| Resumen: | The remote host is missing updates to the kernel announced in;advisory RHSA-2009:0225.;;These updated packages contain 730 bug fixes and enhancements for the Linux;kernel. Space precludes a detailed description of each of these changes in;this advisory and users are therefore directed to the release notes for Red;Hat Enterprise Linux 5.3 for information on 97 of the most significant of;these changes.;;Details of three security-related bug fixes are set out below, along with;notes on other broad categories of change not covered in the release notes.;For more detailed information on specific bug fixes or enhancements, please;consult the Bugzilla numbers listed in this advisory.;; * when fput() was called to close a socket, the __scm_destroy() function;in the Linux kernel could make indirect recursive calls to itself. This;could, potentially, lead to a denial of service issue. (CVE-2008-5029,;Important);; * a flaw was found in the Asynchronous Transfer Mode (ATM) subsystem. A;local, unprivileged user could use the flaw to listen on the same socket;more than once, possibly causing a denial of service. (CVE-2008-5079,;Important);; * a race condition was found in the Linux kernel inotify watch removal;and umount implementation. This could allow a local, unprivileged user;to cause a privilege escalation or a denial of service. (CVE-2008-5182,;Important);;All users are advised to upgrade to these updated packages, which resolve;these issues. |
| Descripción: | Summary:
The remote host is missing updates to the kernel announced in
advisory RHSA-2009:0225.
These updated packages contain 730 bug fixes and enhancements for the Linux
kernel. Space precludes a detailed description of each of these changes in
this advisory and users are therefore directed to the release notes for Red
Hat Enterprise Linux 5.3 for information on 97 of the most significant of
these changes.
Details of three security-related bug fixes are set out below, along with
notes on other broad categories of change not covered in the release notes.
For more detailed information on specific bug fixes or enhancements, please
consult the Bugzilla numbers listed in this advisory.
* when fput() was called to close a socket, the __scm_destroy() function
in the Linux kernel could make indirect recursive calls to itself. This
could, potentially, lead to a denial of service issue. (CVE-2008-5029,
Important)
* a flaw was found in the Asynchronous Transfer Mode (ATM) subsystem. A
local, unprivileged user could use the flaw to listen on the same socket
more than once, possibly causing a denial of service. (CVE-2008-5079,
Important)
* a race condition was found in the Linux kernel inotify watch removal
and umount implementation. This could allow a local, unprivileged user
to cause a privilege escalation or a denial of service. (CVE-2008-5182,
Important)
All users are advised to upgrade to these updated packages, which resolve
these issues.
Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date
CVSS Score:
6.9
CVSS Vector:
AV:L/AC:M/Au:N/C:C/I:C/A:C
|
