<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<tt>Oracle VM Security Advisory OVMSA-2009-0004<br>
<br>
The following updated rpms for Oracle VM 2.1 have been uploaded to the
Unbreakable Linux Network:<br>
<br>
i386:<br>
kernel-BOOT-devel-2.6.18-8.1.15.1.30.el5.i686.rpm<br>
kernel-BOOT-2.6.18-8.1.15.1.30.el5.i686.rpm<br>
kernel-kdump-2.6.18-8.1.15.1.30.el5.i686.rpm<br>
kernel-kdump-devel-2.6.18-8.1.15.1.30.el5.i686.rpm<br>
kernel-ovs-2.6.18-8.1.15.1.30.el5.i686.rpm<br>
kernel-ovs-devel-2.6.18-8.1.15.1.30.el5.i686.rpm<br>
<br>
<br>
SRPMS:<br>
<a class="moz-txt-link-freetext"
href="http://oss.oracle.com/oraclevm/server/SRPMS-updates/kernel-2.6.18-8.1.15.1.30.el5.src.rpm">http://oss.oracle.com/oraclevm/server/SRPMS-updates/kernel-2.6.18-8.1.15.1.30.el5.src.rpm</a><br>
<br>
Description of changes:<br>
<br>
Following Security fixes are released in this errata:<br>
<br>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3528">CVE-2008-3528</a><br>
The error-reporting functionality in (1) fs/ext2/dir.c, (2)
fs/ext3/dir.c, and possibly (3) fs/ext4/dir.c in the Linux kernel
2.6.26.5 does not limit the number of printk console messages that
report directory corruption, which allows physically proximate
attackers to cause a denial of service (temporary system hang) by
mounting a filesystem that has corrupted dir->i_size and
dir->i_blocks
values and performing (a) read or (b) write operations. NOTE: there
are limited scenarios in which this crosses privilege boundaries.<br>
<br>
</tt><tt><a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5700">CVE-2008-5700</a><br>
libata in the Linux kernel before 2.6.27.9 does not set minimum
timeouts for SG_IO requests, which allows local users to cause a
denial of service (Programmed I/O mode on drives) via multiple
simultaneous invocations of an unspecified test program.<br>
<br>
</tt><tt><a
href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0028">CVE-2009-0028</a><br>
The clone system call in the Linux kernel 2.6.28 and earlier allows
local users to send arbitrary signals to a parent process from an
unprivileged child process by launching an additional child process
with the CLONE_PARENT flag, and then letting this new process exit.<br>
</tt><tt> <br>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0322">CVE-2009-0322</a><br>
drivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and
2.6.28.x before 2.6.28.2, allows local users to cause a denial of
service (system crash) via a read system call that specifies zero
bytes from the (1) image_type or (2) packet_size file in
/sys/devices/platform/dell_rbu/.<br>
</tt><tt> <br>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0675">CVE-2009-0675</a><br>
The skfp_ioctl function in drivers/net/skfp/skfddi.c in the Linux
kernel before 2.6.28.6 permits SKFP_CLR_STATS requests only when the
CAP_NET_ADMIN capability is absent, instead of when this capability is
present, which allows local users to reset the driver statistics,
related to an "inverted logic" issue.<br>
</tt><tt> <br>
<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0676">CVE-2009-0676</a><br>
The sock_getsockopt function in net/core/sock.c in the Linux kernel
before 2.6.28.6 does not initialize a certain structure member, which
allows local users to obtain potentially sensitive information from
kernel memory via an SO_BSDCOMPAT getsockopt request.<br>
<br>
<br>
</tt><tt>[2.6.18-8.1.15.1.30.el5]<br>
- CVE-2008-3528 - [fs] ext[234]: directory corruption DoS (Eugene Teo )
[459601 459604]<br>
- CVE-2008-5700 - [block] enforce a minimum SG_IO timeout (Eugene Teo )
[475405 475406]<br>
- CVE-2009-0322 - [firmware] dell_rbu: prevent oops (Don Howard )
[482941 482942]<br>
- CVE-2009-0028 - [misc] minor signal handling vulnerability (Oleg
Nesterov ) [479963 479964]<br>
- CVE-2009-0676 - [net] memory disclosure in SO_BSDCOMPAT gsopt (Eugene
Teo ) [486517 486518]<br>
- CVE-2009-0675 - [net] skfp_ioctl inverted logic flaw (Eugene Teo )
[486539 486540]<br>
- CVE-2009-0778 - not required<br>
- CVE-2009-0269 - not required<br>
<br>
[2.6.18-8.1.15.1.29.el5]<br>
- Enable enic<br>
- Finish porting infrastructure for fnic but disable it on 32bit<br>
<br>
[2.6.18-8.1.15.1.28.el5]<br>
- Add netconsole support for bonding in dom0 (Tina Yang) [orabug
8231228]<br>
<br>
[2.6.18-8.1.15.1.27.el5]<br>
- Add Cisco fnic/enic support, requires fc infrastructure from el5u3<br>
<br>
</tt>
</body>
</html>