Scientific Linux 6.x: CVE-2010-4165 Moderate Kernel Update

Date: Thu, 3 Mar 2011 14:43:33 -0600
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA Moderate: kernel on SL6.x i386/x86_64
Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it."
 

Synopsis:	Moderate: kernel security, bug fix, and enhancement update
Issue date:	2011-02-22
CVE Names:	CVE-2010-4165 CVE-2010-4169 CVE-2010-4243

This update fixes the following security issues:

* A divide-by-zero flaw was found in the tcp_select_initial_window()
function in the Linux kernel's TCP/IP protocol suite implementation. A
local, unprivileged user could use this flaw to trigger a denial of
service by calling setsockopt() with certain options. (CVE-2010-4165,
Moderate)

* A use-after-free flaw in the mprotect() system call in the Linux
kernel could allow a local, unprivileged user to cause a local denial of
service. (CVE-2010-4169, Moderate)

* A flaw was found in the Linux kernel execve() system call
implementation. A local, unprivileged user could cause large amounts of
memory to be allocated but not visible to the OOM (Out of Memory)
killer, triggering a denial of service. (CVE-2010-4243, Moderate)

This update also fixes several bugs and adds two enhancements.

The system must be rebooted for this update to take effect.

SL 6.x

 SRPMS:
kernel-2.6.32-71.18.1.el6.src.rpm
 i386:
kernel-2.6.32-71.18.1.el6.i686.rpm
kernel-debug-2.6.32-71.18.1.el6.i686.rpm
kernel-debug-devel-2.6.32-71.18.1.el6.i686.rpm
kernel-devel-2.6.32-71.18.1.el6.i686.rpm
kernel-doc-2.6.32-71.18.1.el6.noarch.rpm
kernel-firmware-2.6.32-71.18.1.el6.noarch.rpm
kernel-headers-2.6.32-71.18.1.el6.i686.rpm
perf-2.6.32-71.18.1.el6.noarch.rpm
 x86_64:
kernel-2.6.32-71.18.1.el6.x86_64.rpm
kernel-debug-2.6.32-71.18.1.el6.x86_64.rpm
kernel-debug-devel-2.6.32-71.18.1.el6.x86_64.rpm
kernel-devel-2.6.32-71.18.1.el6.x86_64.rpm
kernel-doc-2.6.32-71.18.1.el6.noarch.rpm
kernel-firmware-2.6.32-71.18.1.el6.noarch.rpm
kernel-headers-2.6.32-71.18.1.el6.x86_64.rpm
perf-2.6.32-71.18.1.el6.noarch.rpm

-Connie Sieh
-Troy Dawson