Lucene search

K
centosCentOS ProjectCESA-2012:1156
HistoryAug 15, 2012 - 4:21 a.m.

kernel, perf, python security update

2012-08-1504:21:07
CentOS Project
lists.centos.org
48

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.3%

CentOS Errata and Security Advisory CESA-2012:1156

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issues:

  • An integer overflow flaw was found in the i915_gem_execbuffer2() function
    in the Intel i915 driver in the Linux kernel. A local, unprivileged user
    could use this flaw to cause a denial of service. This issue only affected
    32-bit systems. (CVE-2012-2383, Moderate)

  • A missing initialization flaw was found in the sco_sock_getsockopt_old()
    function in the Linux kernel’s Bluetooth implementation. A local,
    unprivileged user could use this flaw to cause an information leak.
    (CVE-2011-1078, Low)

Red Hat would like to thank Vasiliy Kulikov of Openwall for reporting the
CVE-2011-1078 issue.

This update also fixes several bugs. Documentation for these changes will
be available shortly from the Technical Notes document linked to in the
References section.

Users should upgrade to these updated packages, which contain backported
patches to correct these issues, and fix the bugs noted in the Technical
Notes. The system must be rebooted for this update to take effect.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2012-August/080965.html

Affected packages:
kernel
kernel-debug
kernel-debug-devel
kernel-devel
kernel-doc
kernel-firmware
kernel-headers
perf
python-perf

Upstream details at:
https://access.redhat.com/errata/RHSA-2012:1156

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.3%