--------------------------------------------------------------------- Fedora Update Notification FEDORA-2006-423 2006-04-20 --------------------------------------------------------------------- Product : Fedora Core 4 Name : kernel Version : 2.6.16 Release : 1.2096_FC4 Summary : The Linux kernel (the core of the Linux operating system) Description : The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc. --------------------------------------------------------------------- Update Information: This update includes a number of security issues that have been fixed upstream over the last week or so. i386/x86-64: Fix x87 information leak between processes (CVE-2006-1056) ip_route_input panic fix (CVE-2006-1525) fix MADV_REMOVE vulnerability (CVE-2006-1524) shmat: stop mprotect from giving write permission to a readonly attachment (CVE-2006-1524) Fix MPBL0010 driver insecure sysfs permissions x86_64: When user could have changed RIP always force IRET (CVE-2006-0744) Fix RCU signal handling Keys: Fix oops when adding key to non-keyring (CVE-2006-1522) sysfs: zero terminate sysfs write buffers (CVE-2006-1055) It also includes various other fixes from the -stable tree. Full changelogs are available from: http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.9 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.8 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.7 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.6 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.5 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.4 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.3 http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.16.2 --------------------------------------------------------------------- * Tue Apr 18 2006 Dave Jones <davej@xxxxxxxxxx> [2.6.16-1.2096_FC4] - 2.6.16.9 * Tue Apr 18 2006 Dave Jones <davej@xxxxxxxxxx> [2.6.16-1.2093_FC4] - 2.6.16.7 * Mon Apr 17 2006 Dave Jones <davej@xxxxxxxxxx> [2.6.16-1.2092_FC4] - 2.6.16.6 * Sun Apr 16 2006 Dave Jones <davej@xxxxxxxxxx> - 2.6.16.5 * Fri Apr 7 2006 Dave Jones <davej@xxxxxxxxxx> - 2.6.16.2 * Tue Apr 4 2006 Dave Jones <davej@xxxxxxxxxx> - Reenable non-standard serial ports. (#187466) - Reenable snd-es18xx for x86-32 (#187733) * Thu Mar 30 2006 Dave Jones <davej@xxxxxxxxxx> - ship the .kernelrelease file in -devel too. - Disable EDAC debug. --------------------------------------------------------------------- This update can be downloaded from: http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/ 190315d5016bfe17af6abbc475b9a4e2f22ea16d SRPMS/kernel-2.6.16-1.2096_FC4.src.rpm 910fcb7755289388e7a144b5ae410ff2fa68a18e ppc/kernel-2.6.16-1.2096_FC4.ppc.rpm 5ee253da9ce9d38b90607179fd3da38c078aad00 ppc/kernel-devel-2.6.16-1.2096_FC4.ppc.rpm 01c44a4c831fe833ad8dcdc631bf9fd7827e7a1b ppc/kernel-smp-2.6.16-1.2096_FC4.ppc.rpm 7a9ab31acecda7dde7979a20dd842bfbcf9927f4 ppc/kernel-smp-devel-2.6.16-1.2096_FC4.ppc.rpm b7e7f93899d92ac4a7b02bf9e8ce170ff6da7820 ppc/debug/kernel-debuginfo-2.6.16-1.2096_FC4.ppc.rpm d00a96620e1f71d10ac94b94e5b3299f73d86bb2 ppc/kernel-doc-2.6.16-1.2096_FC4.noarch.rpm fbe000f24405342e59ac3b34b01c76ff65124b7b x86_64/kernel-2.6.16-1.2096_FC4.x86_64.rpm 19669089c59f7dba1db1cb2222319f77e2d8c29e x86_64/kernel-devel-2.6.16-1.2096_FC4.x86_64.rpm 32e92f3cfd342ea10e27d249e33ed2634dc010bd x86_64/kernel-smp-2.6.16-1.2096_FC4.x86_64.rpm 2acab6261c423b032887f5fffef104cde72d0492 x86_64/kernel-smp-devel-2.6.16-1.2096_FC4.x86_64.rpm 578ff9d8e1ca013de5f80a5f570f33ddd18e78a3 x86_64/debug/kernel-debuginfo-2.6.16-1.2096_FC4.x86_64.rpm d00a96620e1f71d10ac94b94e5b3299f73d86bb2 x86_64/kernel-doc-2.6.16-1.2096_FC4.noarch.rpm 400517b3dd2ae4b5465eee500e87a7275da47420 i386/kernel-2.6.16-1.2096_FC4.i586.rpm 09329c1a246c252f0edcd0dfa056168b53ebc722 i386/kernel-devel-2.6.16-1.2096_FC4.i586.rpm 676e5e914d20af47530c852d53029f459422497c i386/debug/kernel-debuginfo-2.6.16-1.2096_FC4.i586.rpm 4a66d6b80ce14e09ca15441a4b3de5906a98a371 i386/kernel-2.6.16-1.2096_FC4.i686.rpm 860914ddf10330977d4ef369823701d2befdb808 i386/kernel-devel-2.6.16-1.2096_FC4.i686.rpm c21b746ec5c54052627473d6089ed89bb68a1118 i386/kernel-smp-2.6.16-1.2096_FC4.i686.rpm 33e1965ad75fd3db2d879231f6df33f692188d35 i386/kernel-smp-devel-2.6.16-1.2096_FC4.i686.rpm 60ff2aeabd93b6a24ec9a2d92885efef399a062e i386/debug/kernel-debuginfo-2.6.16-1.2096_FC4.i686.rpm d00a96620e1f71d10ac94b94e5b3299f73d86bb2 i386/kernel-doc-2.6.16-1.2096_FC4.noarch.rpm This update can be installed with the 'yum' update program. Use 'yum update package-name' at the command line. For more information, refer to 'Managing Software with yum,' available at http://fedora.redhat.com/docs/yum/. --------------------------------------------------------------------- -- fedora-announce-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-announce-list