Scientific Linux alert SLSA-2014:0924-1 (kernel)

From:
    	     
 
Pat Riehecky <riehecky@fnal.gov> 
To:
    	     
 
<scientific-linux-errata@listserv.fnal.gov> 
Subject:
    	     
 
Security ERRATA Important: kernel on SL6.x i386/x86_64 
Date:
    	     
 
Thu, 24 Jul 2014 13:52:06 +0000
Message-ID:
    	     
 
<20140724135206.30440.53600@slpackages.fnal.gov>
Synopsis:          Important: kernel security update
Advisory ID:       SLSA-2014:0924-1
Issue Date:        2014-07-23
CVE Numbers:       CVE-2014-4699
                   CVE-2014-4943
--

* It was found that the Linux kernel's ptrace subsystem allowed a traced
process' instruction pointer to be set to a non-canonical memory address
without forcing the non-sysret code path when returning to user space. A
local, unprivileged user could use this flaw to crash the system or,
potentially, escalate their privileges on the system. (CVE-2014-4699,
Important)

Note: The CVE-2014-4699 issue only affected systems using an Intel CPU.

* A flaw was found in the way the pppol2tp_setsockopt() and
pppol2tp_getsockopt() functions in the Linux kernel's PPP over L2TP
implementation handled requests with a non-SOL_PPPOL2TP socket option
level. A local, unprivileged user could use this flaw to escalate their
privileges on the system. (CVE-2014-4943, Important)

The system must be rebooted for this update to take effect.
--

SL6
  x86_64
    kernel-2.6.32-431.20.5.el6.x86_64.rpm
    kernel-debug-2.6.32-431.20.5.el6.x86_64.rpm
    kernel-debug-debuginfo-2.6.32-431.20.5.el6.x86_64.rpm
    kernel-debug-devel-2.6.32-431.20.5.el6.x86_64.rpm
    kernel-debuginfo-2.6.32-431.20.5.el6.x86_64.rpm
    kernel-debuginfo-common-x86_64-2.6.32-431.20.5.el6.x86_64.rpm
    kernel-devel-2.6.32-431.20.5.el6.x86_64.rpm
    kernel-headers-2.6.32-431.20.5.el6.x86_64.rpm
    perf-2.6.32-431.20.5.el6.x86_64.rpm
    perf-debuginfo-2.6.32-431.20.5.el6.x86_64.rpm
    python-perf-debuginfo-2.6.32-431.20.5.el6.x86_64.rpm
    python-perf-2.6.32-431.20.5.el6.x86_64.rpm
  i386
    kernel-2.6.32-431.20.5.el6.i686.rpm
    kernel-debug-2.6.32-431.20.5.el6.i686.rpm
    kernel-debug-debuginfo-2.6.32-431.20.5.el6.i686.rpm
    kernel-debug-devel-2.6.32-431.20.5.el6.i686.rpm
    kernel-debuginfo-2.6.32-431.20.5.el6.i686.rpm
    kernel-debuginfo-common-i686-2.6.32-431.20.5.el6.i686.rpm
    kernel-devel-2.6.32-431.20.5.el6.i686.rpm
    kernel-headers-2.6.32-431.20.5.el6.i686.rpm
    perf-2.6.32-431.20.5.el6.i686.rpm
    perf-debuginfo-2.6.32-431.20.5.el6.i686.rpm
    python-perf-debuginfo-2.6.32-431.20.5.el6.i686.rpm
    python-perf-2.6.32-431.20.5.el6.i686.rpm
  noarch
    kernel-abi-whitelists-2.6.32-431.20.5.el6.noarch.rpm
    kernel-doc-2.6.32-431.20.5.el6.noarch.rpm
    kernel-firmware-2.6.32-431.20.5.el6.noarch.rpm

- Scientific Linux Development Team