Enterprise Linux Security Advisory ELSA-2008-0957

https://access.redhat.com/errata/RHSA-2008:0957.html

The following updated rpms for Enterprise Linux 5 have been uploaded to 
the Unbreakable Linux Network:

i386:
kernel-2.6.18-92.1.17.0.1.el5.i686.rpm
kernel-PAE-2.6.18-92.1.17.0.1.el5.i686.rpm
kernel-PAE-devel-2.6.18-92.1.17.0.1.el5.i686.rpm
kernel-debug-2.6.18-92.1.17.0.1.el5.i686.rpm
kernel-debug-devel-2.6.18-92.1.17.0.1.el5.i686.rpm
kernel-devel-2.6.18-92.1.17.0.1.el5.i686.rpm
kernel-doc-2.6.18-92.1.17.0.1.el5.noarch.rpm
kernel-headers-2.6.18-92.1.17.0.1.el5.i386.rpm
kernel-xen-2.6.18-92.1.17.0.1.el5.i686.rpm
kernel-xen-devel-2.6.18-92.1.17.0.1.el5.i686.rpm

x86_64:
kernel-2.6.18-92.1.17.0.1.el5.x86_64.rpm
kernel-debug-2.6.18-92.1.17.0.1.el5.x86_64.rpm
kernel-debug-devel-2.6.18-92.1.17.0.1.el5.x86_64.rpm
kernel-devel-2.6.18-92.1.17.0.1.el5.x86_64.rpm
kernel-doc-2.6.18-92.1.17.0.1.el5.noarch.rpm
kernel-headers-2.6.18-92.1.17.0.1.el5.x86_64.rpm
kernel-xen-2.6.18-92.1.17.0.1.el5.x86_64.rpm
kernel-xen-devel-2.6.18-92.1.17.0.1.el5.x86_64.rpm


SRPMS:
https://oss.oracle.com:443/el5/SRPMS-updates/kernel-2.6.18-92.1.17.0.1.el5.src.rpm

The following packages were rebuilt to be in sync with the updated 
kernel version (no changes other than updating the version number):

i386:
oracleasm-2.6.18-92.1.17.0.1.el5-2.0.5-1.el5.i686.rpm
oracleasm-2.6.18-92.1.17.0.1.el5PAE-2.0.5-1.el5.i686.rpm
oracleasm-2.6.18-92.1.17.0.1.el5xen-2.0.5-1.el5.i686.rpm
oracleasm-2.6.18-92.1.17.0.1.el5debug-2.0.5-1.el5.i686.rpm
ocfs2-2.6.18-92.1.17.0.1.el5-1.2.9-1.el5.i686.rpm
ocfs2-2.6.18-92.1.17.0.1.el5PAE-1.2.9-1.el5.i686.rpm
ocfs2-2.6.18-92.1.17.0.1.el5xen-1.2.9-1.el5.i686.rpm
ocfs2-2.6.18-92.1.17.0.1.el5debug-1.2.9-1.el5.i686.rpm
ocfs2-2.6.18-92.1.17.0.1.el5-1.4.1-1.el5.i686.rpm
ocfs2-2.6.18-92.1.17.0.1.el5debug-1.4.1-1.el5.i686.rpm
ocfs2-2.6.18-92.1.17.0.1.el5PAE-1.4.1-1.el5.i686.rpm
ocfs2-2.6.18-92.1.17.0.1.el5xen-1.4.1-1.el5.i686.rpm

x86_64:
oracleasm-2.6.18-92.1.17.0.1.el5-2.0.5-1.el5.x86_64.rpm
oracleasm-2.6.18-92.1.17.0.1.el5xen-2.0.5-1.el5.x86_64.rpm
oracleasm-2.6.18-92.1.17.0.1.el5debug-2.0.5-1.el5.x86_64.rpm
ocfs2-2.6.18-92.1.17.0.1.el5-1.2.9-1.el5.x86_64.rpm
ocfs2-2.6.18-92.1.17.0.1.el5xen-1.2.9-1.el5.x86_64.rpm
ocfs2-2.6.18-92.1.17.0.1.el5debug-1.2.9-1.el5.x86_64.rpm
ocfs2-2.6.18-92.1.17.0.1.el5-1.4.1-1.el5.x86_64.rpm
ocfs2-2.6.18-92.1.17.0.1.el5debug-1.4.1-1.el5.x86_64.rpm
ocfs2-2.6.18-92.1.17.0.1.el5xen-1.4.1-1.el5.x86_64.rpm


SRPMS:
https://oss.oracle.com:443/el5/SRPMS-updates/oracleasm-2.6.18-92.1.17.0.1.el5-2.0.5-1.el5.src.rpm
https://oss.oracle.com:443/el5/SRPMS-updates/ocfs2-2.6.18-92.1.17.0.1.el5-1.2.9-1.el5.src.rpm
https://oss.oracle.com:443/el5/SRPMS-updates/ocfs2-2.6.18-92.1.17.0.1.el5-1.4.1-1.el5.src.rpm

Description of changes:

[2.6.18-92.1.17.0.1.el5]

- [MM] shrink zone patch (John Sobecki,Chris Mason) [orabug 6086839]
- [NFS] nfs attribute timeout fix (Trond Myklebust) [orabug 7156607] 
[RHBZ 446083]
- [NET] Add entropy support to e1000 and bnx2 (John Sobecki) [orabug 
6045759]
- [NET] fix netpoll race (Tina Yang) [orabugz 5791]

[2.6.18-92.1.17.el5]

- Revert: [nfs] pages of a memory mapped file get corrupted (Peter 
Staubach ) [450335 435291]

[2.6.18-92.1.16.el5]

- [i386] vDSO: use install_special_mapping (Peter Zijlstra ) [460275 
460276] {CVE-2008-3527}
- [scsi] aacraid: remove some quirk AAC_QUIRK_SCSI_32 bits (Tomas Henzl 
) [466885 453472]
- [fs] remove SUID when splicing into an inode (Eric Sandeen ) [464451 
464452] {CVE-2008-3833}
- [fs] open() allows setgid bit when user is not in group (Eugene Teo ) 
[463867 463687] {CVE-2008-4210}
- [xen] ia64: fix INIT injection (Tetsu Yamamoto ) [467105 464445]

[2.6.18-92.1.15.el5]

- [pci] fix problems with msi interrupt management (Neil Horman ) 
[461894 428696]
- [x86_64] revert time syscall changes (Prarit Bhargava ) [466427 461184]
- [xen] allow guests to hide the TSC from applications (Chris Lalancette 
) [378471 378481] {CVE-2007-5907}
- [scsi] qla2xxx: additional residual-count correction (Marcus Barrow ) 
[465741 462117]
- [char] add range_is_allowed check to mmap_mem (Eugene Teo ) [460858 
460857]
- [fs] binfmt_misc: avoid potential kernel stack overflow (Vitaly 
Mayatskikh ) [459464 459463]
- [misc] cpufreq: fix format string bug (Vitaly Mayatskikh ) [459461 459460]
- [dlm] user.c input validation fixes (David Teigland ) [458759 458760]
- [nfs] pages of a memory mapped file get corrupted (Peter Staubach ) 
[450335 435291]
- [x86_64] gettimeofday fixes for HPET, PMTimer, TSC (Prarit Bhargava ) 
[462860 250708]

[2.6.18-92.1.14.el5]

- [libata] ata_scsi_rbuf_get check for scatterlist usage (David Milburn 
) [460638 455445]
- [net] random32: seeding improvement (Jiri Pirko ) [458021 458019]
- [x86_64] xen: local DOS due to NT bit leakage (Eugene Teo ) [457721 
457722] {CVE-2006-5755}
- [fs] cifs: fix O_APPEND on directio mounts (Jeff Layton ) [462591 460063]
- [openib] race between QP async handler and destroy_qp (Brad Peters ) 
[458781 446109]
- [net] dccp_setsockopt_change integer overflow (Vitaly Mayatskikh ) 
[459232 459235] {CVE-2008-3276}
- [acpi] error attaching device data (peterm at redhat.com ) [460868 459670]
- [mm] optimize ZERO_PAGE in 'get_user_pages' and fix XIP (Anton Arapov 
) [452667 452668] {CVE-2008-2372}
- [xen] xennet: coordinate ARP with backend network status (Herbert Xu ) 
[461457 458934]
- [xen] event channel lock and barrier (Markus Armbruster ) [461099 457086]
- [fs] fix bad unlock_page in pip_to_file() error path (Larry Woodman ) 
[462436 439917]

Oracle5: ELSA-2008-0957: kernel Important Security Update

The following updated rpms for Enterprise Linux 5 have been uploaded to the Unbreakable Linux Network:

Summary

[2.6.18-92.1.17.0.1.el5] - [MM] shrink zone patch (John Sobecki,Chris Mason) [orabug 6086839] - [NFS] nfs attribute timeout fix (Trond Myklebust) [orabug 7156607] [RHBZ 446083] - [NET] Add entropy support to e1000 and bnx2 (John Sobecki) [orabug 6045759] - [NET] fix netpoll race (Tina Yang) [orabugz 5791] [2.6.18-92.1.17.el5] - Revert: [nfs] pages of a memory mapped file get corrupted (Peter Staubach ) [450335 435291] [2.6.18-92.1.16.el5] - [i386] vDSO: use install_special_mapping (Peter Zijlstra ) [460275 460276] {CVE-2008-3527} - [scsi] aacraid: remove some quirk AAC_QUIRK_SCSI_32 bits (Tomas Henzl ) [466885 453472] - [fs] remove SUID when splicing into an inode (Eric Sandeen ) [464451 464452] {CVE-2008-3833} - [fs] open() allows setgid bit when user is not in group (Eugene Teo ) [463867 463687] {CVE-2008-4210} - [xen] ia64: fix INIT injection (Tetsu Yamamoto ) [467105 464445] [2.6.18-92.1.15.el5] - [pci] fix problems with msi interrupt management (Neil Horman ) [4...

Read the Full Advisory

SRPMs

https://oss.oracle.com:443/el5/SRPMS-updates/kernel-2.6.18-92.1.17.0.1.el5.src.rpm The following packages were rebuilt to be in sync with the updated kernel version (no changes other than updating the version number): SRPMS: https://oss.oracle.com:443/el5/SRPMS-updates/oracleasm-2.6.18-92.1.17.0.1.el5-2.0.5-1.el5.src.rpm https://oss.oracle.com:443/el5/SRPMS-updates/ocfs2-2.6.18-92.1.17.0.1.el5-1.2.9-1.el5.src.rpm https://oss.oracle.com:443/el5/SRPMS-updates/ocfs2-2.6.18-92.1.17.0.1.el5-1.4.1-1.el5.src.rpm

x86_64

kernel-2.6.18-92.1.17.0.1.el5.x86_64.rpm kernel-debug-2.6.18-92.1.17.0.1.el5.x86_64.rpm kernel-debug-devel-2.6.18-92.1.17.0.1.el5.x86_64.rpm kernel-devel-2.6.18-92.1.17.0.1.el5.x86_64.rpm kernel-doc-2.6.18-92.1.17.0.1.el5.noarch.rpm kernel-headers-2.6.18-92.1.17.0.1.el5.x86_64.rpm kernel-xen-2.6.18-92.1.17.0.1.el5.x86_64.rpm kernel-xen-devel-2.6.18-92.1.17.0.1.el5.x86_64.rpm x86_64: oracleasm-2.6.18-92.1.17.0.1.el5-2.0.5-1.el5.x86_64.rpm oracleasm-2.6.18-92.1.17.0.1.el5xen-2.0.5-1.el5.x86_64.rpm oracleasm-2.6.18-92.1.17.0.1.el5debug-2.0.5-1.el5.x86_64.rpm ocfs2-2.6.18-92.1.17.0.1.el5-1.2.9-1.el5.x86_64.rpm ocfs2-2.6.18-92.1.17.0.1.el5xen-1.2.9-1.el5.x86_64.rpm ocfs2-2.6.18-92.1.17.0.1.el5debug-1.2.9-1.el5.x86_64.rpm ocfs2-2.6.18-92.1.17.0.1.el5-1.4.1-1.el5.x86_64.rpm ocfs2-2.6.18-92.1.17.0.1.el5debug-1.4.1-1.el5.x86_64.rpm ocfs2-2.6.18-92.1.17.0.1.el5xen-1.4.1-1.el5.x86_64.rpm

aarch64

i386

kernel-2.6.18-92.1.17.0.1.el5.i686.rpm kernel-PAE-2.6.18-92.1.17.0.1.el5.i686.rpm kernel-PAE-devel-2.6.18-92.1.17.0.1.el5.i686.rpm kernel-debug-2.6.18-92.1.17.0.1.el5.i686.rpm kernel-debug-devel-2.6.18-92.1.17.0.1.el5.i686.rpm kernel-devel-2.6.18-92.1.17.0.1.el5.i686.rpm kernel-doc-2.6.18-92.1.17.0.1.el5.noarch.rpm kernel-headers-2.6.18-92.1.17.0.1.el5.i386.rpm kernel-xen-2.6.18-92.1.17.0.1.el5.i686.rpm kernel-xen-devel-2.6.18-92.1.17.0.1.el5.i686.rpm i386: oracleasm-2.6.18-92.1.17.0.1.el5-2.0.5-1.el5.i686.rpm oracleasm-2.6.18-92.1.17.0.1.el5PAE-2.0.5-1.el5.i686.rpm oracleasm-2.6.18-92.1.17.0.1.el5xen-2.0.5-1.el5.i686.rpm oracleasm-2.6.18-92.1.17.0.1.el5debug-2.0.5-1.el5.i686.rpm ocfs2-2.6.18-92.1.17.0.1.el5-1.2.9-1.el5.i686.rpm ocfs2-2.6.18-92.1.17.0.1.el5PAE-1.2.9-1.el5.i686.rpm ocfs2-2.6.18-92.1.17.0.1.el5xen-1.2.9-1.el5.i686.rpm ocfs2-2.6.18-92.1.17.0.1.el5debug-1.2.9-1.el5.i686.rpm ocfs2-2.6.18-92.1.17.0.1.el5-1.4.1-1.el5.i686.rpm ocfs2-2.6.18-92.1.17.0.1.el5debug-1.4.1-1.el5....

Read the Full Advisory

Severity

Related News

The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
3 - 5 min read
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This
A Linux Admin
3 - 6 min read
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks,
Leveraging Insights from the Linux Foundation
3 - 5 min read
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
3 - 6 min read
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1
3 - 6 min read
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
3 - 6 min read
The Arch Linux 2024.12.01 ISO release marks an impressive milestone, offering cutting-edge updates that enhance functionality, streamline
Deck the Halls with Enhanced Security: Linux Kernel 6.13
3 - 5 min read
As Linux admins and infosec professionals prepare for the holiday season, there's much cause for celebration this year! Linus Torvalds recently made
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
3 - 5 min read
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved