ELSA-2007-0014

ELSA-2007-0014 - Important: kernel security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2007-01-31

Description

[2.6.0-42.0.8.0.1]

-Fix bonding primary=ethX so it picks correct network [IT 101532] [ORA
5136660]

[2.6.0-42.0.8]

-fix ext2 readdir f_pos revalidation logic (David Milburn) [193877]

[2.6.9-42.0.7]

-re-spin
[2.6.9-42.0.6]

-x86_64: increase nmi watchdog timeout from 5 to 30 seconds (Larry
Woodman) [205
722]

[2.6.9-42.0.5]

-fix race condition in sys_mincore() (Doug Chapman) [180663] {CVE-2006-4814}
-ext3: READA failures cause "directory hole" (Chip Coldwell, Stephen
Tweedie) [213921]
-aio: fix kernel panic in aio_free_ring (Jeff Moyer) [220971]
{CVE-2006-5754}
-fix ext2_check_page denial of service (Eric Sandeen) [217021]
{CVE-2006-6054}
-fix listxattr syscall can corrupt user space programs (Eric Sandeen)
[220677] {CVE-2006-5753}

[2.6.9-42.0.4]

-ia64: fix local DoS with corrupted ELF (Dave Anderson) [205335]
{CVE-2006-4538}
-fix information leak in __block_prepare_write() (Eric Sandeen) [207463]
{CVE-2006-4813}
-tg3: fix init failure - unable to obtain MAC address (Andy Gospodarek)
[208922]
-s390: fix information leak (Jan Glauber) [209435] {CVE-2006-5174}
-catch blocks beyond pagecache limit in __getblk_slow() (Eric Sandeen)
[214288 206328] {CVE-2006-5757}
-net: fix dev_queue_xmit to not call local_bh_enable in out_kfree_skb
error path(Neil Horman) [212144] {CVE-2006-6535}
-audit: close memory leak (Sachin Prabhu) [216667]
-fix ext3fs_dirhash denial of service (Eric Sandeen) [217030]
{CVE-2006-6053}
-fix zlib_inflate oops due to corrupted cramfs image (Eric Sandeen)
[216958] {CVE-2006-5823}
-fix get_fdb_entries() integer overflow (Thomas Graf) [216452]
{CVE-2006-5751}
-fix lockup via /proc/net/ip6_flowlabel (Thomas Graf) [213214]
{CVE-2006-5619}
-hfs: return error code in case of error (Eric Paris) [217011]
{CVE-2006-6056}
-Add packet size checks for CAPI messages (Marcel Holtmann) [218602]
{CVE-2006-6106}

Related CVEs

CVE-2006-4538

CVE-2006-4813

CVE-2006-4814

CVE-2006-5174

CVE-2006-5619

CVE-2006-5751

CVE-2006-5753

CVE-2006-5754

CVE-2006-5757

CVE-2006-5823

CVE-2006-6053

CVE-2006-6054

CVE-2006-6056

CVE-2006-6106

CVE-2006-6535

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 4 (i386)	kernel-2.6.9-42.0.8.0.1.EL.i686.rpm	3afcbf74d1491873475e40d1cd37c77a	ELBA-2011-1796
	kernel-devel-2.6.9-42.0.8.0.1.EL.i686.rpm	4d7e00ab57b2b98a0597a0296b98a71b	ELBA-2011-1796
	kernel-doc-2.6.9-42.0.8.0.1.EL.noarch.rpm	7767ff242e7913c91589cccaeea41630	ELBA-2011-1796
	kernel-hugemem-2.6.9-42.0.8.0.1.EL.i686.rpm	1de90881ae9c23593c9ef4b580804995	ELBA-2011-1796
	kernel-hugemem-devel-2.6.9-42.0.8.0.1.EL.i686.rpm	2751038df9829bbf4156afb5b828d298	ELBA-2011-1796
	kernel-smp-2.6.9-42.0.8.0.1.EL.i686.rpm	fed1f2f512f17a0fbf0e10f0e626fde4	ELBA-2011-1796
	kernel-smp-devel-2.6.9-42.0.8.0.1.EL.i686.rpm	18416ef6c0a3897e45ad8782e6200391	ELBA-2011-1796
	ocfs2-2.6.9-42.0.8.0.1.EL-1.2.3-2.i686.rpm	36f3de089f6c85ee34b3763e8b2c5e8b	ELBA-2008-2004
	ocfs2-2.6.9-42.0.8.0.1.ELhugemem-1.2.3-2.i686.rpm	f0bd6322f8e1387005c1ebf25570462b	ELBA-2008-2004
	ocfs2-2.6.9-42.0.8.0.1.ELsmp-1.2.3-2.i686.rpm	6a3a86c6439e818245ffda1f64b9e659	ELBA-2008-2004
	oracleasm-2.6.9-42.0.8.0.1.EL-2.0.3-2.i686.rpm	f559c051710ecee8e286ab5bff60119d	-
	oracleasm-2.6.9-42.0.8.0.1.ELhugemem-2.0.3-2.i686.rpm	19c05b315acb07076389c5646b34c9ed	-
	oracleasm-2.6.9-42.0.8.0.1.ELsmp-2.0.3-2.i686.rpm	3359b31e25a8b2324f5d6edb0379baa6	-
Oracle Linux 4 (x86_64)	kernel-2.6.9-42.0.8.0.1.EL.x86_64.rpm	5a8a143b5a03082991ef285066f2fef1	ELBA-2011-1796
	kernel-devel-2.6.9-42.0.8.0.1.EL.x86_64.rpm	8a5990199ecadaa3f21e0c9cd13869c5	ELBA-2011-1796
	kernel-doc-2.6.9-42.0.8.0.1.EL.noarch.rpm	7767ff242e7913c91589cccaeea41630	ELBA-2011-1796
	kernel-smp-2.6.9-42.0.8.0.1.EL.x86_64.rpm	21fb310adbad84aae2849af316358be3	ELBA-2011-1796
	kernel-smp-devel-2.6.9-42.0.8.0.1.EL.x86_64.rpm	fd16b3c6c2db34352485a9b0fbe67819	ELBA-2011-1796
	ocfs2-2.6.9-42.0.8.0.1.EL-1.2.3-2.x86_64.rpm	314fd60d5ae374ea8d32ce929ae76365	ELBA-2008-2004
	ocfs2-2.6.9-42.0.8.0.1.ELlargesmp-1.2.3-2.x86_64.rpm	9b61c322dc77d60ceed216b0d40eeb93	ELBA-2008-2004
	ocfs2-2.6.9-42.0.8.0.1.ELsmp-1.2.3-2.x86_64.rpm	902c03b0c62a696cb60ea3feed73926d	ELBA-2008-2004
	oracleasm-2.6.9-42.0.8.0.1.EL-2.0.3-2.x86_64.rpm	9aa9ac1ab20d770bab445101b03a210f	-
	oracleasm-2.6.9-42.0.8.0.1.ELlargesmp-2.0.3-2.x86_64.rpm	a308d42df7bc48717731528988095b41	-
	oracleasm-2.6.9-42.0.8.0.1.ELsmp-2.0.3-2.x86_64.rpm	85a1764253c5e98fe3f97fed8dcaa124	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team