Stay Secure with the Latest Linux Advisories

security advisorykernel updateScientific Linux

Scientific Linux 4 Moderate: Updated Kernel Packages for CVE-2006-4145

Moderate: Updated kernel packages for Scientific Linux 4. Date: Mon, 28 Jul 2008 16:32:55 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for kernel on SL4.x i386/x86_64 Comments: To: "This email address is being protected from spambots. You need JavaScript enabled to view it." Synopsis: Moderate: Updated kernel packages for Scientific Linux 4 Issue date: 2008-07-24 CVE Names: CVE-2006-4145 CVE-2008-2812 These updated packages fix the following security issues: * NULL pointer access due to missing checks for terminal validity. (CVE-2008-2812, Moderate) * a security flaw was found in the Linux kernel Universal Disk Format file system. (CVE-2006-4145, Low) Kernel Feature Support: * iostat displays I/O performance for partitions * I/O task accounting added to getrusage(), allowing comprehensive core statistics * page cache pages count added to show_mem() output * tux O_ATOMICLOOKUP flag removed from the open() system call: replaced with O_CLOEXEC * the kernel now exports process limit information to /proc/[PID]/limits * implement udp_poll() to reduce likelihood of false positives returned from select() * the TCP_RTO_MIN parameter can now be configured to a maximum of 3000 milliseconds. This is configured using "ip route" * update CIFS to version 1.50 Added Features: * nfs.enable_ino64 boot command line parameter: enable and disable 32-bit inode numbers when using NFS * tick "divider" kernel boot parameter: reduce CPU overhead, and increase efficiency at the cost of lowering timing accuracy * /proc/sys/vm/nfs-writeback-lowmem-only tunable parameter: resolve NFS read performance * /proc/sys/vm/write-mapped tunable option, allowing the option of faster NFS reads * support for Large Receive Offload as a networking module * core dump masking, allowing a core dump process to skip the shared memory segments of a process Virtualization: * para-virtualized network and block device drivers, to increase fully-virtualized guest performance * support for more than three VNIF numbers per guestdomain Platform Support: * AMD ATI SB800 SATA controller, AMD ATI SB600 and SB700 40-pin IDE cable * 64-bit DMA support on AMD ATI SB700 * PCI device IDs to support Intel ICH10 * /dev/msr[0-n] device files * powernow-k8 as a module * SLB shadow buffer support for IBM POWER6 systems * support for CPU frequencies greater than 32-bit on IBM POWER5, IBM POWER6 * floating point load and store handler for IBM POWER6 Added Drivers and Updates: * ixgbe 1.1.18, for the Intel 82598 10GB ethernet controller * bnx2x 1.40.22, for network adapters on the Broadcom 5710 chipset * dm-hp-sw 1.0.0, for HP Active/Standby * zfcp version and bug fixes * qdio to fix FCP/SCSI write I/O expiring on LPARs * cio bug fixes * eHEA latest upstream, and netdump and netconsole support * ipr driver support for dual SAS RAID controllers* correct CPU cache info and SATA support for Intel Tolapai * i5000_edac support for Intel 5000 chipsets * i3000_edac support for Intel 3000 and 3010 chipsets * add i2c_piix4 module on 64-bit systems to support AMD ATI SB600, 700 and 800 * i2c-i801 support for Intel Tolapai * qla4xxx: 5.01.01-d2 to 5.01.02-d4-rhel4.7-00 * qla2xxx: 8.01.07-d4 to 8.01.07-d4-rhel4.7-02 * cciss: 2.6.16 to 2.6.20 * mptfusion: 3.02.99.00rh to 3.12.19.00rh * lpfc:0: 8.0.16.34 to 8.0.16.40 * megaraid_sas: 00.00.03.13 to 00.00.03.18-rh1 * stex: 3.0.0.1 to 3.6.0101.2 * arcmsr: 1.20.00.13 to 1.20.00.15.rh4u7 * aacraid: 1.1-5[2441] to 1.1.5[2455] Miscellaneous Updates: * OFED 1.3 support * wacom driver to add support for Cintiq 20WSX, Wacom Intuos3 12x19, 12x12 and 4x6 tablets * sata_svw driver to support Broadcom HT-1100 chipsets * libata to un-blacklist Hitachi drives to enable NCQ * ide driver allows command line option to disable ide drivers* psmouse support for cortps protocol The GFS Suite was also updated because it is tied very closely with the kernel version. SL 4.x SRPMS: kernel-2.6.9-78.EL.src.rpm i386: kernel-2.6.9-78.EL.i686.rpm kernel-devel-2.6.9-78.EL.i686.rpm kernel-doc-2.6.9-78.EL.noarch.rpm kernel-hugemem-2.6.9-78.EL.i686.rpm kernel-hugemem-devel-2.6.9-78.EL.i686.rpm kernel-smp-2.6.9-78.EL.i686.rpm kernel-smp-devel-2.6.9-78.EL.i686.rpm kernel-xenU-2.6.9-78.EL.i686.rpm kernel-xenU-devel-2.6.9-78.EL.i686.rpm Dependancies: ccs-1.0.12-1.i686.rpm ccs-devel-1.0.12-1.i686.rpm cluster-cim-0.11.1-2.el4.i386.rpm cluster-snmp-0.11.1-2.el4.i386.rpm cman-1.0.24-1.i686.rpm cman-devel-1.0.24-1.i686.rpm cman-kernel-2.6.9-55.13.i686.rpm cman-kernel-hugemem-2.6.9-55.13.i686.rpm cman-kernel-smp-2.6.9-55.13.i686.rpm cman-kernel-xenU-2.6.9-55.13.i686.rpm cman-kernheaders-2.6.9-55.13.i686.rpm cmirror-kernel-2.6.9-43.4.i686.rpm cmirror-kernel-hugemem-2.6.9-43.4.i686.rpm cmirror-kernel-smp-2.6.9-43.4.i686.rpm cmirror-kernel-xenU-2.6.9-43.4.i686.rpm dlm-kernel-2.6.9-54.11.i686.rpm dlm-kernel-hugemem-2.6.9-54.11.i686.rpm dlm-kernel-smp-2.6.9-54.11.i686.rpm dlm-kernel-xenU-2.6.9-54.11.i686.rpm dlm-kernheaders-2.6.9-54.11.i686.rpm fence-1.32.63-1.i686.rpm GFS-6.1.18-1.i386.rpm GFS-kernel-2.6.9-80.9.i686.rpm GFS-kernel-hugemem-2.6.9-80.9.i686.rpm GFS-kernel-smp-2.6.9-80.9.i686.rpm GFS-kernel-xenU-2.6.9-80.9.i686.rpm GFS-kernheaders-2.6.9-80.9.i686.rpm gnbd-kernel-2.6.9-10.48.i686.rpm gnbd-kernel-hugemem-2.6.9-10.48.i686.rpm gnbd-kernel-smp-2.6.9-10.48.i686.rpm gnbd-kernel-xenU-2.6.9-10.48.i686.rpm gnbd-kernheaders-2.6.9-10.48.i686.rpm luci-0.11.1-5.i386.rpm lvm2-cluster-2.02.37-3.el4.i386.rpm magma-plugins-1.0.14-1.i386.rpm modcluster-0.11.1-2.el4.i386.rpm piranha-0.8.3.1-3.i386.rpm rgmanager-1.9.80-1.i386.rpm ricci-0.11.1-5.i386.rpm system-config-cluster-1.0.54-2.0.noarch.rpm kernel-module-fuse-2.6.9-78.EL-2.5.3-1.SL.i686.rpm kernel-module-fuse-2.6.9-78.ELhugemem-2.5.3-1.SL.i686.rpm kernel-module-fuse-2.6.9-78.ELsmp-2.5.3-1.SL.i686.rpm kernel-module-fuse-2.6.9-78.ELxenU-2.5.3-1.SL.i686.rpm kernel-module-ipw3945-2.6.9-78.EL-1.1.0-1.SL4.i686.rpm kernel-module-ipw3945-2.6.9-78.ELhugemem-1.1.0-1.SL4.i686.rpm kernel-module-ipw3945-2.6.9-78.ELsmp-1.1.0-1.SL4.i686.rpm kernel-module-ipw3945-2.6.9-78.ELxenU-1.1.0-1.SL4.i686.rpm kernel-module-madwifi-2.6.9-78.EL-0.9.3.3-10.sl4.i686.rpm kernel-module-madwifi-2.6.9-78.ELhugemem-0.9.3.3-10.sl4.i686.rpm kernel-module-madwifi-2.6.9-78.ELsmp-0.9.3.3-10.sl4.i686.rpm kernel-module-madwifi-hal-2.6.9-78.EL-0.9.3.3-10.sl4.i686.rpm kernel-module-madwifi-hal-2.6.9-78.ELhugemem-0.9.3.3-10.sl4.i686.rpm kernel-module-madwifi-hal-2.6.9-78.ELsmp-0.9.3.3-10.sl4.i686.rpm kernel-module-ndiswrapper-2.6.9-78.EL-1.41-1.SL.i686.rpm kernel-module-ndiswrapper-2.6.9-78.ELhugemem-1.41-1.SL.i686.rpm kernel-module-ndiswrapper-2.6.9-78.ELsmp-1.41-1.SL.i686.rpm kernel-module-ndiswrapper-2.6.9-78.ELxenU-1.41-1.SL.i686.rpm kernel-module-openafs-2.6.9-78.EL-1.4.6-58.SL4.i686.rpm kernel-module-openafs-2.6.9-78.ELhugemem-1.4.6-58.SL4.i686.rpm kernel-module-openafs-2.6.9-78.ELsmp-1.4.6-58.SL4.i686.rpm kernel-module-openafs-2.6.9-78.ELxenU-1.4.6-58.SL4.i686.rpm kernel-module-r1000-2.6.9-78.EL-2.2-2.SL4x.i686.rpm kernel-module-r1000-2.6.9-78.ELhugemem-2.2-2.SL4x.i686.rpm kernel-module-r1000-2.6.9-78.ELsmp-2.2-2.SL4x.i686.rpm kernel-module-r1000-2.6.9-78.ELxenU-2.2-2.SL4x.i686.rpm x86_64: kernel-2.6.9-78.EL.x86_64.rpm kernel-devel-2.6.9-78.EL.x86_64.rpm kernel-doc-2.6.9-78.EL.noarch.rpm kernel-largesmp-2.6.9-78.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-78.EL.x86_64.rpm kernel-smp-2.6.9-78.EL.x86_64.rpm kernel-smp-devel-2.6.9-78.EL.x86_64.rpm kernel-xenU-2.6.9-78.EL.x86_64.rpm kernel-xenU-devel-2.6.9-78.EL.x86_64.rpm Dependancies: ccs-1.0.12-1.x86_64.rpm ccs-devel-1.0.12-1.x86_64.rpm cluster-cim-0.11.1-2.el4.x86_64.rpm cluster-snmp-0.11.1-2.el4.x86_64.rpm cman-1.0.24-1.x86_64.rpm cman-devel-1.0.24-1.x86_64.rpm cman-kernel-2.6.9-55.13.x86_64.rpm cman-kernel-largesmp-2.6.9-55.13.x86_64.rpm cman-kernel-smp-2.6.9-55.13.x86_64.rpm cman-kernel-xenU-2.6.9-55.13.x86_64.rpm cman-kernheaders-2.6.9-55.13.x86_64.rpm cmirror-kernel-2.6.9-43.4.x86_64.rpm cmirror-kernel-largesmp-2.6.9-43.4.x86_64.rpm cmirror-kernel-smp-2.6.9-43.4.x86_64.rpm cmirror-kernel-xenU-2.6.9-43.4.x86_64.rpm dlm-kernel-2.6.9-54.11.x86_64.rpm dlm-kernel-largesmp-2.6.9-54.11.x86_64.rpm dlm-kernel-smp-2.6.9-54.11.x86_64.rpm dlm-kernel-xenU-2.6.9-54.11.x86_64.rpm dlm-kernheaders-2.6.9-54.11.x86_64.rpm fence-1.32.63-1.x86_64.rpm GFS-6.1.18-1.x86_64.rpm GFS-kernel-2.6.9-80.9.x86_64.rpm GFS-kernel-largesmp-2.6.9-80.9.x86_64.rpm GFS-kernel-smp-2.6.9-80.9.x86_64.rpm GFS-kernel-xenU-2.6.9-80.9.x86_64.rpm GFS-kernheaders-2.6.9-80.9.x86_64.rpm gnbd-kernel-2.6.9-10.48.x86_64.rpm gnbd-kernel-largesmp-2.6.9-10.48.x86_64.rpm gnbd-kernel-smp-2.6.9-10.48.x86_64.rpm gnbd-kernel-xenU-2.6.9-10.48.x86_64.rpm gnbd-kernheaders-2.6.9-10.48.x86_64.rpm luci-0.11.1-5.el4.x86_64.rpm lvm2-cluster-2.02.37-3.el4.x86_64.rpm magma-plugins-1.0.14-1.x86_64.rpm modcluster-0.11.1-2.el4.x86_64.rpm piranha-0.8.3.1-3.x86_64.rpm rgmanager-1.9.80-1.x86_64.rpm ricci-0.11.1-5.el4.x86_64.rpm system-config-cluster-1.0.54-2.0.noarch.rpm kernel-module-fuse-2.6.9-78.EL-2.5.3-1.SL.x86_64.rpm kernel-module-fuse-2.6.9-78.ELlargesmp-2.5.3-1.SL.x86_64.rpm kernel-module-fuse-2.6.9-78.ELsmp-2.5.3-1.SL.x86_64.rpm kernel-module-fuse-2.6.9-78.ELxenU-2.5.3-1.SL.x86_64.rpm kernel-module-ipw3945-2.6.9-78.EL-1.1.0-1.SL4.x86_64.rpm kernel-module-ipw3945-2.6.9-78.ELlargesmp-1.1.0-1.SL4.x86_64.rpm kernel-module-ipw3945-2.6.9-78.ELsmp-1.1.0-1.SL4.x86_64.rpm kernel-module-ipw3945-2.6.9-78.ELxenU-1.1.0-1.SL4.x86_64.rpm kernel-module-madwifi-2.6.9-78.EL-0.9.3.3-10.sl4.x86_64.rpm kernel-module-madwifi-2.6.9-78.ELlargesmp-0.9.3.3-10.sl4.x86_64.rpm kernel-module-madwifi-2.6.9-78.ELsmp-0.9.3.3-10.sl4.x86_64.rpm kernel-module-madwifi-hal-2.6.9-78.EL-0.9.3.3-10.sl4.x86_64.rpm kernel-module-madwifi-hal-2.6.9-78.ELlargesmp-0.9.3.3-10.sl4.x86_64.rpm kernel-module-madwifi-hal-2.6.9-78.ELsmp-0.9.3.3-10.sl4.x86_64.rpm kernel-module-ndiswrapper-2.6.9-78.EL-1.41-1.SL.x86_64.rpm kernel-module-ndiswrapper-2.6.9-78.ELlargesmp-1.41-1.SL.x86_64.rpm kernel-module-ndiswrapper-2.6.9-78.ELsmp-1.41-1.SL.x86_64.rpm kernel-module-ndiswrapper-2.6.9-78.ELxenU-1.41-1.SL.x86_64.rpm kernel-module-openafs-2.6.9-78.EL-1.4.6-58.SL4.x86_64.rpm kernel-module-openafs-2.6.9-78.ELlargesmp-1.4.6-58.SL4.x86_64.rpm kernel-module-openafs-2.6.9-78.ELsmp-1.4.6-58.SL4.x86_64.rpm kernel-module-openafs-2.6.9-78.ELxenU-1.4.6-58.SL4.x86_64.rpm kernel-module-r1000-2.6.9-78.EL-2.2-2.SL4x.x86_64.rpm kernel-module-r1000-2.6.9-78.ELlargesmp-2.2-2.SL4x.x86_64.rpm kernel-module-r1000-2.6.9-78.ELsmp-2.2-2.SL4x.x86_64.rpm kernel-module-r1000-2.6.9-78.ELxenU-2.2-2.SL4x.x86_64.rpm -Connie Sieh -Troy Dawson . Revised kernel updates for Scientific Linux 4 address critical security flaws proficiently.. kernel update, security patches, Scientific Linux 4. . LinuxSecurity.com Team

Jul 28, 2008 Scientific Linux