| Description: | Description:
The remote host is missing updates announced in
advisory RHSA-2007:0085.
The Linux kernel handles the basic functions of the operating system.
These new kernel packages contain fixes for two security issues:
* a flaw in the key serial number collision avoidance algorithm of the
keyctl subsystem that allowed a local user to cause a denial of service
(CVE-2007-0006, Important)
* a flaw in the file watch implementation of the audit subsystems that
allowed a local user to cause a denial of service (panic). To exploit this
flaw a privileged user must have previously created a watch for a file
(CVE-2007-0001, Moderate)
In addition to the security issues described above, a fix for the SCTP
subsystem to address a system crash which may be experienced in Telco
environments has been included.
Red Hat Enterprise Linux 4 users are advised to upgrade their kernels to
the packages associated with their machine architecture and configurations
as listed in this erratum.
Solution:
Please note that this update is available via
Red Hat Network. To use Red Hat Network, launch the Red
Hat Update Agent with the following command: up2date
http://rhn.redhat.com/errata/RHSA-2007-0085.html
http://www.redhat.com/security/updates/classification/#important
Risk factor : Medium
CVSS Score:
4.7
|
