---------------------------------------------------------------------Fedora Update Notification
FEDORA-2005-014
2005-01-10
---------------------------------------------------------------------Product     : Fedora Core 2
Name        : kernel
Version     : 2.6.10
Release     : 1.8_FC2
Summary     : The Linux kernel (the core of the Linux operating system)
Description :
The kernel package contains the Linux kernel (vmlinuz), the core of any
Linux operating system.  The kernel handles the basic functions
of the operating system:  memory allocation, process allocation, device
input and output, etc.

This update rebases the kernel to match the upstream 2.6.10 release,
and adds a number of security fixes by means of adding the latest -ac patch.


CAN-2004-1235
  Paul Starzetz from isec.pl found a problem in the binary format loaders uselib()
  function that could lead to potential priveledge escalation.
  https://isec.pl/en/vulnerabilities/isec-0021-uselib.txt

NO-CAN-ASSIGNED
  Brad Spengler found several problems.
  - An integer overflow in the random poolsize sysctl handler.
  - SCSI ioctl integer overflow and information leak.
  - RLIMIT_MEMLOCK bypass and unprivileged user DoS.

NO-CAN-ASSIGNED
  Coverity Inc. found a number of bugs with their automated source checker
  in coda, xfs, network bridging, rose network protocol, and the sdla wan driver.
  
---------------------------------------------------------------------* Sat Jan 08 2005 Dave Jones 
- Periodic slab debug is incompatable with pagealloc debug.
  Disable the latter.
- Update to 2.6.10-ac8

* Fri Jan 07 2005 Dave Jones 
- Bump up to -ac7
- Another new card reader.

* Thu Jan 06 2005 Dave Jones 
- Rebase to 2.6.10-ac5

* Tue Jan 04 2005 Dave Jones 
- Rebase to 2.6.10-ac4
- Add periodic slab debug checker.

* Mon Jan 03 2005 Dave Jones 
- Drop patch which meant we needed a newer gcc. (#144035)
- Rebase to 2.6.10-ac2
- Enable SL82C104 IDE driver as built-in on PPC64 (#131033)


---------------------------------------------------------------------This update can be downloaded from:
  
2567737b275271fdfe07a945bfcf589c  SRPMS/kernel-2.6.10-1.8_FC2.src.rpm
ba0e3dd4951b16604367c6b89ed28259  x86_64/kernel-2.6.10-1.8_FC2.x86_64.rpm
f65bd59399f26e0acfe9959778b7e5c1  x86_64/kernel-smp-2.6.10-1.8_FC2.x86_64.rpm
05938f7dd41af2f123c3708875799b92  x86_64/debug/kernel-debuginfo-2.6.10-1.8_FC2.x86_64.rpm
d7483c386856100b92e7b74815fd440c  x86_64/kernel-sourcecode-2.6.10-1.8_FC2.noarch.rpm
2a11a413fde60aa1e56629f1475b732c  x86_64/kernel-doc-2.6.10-1.8_FC2.noarch.rpm
e27242948960d9599769d71fec2a3456  i386/kernel-2.6.10-1.8_FC2.i586.rpm
c27dedd762701392a71d26fc682d9e32  i386/kernel-smp-2.6.10-1.8_FC2.i586.rpm
05645feaa5c84a21fd7a795e7d5afd2c  i386/debug/kernel-debuginfo-2.6.10-1.8_FC2.i586.rpm
ac41f896f312dfd23654ed073e91f090  i386/kernel-2.6.10-1.8_FC2.i686.rpm
ee41150aeab7e2242245dfd49e22138e  i386/kernel-smp-2.6.10-1.8_FC2.i686.rpm
e731c190eba0e65a1ba401ec9d8db14e  i386/debug/kernel-debuginfo-2.6.10-1.8_FC2.i686.rpm
d7483c386856100b92e7b74815fd440c  i386/kernel-sourcecode-2.6.10-1.8_FC2.noarch.rpm
2a11a413fde60aa1e56629f1475b732c  i386/kernel-doc-2.6.10-1.8_FC2.noarch.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
-----------------------------------------------------------------------fedora-announce-list mailing list
fedora-announce-list@redhat.com
http://www.redhat.com/mailman/listinfo/fedora-announce-list

Fedora: kernel-2.6.10-1.8_FC2 update

January 10, 2005
This update rebases the kernel to match the upstream 2.6.10 release, and adds a number of security fixes by means of adding the latest -ac patch.

Summary

The kernel package contains the Linux kernel (vmlinuz), the core of any

Linux operating system. The kernel handles the basic functions

of the operating system: memory allocation, process allocation, device

input and output, etc.

This update rebases the kernel to match the upstream 2.6.10 release,

and adds a number of security fixes by means of adding the latest -ac patch.

CAN-2004-1235

Paul Starzetz from isec.pl found a problem in the binary format loaders uselib()

function that could lead to potential priveledge escalation.

https://isec.pl/en/vulnerabilities/isec-0021-uselib.txt

NO-CAN-ASSIGNED

Brad Spengler found several problems.

- An integer overflow in the random poolsize sysctl handler.

- SCSI ioctl integer overflow and information leak.

- RLIMIT_MEMLOCK bypass and unprivileged user DoS.

NO-CAN-ASSIGNED

Coverity Inc. found a number of bugs with their automated source checker

in coda, xfs, network bridging, rose network protocol, and the sdla wan driver.

- Periodic slab debug is incompatable with pagealloc debug.

Disable the latter.

- Update to 2.6.10-ac8

* Fri Jan 07 2005 Dave Jones

- Bump up to -ac7

- Another new card reader.

* Thu Jan 06 2005 Dave Jones

- Rebase to 2.6.10-ac5

* Tue Jan 04 2005 Dave Jones

- Rebase to 2.6.10-ac4

- Add periodic slab debug checker.

* Mon Jan 03 2005 Dave Jones

- Drop patch which meant we needed a newer gcc. (#144035)

- Rebase to 2.6.10-ac2

- Enable SL82C104 IDE driver as built-in on PPC64 (#131033)

2567737b275271fdfe07a945bfcf589c SRPMS/kernel-2.6.10-1.8_FC2.src.rpm

ba0e3dd4951b16604367c6b89ed28259 x86_64/kernel-2.6.10-1.8_FC2.x86_64.rpm

f65bd59399f26e0acfe9959778b7e5c1 x86_64/kernel-smp-2.6.10-1.8_FC2.x86_64.rpm

05938f7dd41af2f123c3708875799b92 x86_64/debug/kernel-debuginfo-2.6.10-1.8_FC2.x86_64.rpm

d7483c386856100b92e7b74815fd440c x86_64/kernel-sourcecode-2.6.10-1.8_FC2.noarch.rpm

2a11a413fde60aa1e56629f1475b732c x86_64/kernel-doc-2.6.10-1.8_FC2.noarch.rpm

e27242948960d9599769d71fec2a3456 i386/kernel-2.6.10-1.8_FC2.i586.rpm

c27dedd762701392a71d26fc682d9e32 i386/kernel-smp-2.6.10-1.8_FC2.i586.rpm

05645feaa5c84a21fd7a795e7d5afd2c i386/debug/kernel-debuginfo-2.6.10-1.8_FC2.i586.rpm

ac41f896f312dfd23654ed073e91f090 i386/kernel-2.6.10-1.8_FC2.i686.rpm

ee41150aeab7e2242245dfd49e22138e i386/kernel-smp-2.6.10-1.8_FC2.i686.rpm

e731c190eba0e65a1ba401ec9d8db14e i386/debug/kernel-debuginfo-2.6.10-1.8_FC2.i686.rpm

d7483c386856100b92e7b74815fd440c i386/kernel-sourcecode-2.6.10-1.8_FC2.noarch.rpm

2a11a413fde60aa1e56629f1475b732c i386/kernel-doc-2.6.10-1.8_FC2.noarch.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list@redhat.com

http://www.redhat.com/mailman/listinfo/fedora-announce-list

FEDORA-2005-014 2005-01-10 Name : kernel Version : 2.6.10 Release : 1.8_FC2 Summary : The Linux kernel (the core of the Linux operating system) Description : The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc. This update rebases the kernel to match the upstream 2.6.10 release, and adds a number of security fixes by means of adding the latest -ac patch. CAN-2004-1235 Paul Starzetz from isec.pl found a problem in the binary format loaders uselib() function that could lead to potential priveledge escalation. https://isec.pl/en/vulnerabilities/isec-0021-uselib.txt NO-CAN-ASSIGNED Brad Spengler found several problems. - An integer overflow in the random poolsize sysctl handler. - SCSI ioctl integer overflow and information leak. - RLIMIT_MEMLOCK bypass and unprivileged user DoS. NO-CAN-ASSIGNED Coverity Inc. found a number of bugs with their automated source checker in coda, xfs, network bridging, rose network protocol, and the sdla wan driver. - Periodic slab debug is incompatable with pagealloc debug. Disable the latter. - Update to 2.6.10-ac8 * Fri Jan 07 2005 Dave Jones - Bump up to -ac7 - Another new card reader. * Thu Jan 06 2005 Dave Jones - Rebase to 2.6.10-ac5 * Tue Jan 04 2005 Dave Jones - Rebase to 2.6.10-ac4 - Add periodic slab debug checker. * Mon Jan 03 2005 Dave Jones - Drop patch which meant we needed a newer gcc. (#144035) - Rebase to 2.6.10-ac2 - Enable SL82C104 IDE driver as built-in on PPC64 (#131033) 2567737b275271fdfe07a945bfcf589c SRPMS/kernel-2.6.10-1.8_FC2.src.rpm ba0e3dd4951b16604367c6b89ed28259 x86_64/kernel-2.6.10-1.8_FC2.x86_64.rpm f65bd59399f26e0acfe9959778b7e5c1 x86_64/kernel-smp-2.6.10-1.8_FC2.x86_64.rpm 05938f7dd41af2f123c3708875799b92 x86_64/debug/kernel-debuginfo-2.6.10-1.8_FC2.x86_64.rpm d7483c386856100b92e7b74815fd440c x86_64/kernel-sourcecode-2.6.10-1.8_FC2.noarch.rpm 2a11a413fde60aa1e56629f1475b732c x86_64/kernel-doc-2.6.10-1.8_FC2.noarch.rpm e27242948960d9599769d71fec2a3456 i386/kernel-2.6.10-1.8_FC2.i586.rpm c27dedd762701392a71d26fc682d9e32 i386/kernel-smp-2.6.10-1.8_FC2.i586.rpm 05645feaa5c84a21fd7a795e7d5afd2c i386/debug/kernel-debuginfo-2.6.10-1.8_FC2.i586.rpm ac41f896f312dfd23654ed073e91f090 i386/kernel-2.6.10-1.8_FC2.i686.rpm ee41150aeab7e2242245dfd49e22138e i386/kernel-smp-2.6.10-1.8_FC2.i686.rpm e731c190eba0e65a1ba401ec9d8db14e i386/debug/kernel-debuginfo-2.6.10-1.8_FC2.i686.rpm d7483c386856100b92e7b74815fd440c i386/kernel-sourcecode-2.6.10-1.8_FC2.noarch.rpm 2a11a413fde60aa1e56629f1475b732c i386/kernel-doc-2.6.10-1.8_FC2.noarch.rpm This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command. fedora-announce-list@redhat.com http://www.redhat.com/mailman/listinfo/fedora-announce-list

Change Log

References

Update Instructions

Severity
Name : kernel
Version : 2.6.10
Release : 1.8_FC2
Summary : The Linux kernel (the core of the Linux operating system)

Related News