Scientific Linux 6 x86_64 SLSA-2014:0924-1 Important Kernel Threat

Date: Thu, 24 Jul 2014 13:52:06 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Important: kernel on SL6.x i386/x86_64
MIME-Version: 1.0

Synopsis: Important: kernel security update
Advisory ID: SLSA-2014:0924-1
Issue Date: 2014-07-23
CVE Numbers: CVE-2014-4699
 CVE-2014-4943
--

* It was found that the Linux kernel's ptrace subsystem allowed a traced
process' instruction pointer to be set to a non-canonical memory address
without forcing the non-sysret code path when returning to user space. A
local, unprivileged user could use this flaw to crash the system or,
potentially, escalate their privileges on the system. (CVE-2014-4699,
Important)

Note: The CVE-2014-4699 issue only affected systems using an Intel CPU.

* A flaw was found in the way the pppol2tp_setsockopt() and
pppol2tp_getsockopt() functions in the Linux kernel's PPP over L2TP
implementation handled requests with a non-SOL_PPPOL2TP socket option
level. A local, unprivileged user could use this flaw to escalate their
privileges on the system. (CVE-2014-4943, Important)

The system must be rebooted for this update to take effect.
--

SL6
 x86_64
 kernel-2.6.32-431.20.5.el6.x86_64.rpm
 kernel-debug-2.6.32-431.20.5.el6.x86_64.rpm
 kernel-debug-debuginfo-2.6.32-431.20.5.el6.x86_64.rpm
 kernel-debug-devel-2.6.32-431.20.5.el6.x86_64.rpm
 kernel-debuginfo-2.6.32-431.20.5.el6.x86_64.rpm
 kernel-debuginfo-common-x86_64-2.6.32-431.20.5.el6.x86_64.rpm
 kernel-devel-2.6.32-431.20.5.el6.x86_64.rpm
 kernel-headers-2.6.32-431.20.5.el6.x86_64.rpm
 perf-2.6.32-431.20.5.el6.x86_64.rpm
 perf-debuginfo-2.6.32-431.20.5.el6.x86_64.rpm
 python-perf-debuginfo-2.6.32-431.20.5.el6.x86_64.rpm
 python-perf-2.6.32-431.20.5.el6.x86_64.rpm
 i386
 kernel-2.6.32-431.20.5.el6.i686.rpm
 kernel-debug-2.6.32-431.20.5.el6.i686.rpm
 kernel-debug-debuginfo-2.6.32-431.20.5.el6.i686.rpm
 kernel-debug-devel-2.6.32-431.20.5.el6.i686.rpm
 kernel-debuginfo-2.6.32-431.20.5.el6.i686.rpm
 kernel-debuginfo-common-i686-2.6.32-431.20.5.el6.i686.rpm
 kernel-devel-2.6.32-431.20.5.el6.i686.rpm
 kernel-headers-2.6.32-431.20.5.el6.i686.rpm
 perf-2.6.32-431.20.5.el6.i686.rpm
 perf-debuginfo-2.6.32-431.20.5.el6.i686.rpm
 python-perf-debuginfo-2.6.32-431.20.5.el6.i686.rpm
 python-perf-2.6.32-431.20.5.el6.i686.rpm
 noarch
 kernel-abi-whitelists-2.6.32-431.20.5.el6.noarch.rpm
 kernel-doc-2.6.32-431.20.5.el6.noarch.rpm
 kernel-firmware-2.6.32-431.20.5.el6.noarch.rpm

- Scientific Linux Development Team