Stay Secure with the Latest Linux Advisories

security advisorysecurity issuekernel update

Critical Kernel Update for Scientific Linux 6 Addresses CVE-2013-0228

Important: kernel security and bug fix update. Date: Thu, 14 Mar 2013 09:39:51 -0500 Reply-To: Pat Riehecky Sender: Security Errata for Scientific Linux From: Pat Riehecky Subject: Security ERRATA Important: kernel on SL6.x i386/x86_64 MIME-Version: 1.0 Synopsis: Important: kernel security and bug fix update Issue Date: 2013-03-12 CVE Numbers: CVE-2013-0228 CVE-2013-0268 -- This update fixes the following security issues: * A flaw was found in the way the xen_iret() function in the Linux kernel used the DS (the CPU's Data Segment) register. A local, unprivileged user in a 32-bit, para-virtualized Xen hypervisor guest could use this flaw to crash the guest or, potentially, escalate their privileges. (CVE-2013-0228, Important) * A flaw was found in the way file permission checks for the "/dev/cpu/[x]/msr" files were performed in restricted root environments (for example, when using a capability-based security model). A local user with the ability to write to these files could use this flaw to escalate their privileges to kernel level, for example, by writing to the SYSENTER_EIP_MSR register. (CVE-2013-0268, Important) The system must be rebooted for this update to take effect. -- SL6 x86_64 kernel-2.6.32-358.2.1.el6.x86_64.rpm kernel-debug-2.6.32-358.2.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-358.2.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-358.2.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-358.2.1.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-358.2.1.el6.x86_64.rpm kernel-devel-2.6.32-358.2.1.el6.x86_64.rpm kernel-headers-2.6.32-358.2.1.el6.x86_64.rpm perf-2.6.32-358.2.1.el6.x86_64.rpm perf-debuginfo-2.6.32-358.2.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-358.2.1.el6.x86_64.rpm python-perf-2.6.32-358.2.1.el6.x86_64.rpm i386 kernel-2.6.32-358.2.1.el6.i686.rpm kernel-debug-2.6.32-358.2.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-358.2.1.el6.i686.rpm kernel-debug-devel-2.6.32-358.2.1.el6.i686.rpm kernel-debuginfo-2.6.32-358.2.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-358.2.1.el6.i686.rpm kernel-devel-2.6.32-358.2.1.el6.i686.rpm kernel-headers-2.6.32-358.2.1.el6.i686.rpm perf-2.6.32-358.2.1.el6.i686.rpm perf-debuginfo-2.6.32-358.2.1.el6.i686.rpm python-perf-debuginfo-2.6.32-358.2.1.el6.i686.rpm python-perf-2.6.32-358.2.1.el6.i686.rpm noarch kernel-doc-2.6.32-358.2.1.el6.noarch.rpm kernel-firmware-2.6.32-358.2.1.el6.noarch.rpm - Scientific Linux Development Team . Crucial kernel security patch for Scientific Linux tackling severe vulnerabilities demands system restart.. Kernel Update, Scientific Linux Security, Important Fix. . Severity: Important. LinuxSecurity.com Team

Mar 14, 2013 •Important Scientific Linux