[El-errata] ELSA-2010-2008 Important: Oracle Linux 5 unbreakable enterprise kernel security update

[Errata Announcements for Enterprise Linux]

  The following updated rpms for Oracle Linux 5 have been uploaded to 
the Unbreakable Linux Network:

x86_64:
kernel-2.6.32-100.20.1.el5.x86_64.rpm
kernel-firmware-2.6.32-100.20.1.el5.x86_64.rpm
kernel-debug-2.6.32-100.20.1.el5.x86_64.rpm
kernel-debug-devel-2.6.32-100.20.1.el5.x86_64.rpm
kernel-devel-2.6.32-100.20.1.el5.x86_64.rpm
kernel-doc-2.6.32-100.20.1.el5.noarch.rpm
kernel-headers-2.6.32-100.20.1.el5.x86_64.rpm


SRPMS:
http://oss.oracle.com/ol5/SRPMS-updates/kernel-2.6.32-100.20.1.el5.src.rpm


Description of changes:

Following security fixes are included in this unbreakable enterprise 
kernel errata:

CVE-2010-2942 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2942>
The actions implementation in the network queueing functionality in the 
Linux kernel before 2.6.36-rc2 does not properly initialize certain 
structure members when performing dump operations, which allows local 
users to obtain potentially sensitive information from kernel memory via 
vectors related to (1) the tcf_gact_dump function in 
net/sched/act_gact.c, (2) the tcf_mirred_dump function in 
net/sched/act_mirred.c, (3) the tcf_nat_dump function in 
net/sched/act_nat.c, (4) the tcf_simp_dump function in 
net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in 
net/sched/act_skbedit.c.

CVE-2010-2943 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2943>
The xfs implementation in the Linux kernel before 2.6.35 does not look 
up inode allocation btrees before reading inode buffers, which allows 
remote authenticated users to read unlinked files, or read or overwrite 
disk blocks that are currently assigned to an active file but were 
previously assigned to an unlinked file, by accessing a stale NFS file 
handle.

OCFS2
Fix to prevent kernel panic caused by corrupted fast symlinks in ocfs2 
filesystem.

[2.6.32-100.20.1.el5]
- [fs] xfs: return inode fork offset in bulkstat for fsr (Dave Chinner)
- [fs] xfs: always use iget in bulkstat (Dave Chinner) {CVE-2010-2943}
- [fs] xfs: validate untrusted inode numbers during lookup (Dave 
Chinner) {CVE-2010-2943}
- [fs] xfs: rename XFS_IGET_BULKSTAT to XFS_IGET_UNTRUSTED (Dave 
Chinner) {CVE-2010-2943}
- [net] net sched: fix some kernel memory leaks (Eric Dumazet) 
{CVE-2010-2942}
- [fs] ocfs2: Don't walk off the end of fast symlinks (Joel Becker)

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.oracle.com/pipermail/el-errata/attachments/20101005/ba6f010a/attachment.html