Date:         Mon, 18 Jun 2007 15:57:56 -0500
Reply-To:     Troy Dawson 
Sender:       Security Errata for Scientific Linux
              
From:         Troy Dawson 
Subject:      Security ERRATA for kernel on SL3,x i386/x86_64
Comments: To: scientific-linux-errata@fnal.gov

Synopsis:	Important: Updated kernel packages for Scientific Linux 3.0.x
Issue date:	2007-06-11
CVE Names:	CVE-2006-5823 CVE-2006-6054 CVE-2007-1592

There were no new features introduced by this update.  The only changes
that have been included address critical customer needs or security
issues (elaborated below).

Key areas affected by fixes in this update include the networking
subsystem, dcache handling, the ext2 and ext3 file systems, the USB
subsystem, ACPI handling, and the audit subsystem.  There were also
several isolated fixes in the tg3, e1000, megaraid_sas, and aacraid
device drivers.

The following security bugs were fixed in this update:

  * a flaw in the cramfs file system that allowed invalid compressed
     data to cause memory corruption (CVE-2006-5823, low)

  * a flaw in the ext2 file system that allowed an invalid inode size
     to cause a denial of service (system hang)  (CVE-2006-6054, low)

  * a flaw in IPV6 flow label handling that allowed a local user to
     cause a denial of service (crash)  (CVE-2007-1592, important)

SL 3.0.x

   SRPMS:
	kernel-2.4.21-50.EL.src.rpm
   i386:
	kernel-2.4.21-50.EL.athlon.rpm
	kernel-2.4.21-50.EL.i686.rpm
	kernel-BOOT-2.4.21-50.EL.i386.rpm
	kernel-doc-2.4.21-50.EL.i386.rpm
	kernel-hugemem-2.4.21-50.EL.i686.rpm
	kernel-hugemem-unsupported-2.4.21-50.EL.i686.rpm
	kernel-smp-2.4.21-50.EL.athlon.rpm
	kernel-smp-2.4.21-50.EL.i686.rpm
	kernel-smp-unsupported-2.4.21-50.EL.athlon.rpm
	kernel-smp-unsupported-2.4.21-50.EL.i686.rpm
	kernel-source-2.4.21-50.EL.i386.rpm
	kernel-unsupported-2.4.21-50.EL.athlon.rpm
	kernel-unsupported-2.4.21-50.EL.i686.rpm
Dependancies:
  kernel-module-openafs-2.4.21-50.EL-1.2.13-15.17.SL.athlon.rpm
  kernel-module-openafs-2.4.21-50.EL-1.2.13-15.17.SL.i686.rpm
  kernel-module-openafs-2.4.21-50.ELsmp-1.2.13-15.17.SL.athlon.rpm
  kernel-module-openafs-2.4.21-50.ELsmp-1.2.13-15.17.SL.i686.rpm
  GFS-6.0.2.36-2.i686.rpm
  GFS-devel-6.0.2.36-2.i686.rpm
  GFS-modules-6.0.2.36-2.i686.rpm
  GFS-modules-hugemem-6.0.2.36-2.i686.rpm
  GFS-modules-smp-6.0.2.36-2.i686.rpm

   x86_64:
	kernel-2.4.21-50.EL.ia32e.rpm
	kernel-2.4.21-50.EL.x86_64.rpm
	kernel-doc-2.4.21-50.EL.x86_64.rpm
	kernel-smp-2.4.21-50.EL.x86_64.rpm
	kernel-smp-unsupported-2.4.21-50.EL.x86_64.rpm
	kernel-source-2.4.21-50.EL.x86_64.rpm
	kernel-unsupported-2.4.21-50.EL.ia32e.rpm
	kernel-unsupported-2.4.21-50.EL.x86_64.rpm
Dependancies:
  kernel-module-openafs-2.4.21-50.EL-1.2.13-15.17.SL.ia32e.rpm
  kernel-module-openafs-2.4.21-50.EL-1.2.13-15.17.SL.x86_64.rpm
  kernel-module-openafs-2.4.21-50.ELsmp-1.2.13-15.17.SL.x86_64.rpm
  GFS-6.0.2.36-2.x86_64.rpm
  GFS-devel-6.0.2.36-2.x86_64.rpm
  GFS-modules-6.0.2.36-2.x86_64.rpm
  GFS-modules-smp-6.0.2.36-2.x86_64.rpm


-Connie Sieh
-Troy Dawson

SciLinux: CVE-2006-5823 kernel SL3,x i386/x86_64

Important: Updated kernel packages for Scientific Linux 3.0.x

Summary

Date:         Mon, 18 Jun 2007 15:57:56 -0500Reply-To:     Troy Dawson Sender:       Security Errata for Scientific Linux              From:         Troy Dawson Subject:      Security ERRATA for kernel on SL3,x i386/x86_64Comments: To: scientific-linux-errata@fnal.govSynopsis:	Important: Updated kernel packages for Scientific Linux 3.0.xIssue date:	2007-06-11CVE Names:	CVE-2006-5823 CVE-2006-6054 CVE-2007-1592There were no new features introduced by this update.  The only changesthat have been included address critical customer needs or securityissues (elaborated below).Key areas affected by fixes in this update include the networkingsubsystem, dcache handling, the ext2 and ext3 file systems, the USBsubsystem, ACPI handling, and the audit subsystem.  There were alsoseveral isolated fixes in the tg3, e1000, megaraid_sas, and aacraiddevice drivers.The following security bugs were fixed in this update:  * a flaw in the cramfs file system that allowed invalid compressed     data to cause memory corruption (CVE-2006-5823, low)  * a flaw in the ext2 file system that allowed an invalid inode size     to cause a denial of service (system hang)  (CVE-2006-6054, low)  * a flaw in IPV6 flow label handling that allowed a local user to     cause a denial of service (crash)  (CVE-2007-1592, important)SL 3.0.x   SRPMS:	kernel-2.4.21-50.EL.src.rpm   i386:	kernel-2.4.21-50.EL.athlon.rpm	kernel-2.4.21-50.EL.i686.rpm	kernel-BOOT-2.4.21-50.EL.i386.rpm	kernel-doc-2.4.21-50.EL.i386.rpm	kernel-hugemem-2.4.21-50.EL.i686.rpm	kernel-hugemem-unsupported-2.4.21-50.EL.i686.rpm	kernel-smp-2.4.21-50.EL.athlon.rpm	kernel-smp-2.4.21-50.EL.i686.rpm	kernel-smp-unsupported-2.4.21-50.EL.athlon.rpm	kernel-smp-unsupported-2.4.21-50.EL.i686.rpm	kernel-source-2.4.21-50.EL.i386.rpm	kernel-unsupported-2.4.21-50.EL.athlon.rpm	kernel-unsupported-2.4.21-50.EL.i686.rpmDependancies:  kernel-module-openafs-2.4.21-50.EL-1.2.13-15.17.SL.athlon.rpm  kernel-module-openafs-2.4.21-50.EL-1.2.13-15.17.SL.i686.rpm  kernel-module-openafs-2.4.21-50.ELsmp-1.2.13-15.17.SL.athlon.rpm  kernel-module-openafs-2.4.21-50.ELsmp-1.2.13-15.17.SL.i686.rpm  GFS-6.0.2.36-2.i686.rpm  GFS-devel-6.0.2.36-2.i686.rpm  GFS-modules-6.0.2.36-2.i686.rpm  GFS-modules-hugemem-6.0.2.36-2.i686.rpm  GFS-modules-smp-6.0.2.36-2.i686.rpm   x86_64:	kernel-2.4.21-50.EL.ia32e.rpm	kernel-2.4.21-50.EL.x86_64.rpm	kernel-doc-2.4.21-50.EL.x86_64.rpm	kernel-smp-2.4.21-50.EL.x86_64.rpm	kernel-smp-unsupported-2.4.21-50.EL.x86_64.rpm	kernel-source-2.4.21-50.EL.x86_64.rpm	kernel-unsupported-2.4.21-50.EL.ia32e.rpm	kernel-unsupported-2.4.21-50.EL.x86_64.rpmDependancies:  kernel-module-openafs-2.4.21-50.EL-1.2.13-15.17.SL.ia32e.rpm  kernel-module-openafs-2.4.21-50.EL-1.2.13-15.17.SL.x86_64.rpm  kernel-module-openafs-2.4.21-50.ELsmp-1.2.13-15.17.SL.x86_64.rpm  GFS-6.0.2.36-2.x86_64.rpm  GFS-devel-6.0.2.36-2.x86_64.rpm  GFS-modules-6.0.2.36-2.x86_64.rpm  GFS-modules-smp-6.0.2.36-2.x86_64.rpm-Connie Sieh-Troy Dawson



Security Fixes

Severity

Related News

The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
3 - 5 min read
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This
A Linux Admin
3 - 6 min read
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks,
Leveraging Insights from the Linux Foundation
3 - 5 min read
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
3 - 6 min read
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1
3 - 6 min read
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
3 - 6 min read
The Arch Linux 2024.12.01 ISO release marks an impressive milestone, offering cutting-edge updates that enhance functionality, streamline
Deck the Halls with Enhanced Security: Linux Kernel 6.13
3 - 5 min read
As Linux admins and infosec professionals prepare for the holiday season, there's much cause for celebration this year! Linus Torvalds recently made
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
3 - 5 min read
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved