[El-errata] ELSA-2007-0937 Important: Enterprise Linux 4 kernel security update

[el-errata at oss.oracle.com]

Enterprise Linux Security Advisory ELSA-2007-0937

https://rhn.redhat.com/errata/RHSA-2007-0937.html

The following updated rpms for Enterprise Linux 4 have been uploaded to 
the Unbreakable Linux Network:

i386:
kernel-2.6.9-55.0.9.0.1.EL.i686.rpm
kernel-devel-2.6.9-55.0.9.0.1.EL.i686.rpm
kernel-doc-2.6.9-55.0.9.0.1.EL.noarch.rpm
kernel-hugemem-2.6.9-55.0.9.0.1.EL.i686.rpm
kernel-hugemem-devel-2.6.9-55.0.9.0.1.EL.i686.rpm
kernel-smp-2.6.9-55.0.9.0.1.EL.i686.rpm
kernel-smp-devel-2.6.9-55.0.9.0.1.EL.i686.rpm
kernel-xenU-2.6.9-55.0.9.0.1.EL.i686.rpm
kernel-xenU-devel-2.6.9-55.0.9.0.1.EL.i686.rpm

x86_64:
kernel-2.6.9-55.0.9.0.1.EL.x86_64.rpm
kernel-devel-2.6.9-55.0.9.0.1.EL.x86_64.rpm
kernel-doc-2.6.9-55.0.9.0.1.EL.noarch.rpm
kernel-largesmp-2.6.9-55.0.9.0.1.EL.x86_64.rpm
kernel-largesmp-devel-2.6.9-55.0.9.0.1.EL.x86_64.rpm
kernel-smp-2.6.9-55.0.9.0.1.EL.x86_64.rpm
kernel-smp-devel-2.6.9-55.0.9.0.1.EL.x86_64.rpm
kernel-xenU-2.6.9-55.0.9.0.1.EL.x86_64.rpm
kernel-xenU-devel-2.6.9-55.0.9.0.1.EL.x86_64.rpm


SRPMS:
http://oss.oracle.com/el4/SRPMS-updates/kernel-2.6.9-55.0.9.0.1.EL.src.rpm

The following packages were rebuilt to be in sync with the updated 
kernel version (no changes other than updating the version number):

i386:
oracleasm-2.6.9-55.0.9.0.1.EL-2.0.3-2.i686.rpm
oracleasm-2.6.9-55.0.9.0.1.ELhugemem-2.0.3-2.i686.rpm
oracleasm-2.6.9-55.0.9.0.1.ELsmp-2.0.3-2.i686.rpm
ocfs2-2.6.9-55.0.9.0.1.EL-1.2.5-6.i686.rpm
ocfs2-2.6.9-55.0.9.0.1.ELhugemem-1.2.5-6.i686.rpm
ocfs2-2.6.9-55.0.9.0.1.ELsmp-1.2.5-6.i686.rpm

x86_64:
oracleasm-2.6.9-55.0.9.0.1.EL-2.0.3-2.x86_64.rpm
oracleasm-2.6.9-55.0.9.0.1.ELlargesmp-2.0.3-2.x86_64.rpm
oracleasm-2.6.9-55.0.9.0.1.ELsmp-2.0.3-2.x86_64.rpm
ocfs2-2.6.9-55.0.9.0.1.EL-1.2.5-6.x86_64.rpm
ocfs2-2.6.9-55.0.9.0.1.ELlargesmp-1.2.5-6.x86_64.rpm
ocfs2-2.6.9-55.0.9.0.1.ELsmp-1.2.5-6.x86_64.rpm


SRPMS:
http://oss.oracle.com/el4/SRPMS-updates/oracleasm-2.6.9-55.0.9.0.1.EL-2.0.3-2.src.rpm
http://oss.oracle.com/el4/SRPMS-updates/ocfs2-2.6.9-55.0.9.0.1.EL-1.2.5-6.src.rpm

Description of changes:

[2.6.9-55.0.9.0.1]
- fix entropy flag in bnx2 driver to generate entropy pool (John 
Sobecki)  [orabug 5931647]
- fix for nfs open call taking longer issue (Chuck Lever) orabug 5580407 
bz [219412]
- fix  enomem due to larger mtu size page alloc (Zach Brown) orabug 5486128
- fix per_cpu() api bug_on with rds (Zach Brown) orabug 5760648
- limit nr_requests in cfq io scheduler ( Jens Axboe) bz 234278 orabug 
5899829

[2.6.9-55.0.9]
- revert: all patches from 2.6.9-55.0.7

[2.6.9-55.0.8]
- fix x86_64 (+ xen) syscall vulnerability (Vitaly Mayatskikh) [297851] 
{CVE-2007-4573}

[2.6.9-55.0.7]
- fix autofs problem with symbolic links (Ian Kent) [248126]
- fix privilege escalation via PR_SET_PDEATHSIG (Peter Zijlstra) 
[252306] {CVE-2007-3848}
- fix bound check ordering issue in random driver (Vitaly Mayatskikh) 
[275941] {CVE-2007-3105}
- fix memory leak of dma_alloc_coherent() on x86_64 (Prarit Bhargava) 
[282351]
- makes CIFS honour a process' umask (Jeff Layton) [293121] {CVE-2007-3740}
- fix signing mount options and error handling for CIFS (Jeff Layton) 
[293141] {CVE-2007-3843}