Kernel, kernel security update

CentOS Errata and Security Advisory CESA-2007:169

The Linux kernel handles the basic functions of the operating system.

These new kernel packages contain fixes for the following security issues:

• a flaw in the IPv6 socket option handling that allowed a local user to
  read arbitrary kernel memory (CVE-2007-1000, Important).

• a flaw in the IPv6 socket option handling that allowed a local user to
  cause a denial of service (CVE-2007-1388, Important).

• a flaw in the utrace support that allowed a local user to cause a denial
  of service (CVE-2007-0771, Important).

In addition to the security issues described above, a fix for a memory leak
in the audit subsystem and a fix for a data corruption bug on s390 systems
have been included.

Red Hat Enterprise Linux 5 users are advised to upgrade to these erratum
packages, which are not vulnerable to these issues.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-May/075859.html
https://lists.centos.org/pipermail/centos-announce/2007-May/075860.html

Affected packages:
Kernel-xen-devel
kernel
kernel-PAE
kernel-PAE-devel
kernel-devel
kernel-doc
kernel-headers
kernel-xen
kernel-xen-devel

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0169