Advisories:rPSA-2008-0048

From rPath Wiki

rPath Security Advisory 2008-0048-1

Published: 2008-02-08

Products

• rPath Linux 1

Rating

Severe

Exposure Level Classification

Local User Deterministic Privilege Escalation

Updated Versions

• kernel=conary.rpath.com@rpl:1-vmware/2.6.22.17-0.1-1
• kernel=conary.rpath.com@rpl:1/2.6.22.17-0.1-1

rPath Issue Tracking System

• RPL-2052
• RPL-2182
• RPL-2183
• RPL-2230

References

• CVE-2007-5904
• CVE-2007-6206
• CVE-2008-0007

Description

Previous versions of the kernel package have several vulnerabilities

resolved in this release. The most severe could allow local users

to read or write kernel memeory.

In addition, a bug that caused the kernel Out of Memory handler to

kill processes on systems with 4 or more GiB of RAM and 2 or more CPUs

has been fixed.

A system reboot is required to resolve these issues.

Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html