[El-errata] ELSA-2009-1550 Important: Enterprise Linux 3 kernel security and bug fix update

[Errata Announcements for Enterprise Linux]

Enterprise Linux Security Advisory ELSA-2009-1550

https://rhn.redhat.com/errata/RHSA-2009-1550.html

The following updated rpms for Enterprise Linux 3 have been uploaded to 
the Unbreakable Linux Network:

i386:
kernel-2.4.21-63.0.0.0.1.EL.athlon.rpm
kernel-2.4.21-63.0.0.0.1.EL.i686.rpm
kernel-BOOT-2.4.21-63.0.0.0.1.EL.i386.rpm
kernel-doc-2.4.21-63.0.0.0.1.EL.i386.rpm
kernel-hugemem-2.4.21-63.0.0.0.1.EL.i686.rpm
kernel-hugemem-unsupported-2.4.21-63.0.0.0.1.EL.i686.rpm
kernel-smp-2.4.21-63.0.0.0.1.EL.athlon.rpm
kernel-smp-2.4.21-63.0.0.0.1.EL.i686.rpm
kernel-smp-unsupported-2.4.21-63.0.0.0.1.EL.athlon.rpm
kernel-smp-unsupported-2.4.21-63.0.0.0.1.EL.i686.rpm
kernel-source-2.4.21-63.0.0.0.1.EL.i386.rpm
kernel-unsupported-2.4.21-63.0.0.0.1.EL.athlon.rpm
kernel-unsupported-2.4.21-63.0.0.0.1.EL.i686.rpm

x86_64:
kernel-2.4.21-63.0.0.0.1.EL.ia32e.rpm
kernel-2.4.21-63.0.0.0.1.EL.x86_64.rpm
kernel-doc-2.4.21-63.0.0.0.1.EL.x86_64.rpm
kernel-smp-2.4.21-63.0.0.0.1.EL.x86_64.rpm
kernel-smp-unsupported-2.4.21-63.0.0.0.1.EL.x86_64.rpm
kernel-source-2.4.21-63.0.0.0.1.EL.x86_64.rpm
kernel-unsupported-2.4.21-63.0.0.0.1.EL.ia32e.rpm
kernel-unsupported-2.4.21-63.0.0.0.1.EL.x86_64.rpm


SRPMS:
http://oss.oracle.com/el3/SRPMS-updates/kernel-2.4.21-63.0.0.0.1.EL.src.rpm

The following packages were rebuilt to be in sync with the updated 
kernel version (no changes other than updating the version number):

i386:
oracleasm-2.4.21-63.0.0.0.1.EL-1.0.5-1.i686.rpm
oracleasm-2.4.21-63.0.0.0.1.ELhugemem-1.0.5-1.i686.rpm
oracleasm-2.4.21-63.0.0.0.1.ELsmp-1.0.5-1.i686.rpm

x86_64:
oracleasm-2.4.21-63.0.0.0.1.EL-1.0.5-1.ia32e.rpm
oracleasm-2.4.21-63.0.0.0.1.EL-1.0.5-1.x86_64.rpm
oracleasm-2.4.21-63.0.0.0.1.ELsmp-1.0.5-1.x86_64.rpm

SRPMS:
http://oss.oracle.com/el3/SRPMS-updates/oracleasm-2.4.21-63.0.0.0.1.EL-1.0.5-1.src.rpm

Description of changes:

[2.4.21-63.0.0.0.1.EL]
- add directio support for qla drivers (herb) [ora 6346849]
- support PT Quad card [ora 5751043]
- io to nfs partition hangs [ora 5088963]
- add entropy for bnx2 nic [ora 5931647]
- avoid large allocation-fragmentation in MTU (zab)
- fix clear highpage (wli)

[2.4.21-63.EL]
- fs: fix pipe null pointer dereference (Don Howard) [530935] 
{CVE-2009-3547}

[2.4.21-61.EL]
- ipv6: use timer pending to fix bridge reference count problem (Don 
Howard) [457010]
- net: fix unix socket panic (Don Howard) [470432] {CVE-2008-5029}
- unix: fix oom with unix socket garbage collector [473266] {CVE-2008-5300}
- exit_notify: kill the wrong capable check (Don Howard) [497266] 
{CVE-2009-1337}
- e1000: fix skb_over_panic (Don Howard) [503439] {CVE-2009-1385}
- net: ensure devname passed to SO_BINDTODEVICE is NULL-terminated (Don 
Howard) [505514]
- kernel: personality handling: fix per_clear_on_setid (Don Howard) 
[508845] {CVE-2009-1895}
- build with fno-delete-null-pointer-checks (Don Howard) [511185]
- implement mmap_min_addr infrastructure (Don Howard) [512642]
- execve: must clear current->clear_child_tid (Don Howard) [515426] 
{CVE-2009-2848}
- net: Fix info leaks in getname() implementations (Don Howard) [520292] 
{CVE-2009-3002}
- net: ipv4: ip_append_data handle NULL routing table (Don Howard) [520300]