Oval Definition:	oval:com.redhat.rhsa:def:20030416
Revision Date: 2004-01-07 Version: 502 Title: RHSA-2003:416: kernel security update (Important) Description: The Linux kernel handles the basic functions of the operating system. Paul Starzetz discovered a flaw in bounds checking in mremap() in the Linux kernel versions 2.4.23 and previous which may allow a local attacker to gain root privileges. No exploit is currently available; however, it is believed that this issue is exploitable (although not trivially.) The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2003-0985 to this issue. All users of Red Hat Enterprise Linux 3 are advised to upgrade to these errata packages, which contain a backported security patch that corrects this issue. Red Hat would like to thank Paul Starzetz from ISEC for disclosing this issue as well as Andrea Arcangeli and Solar Designer for working on the patch. Family: unix Class: patch Status: Reference(s): CVE-2003-0985 RHSA-2003:416-01 Platform(s): Red Hat Enterprise Linux 3 Product(s): Definition Synopsis Red Hat Enterprise Linux 3 is installed AND Package Information kernel-source is earlier than 0:2.4.21-4.0.2.EL AND kernel-source is signed with Red Hat master key OR kernel is earlier than 0:2.4.21-4.0.2.EL AND kernel is signed with Red Hat master key OR kernel-doc is earlier than 0:2.4.21-4.0.2.EL AND kernel-doc is signed with Red Hat master key OR kernel-hugemem-unsupported is earlier than 0:2.4.21-4.0.2.EL AND kernel-hugemem-unsupported is signed with Red Hat master key OR kernel-hugemem is earlier than 0:2.4.21-4.0.2.EL AND kernel-hugemem is signed with Red Hat master key OR kernel-BOOT is earlier than 0:2.4.21-4.0.2.EL AND kernel-BOOT is signed with Red Hat master key OR kernel-smp-unsupported is earlier than 0:2.4.21-4.0.2.EL AND kernel-smp-unsupported is signed with Red Hat master key OR kernel-unsupported is earlier than 0:2.4.21-4.0.2.EL AND kernel-unsupported is signed with Red Hat master key OR kernel-smp is earlier than 0:2.4.21-4.0.2.EL AND kernel-smp is signed with Red Hat master key
BACK