Fedora Core 2 : kernel-2.6.6-1.427 (2004-137)

high Nessus Plugin ID 13709

Synopsis

The remote Fedora Core host is missing a security update.

Description

An updated kernel is available that brings the kernel to the 2.6.7-rc3 base level. This new kernel provides a significant number of bug fixes and improvements for USB, the keyboard/mouse subsystem and the VM.
This kernel also fixes the high profile bugs about not working on VIA C3 processors (#120685) and Asus P4P800 motherboards (#121819). In this new kernel firewire no longer oopses during boot and has been re-enabled, however we consider firewire support still somewhat experimental and recommend extensive testing before using firewire in a production environment.

This kernel also contains the enhancements series from Al Viro that enables the Sparse source code checking tool to check for a certain class kernel bugs. This class of bugs can lead to privilege escalation vulnerabilities, and fixes for all such bugs that were found with Sparse and these patches are included in this erratum.

NX feature

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected packages.

See Also

http://www.nessus.org/u?1dcac203

Plugin Details

Severity: High

ID: 13709

File Name: fedora_2004-137.nasl

Version: 1.14

Type: local

Agent: unix

Published: 7/23/2004

Updated: 1/11/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:kernel, p-cpe:/a:fedoraproject:fedora:kernel-debuginfo, p-cpe:/a:fedoraproject:fedora:kernel-doc, p-cpe:/a:fedoraproject:fedora:kernel-smp, p-cpe:/a:fedoraproject:fedora:kernel-sourcecode, cpe:/o:fedoraproject:fedora_core:2

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 6/11/2004

Reference Information

FEDORA: 2004-137