SciLinux: SLSA-2016:2962-1 Important Kernel Update for SL5 i386/x86_64

Date: Tue, 20 Dec 2016 16:42:54 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Important: kernel on SL5.x i386/x86_64
MIME-Version: 1.0
Message-ID: <20161220164254.28913.40676@slpackages.fnal.gov>

Synopsis: Important: kernel security and bug fix update
Advisory ID: SLSA-2016:2962-1
Issue Date: 2016-12-20
CVE Numbers: CVE-2016-7117
--

Security Fix(es):

* A use-after-free vulnerability was found in the kernels socket recvmmsg
subsystem. This may allows remote attackers to corrupt memory and may
allow execution of arbitrary code. This corruption takes place during the
error handling routines within __sys_recvmmsg() function. (CVE-2016-7117,
Important)

Bug Fix(es):

* Previously, guest virtual machines (VMs) on a Hyper-V server cluster got
in some cases rebooted during the graceful node failover test, because the
host kept sending heartbeat packets independently of guests responding to
them. This update fixes the bug by properly responding to all the
heartbeat messages in the queue, even if they are pending. As a result,
guest VMs no longer get rebooted under the described circumstances.
--

SL5
 x86_64
 kernel-2.6.18-417.el5.x86_64.rpm
 kernel-debug-2.6.18-417.el5.x86_64.rpm
 kernel-debug-debuginfo-2.6.18-417.el5.x86_64.rpm
 kernel-debug-devel-2.6.18-417.el5.x86_64.rpm
 kernel-debuginfo-2.6.18-417.el5.x86_64.rpm
 kernel-debuginfo-common-2.6.18-417.el5.x86_64.rpm
 kernel-devel-2.6.18-417.el5.x86_64.rpm
 kernel-headers-2.6.18-417.el5.x86_64.rpm
 kernel-xen-2.6.18-417.el5.x86_64.rpm
 kernel-xen-debuginfo-2.6.18-417.el5.x86_64.rpm
 kernel-xen-devel-2.6.18-417.el5.x86_64.rpm
 i386
 kernel-2.6.18-417.el5.i686.rpm
 kernel-PAE-2.6.18-417.el5.i686.rpm
 kernel-PAE-debuginfo-2.6.18-417.el5.i686.rpm
 kernel-PAE-devel-2.6.18-417.el5.i686.rpm
 kernel-debug-2.6.18-417.el5.i686.rpm
 kernel-debug-debuginfo-2.6.18-417.el5.i686.rpm
 kernel-debug-devel-2.6.18-417.el5.i686.rpm
 kernel-debuginfo-2.6.18-417.el5.i686.rpm
 kernel-debuginfo-common-2.6.18-417.el5.i686.rpm
 kernel-devel-2.6.18-417.el5.i686.rpm
 kernel-headers-2.6.18-417.el5.i386.rpm
 kernel-xen-2.6.18-417.el5.i686.rpm
 kernel-xen-debuginfo-2.6.18-417.el5.i686.rpm
 kernel-xen-devel-2.6.18-417.el5.i686.rpm
 noarch
 kernel-doc-2.6.18-417.el5.noarch.rpm

- Scientific Linux Development Team