x86_64.rpm

-Connie Sieh
-Troy Dawson