RHSA-2009:1081: Important: kernel-rt security and bug fix update

The kernel-rt packages contain the Linux kernel, the core of any Linuxoperating system.These updated packages fix the following security issues: a buffer overflow flaw was found in the CIFSTCon() function of the Linux kernel Common Internet File System (CIFS) implementation. When mounting aCIFS share, a malicious server could send an overly-long string to theclient, possibly leading to a denial of service or privilege escalation onthe client mounting the CIFS share. (CVE-2009-1439, Important) the Linux kernel Network File System daemon (nfsd) implementation did not drop the CAPMKNOD capability when handling requests from local,unprivileged users. This flaw could possibly lead to an information leak orprivilege escalation. (CVE-2009-1072, Moderate) a deficiency was found in the Linux kernel signals implementation. The killsomethinginfo() function did not check if a process was outside thecaller's namespace before sending the kill signal, making it possible tokill processes in all process ID (PID) namespaces, breaking PID namespaceisolation. (CVE-2009-1338, Moderate) a flaw was found in the AGPGART driver. The agpgenericallocpage() and agpgenericallocpages() functions did not zero out the memory pages theyallocate, which may later be available to user-space processes. This flawcould possibly lead to an information leak. (CVE-2009-1192, Low)These updated packages also fix the following bugs: the "-fwrapv" flag was added to the gcc build options to prevent gcc from optimizing away wrapping arithmetic, as optimizing away wrapping may leadto unexpected results. (BZ#491264) the bnx2x driver may have failed when highly-stressed by network stress-tests, resulting in network access being unavailable. This driverhas been updated to resolve this issue. (BZ#495472) the file system mask, which lists capabilities for users with a file system user ID (fsuid) of 0, was missing the CAPMKNOD andCAPLINUXIMMUTABLE capabilities. This could, potentially, allow users withan fsuid other than 0 to perform actions on some file system types thatwould otherwise be prevented. This update adds these capabilities.(BZ#497047) "/proc/[pid]/maps" and "/proc/[pid]/smaps" can only be read by processes able to use the ptrace() call on a given process; however, certaininformation from "/proc/[pid]/stat" and "/proc/[pid]/wchan" could be usedto reconstruct memory maps, making it possible to bypass the Address SpaceLayout Randomization (ASLR) security feature. This update addresses thisissue. (BZ#499550) the getrandomint() function returned the same number until the jiffies counter (which ticks at a clock interrupt frequency) or process ID (PID)changed, making it possible to predict the random numbers. This may havehelped to bypass the ASLR security feature. With this update,getrandomint() is more random and no longer uses a common seed value.This reduces the possibility of predicting the values getrandomint()returns. (BZ#499787)All Red Hat Enterprise MRG users should upgrade to these updated packages,which contain backported patches to resolve these issues. Note: The systemmust be rebooted for this update to take effect.