Synopsis: Moderate: kernel security and bug fix update
Issue Date: 2013-01-22
CVE Numbers: CVE-2012-1568
CVE-2012-4444
CVE-2012-5515
—
This update fixes the following security issues:
* It was found that the Xen hypervisor implementation did not perform range
checking on the guest provided values in multiple hypercalls. A privileged
guest user could use this flaw to trigger long loops, leading to a denial of
service (Xen hypervisor hang). (CVE-2012-5515, Moderate)
* It was found that when running a 32-bit binary that uses a large number of
shared libraries, one of the libraries would always be loaded at a predictable
address in memory. An attacker could use this flaw to bypass the Address Space
Layout Randomization (ASLR) security feature. (CVE-2012-1568, Low)
* A flaw was found in the way the Linux kernel’s IPv6 implementation handled
overlapping, fragmented IPv6 packets. A remote attacker could potentially use
this flaw to bypass protection mechanisms (such as a firewall or intrusion
detection system (IDS)) when sending network packets to a target system.
(CVE-2012-4444, Low)
The system must be rebooted for this update to take effect.
—
SL5
x86_64
kernel-2.6.18-348.1.1.el5.x86_64.rpm
kernel-debug-2.6.18-348.1.1.el5.x86_64.rpm
kernel-debug-debuginfo-2.6.18-348.1.1.el5.x86_64.rpm
kernel-debug-devel-2.6.18-348.1.1.el5.x86_64.rpm
kernel-debuginfo-2.6.18-348.1.1.el5.x86_64.rpm
kernel-debuginfo-common-2.6.18-348.1.1.el5.x86_64.rpm
kernel-devel-2.6.18-348.1.1.el5.x86_64.rpm
kernel-headers-2.6.18-348.1.1.el5.x86_64.rpm
kernel-xen-2.6.18-348.1.1.el5.x86_64.rpm
kernel-xen-debuginfo-2.6.18-348.1.1.el5.x86_64.rpm
kernel-xen-devel-2.6.18-348.1.1.el5.x86_64.rpm
i386
kernel-2.6.18-348.1.1.el5.i686.rpm
kernel-PAE-2.6.18-348.1.1.el5.i686.rpm
kernel-PAE-debuginfo-2.6.18-348.1.1.el5.i686.rpm
kernel-PAE-devel-2.6.18-348.1.1.el5.i686.rpm
kernel-debug-2.6.18-348.1.1.el5.i686.rpm
kernel-debug-debuginfo-2.6.18-348.1.1.el5.i686.rpm
kernel-debug-devel-2.6.18-348.1.1.el5.i686.rpm
kernel-debuginfo-2.6.18-348.1.1.el5.i686.rpm
kernel-debuginfo-common-2.6.18-348.1.1.el5.i686.rpm
kernel-devel-2.6.18-348.1.1.el5.i686.rpm
kernel-headers-2.6.18-348.1.1.el5.i386.rpm
kernel-xen-2.6.18-348.1.1.el5.i686.rpm
kernel-xen-debuginfo-2.6.18-348.1.1.el5.i686.rpm
kernel-xen-devel-2.6.18-348.1.1.el5.i686.rpm
noarch
kernel-doc-2.6.18-348.1.1.el5.noarch.rpm
– Scientific Linux Development Team
