The following 3 new security updates are available for Red Hat Enterprise Linux 5:

- [RHSA-2010:0616-01] Moderate: dbus-glib security update
- [RHSA-2010:0615-01] Low: libvirt security and bug fix update
- [RHSA-2010:0610-01] Important: kernel security and bug fix update



[RHSA-2010:0616-01] Moderate: dbus-glib security update

=====================================================================
Red Hat Security Advisory

Synopsis: Moderate: dbus-glib security update
Advisory ID: RHSA-2010:0616-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2010-0616.html
Issue date: 2010-08-10
CVE Names: CVE-2010-1172
=====================================================================

1. Summary:

Updated dbus-glib packages that fix one security issue are now available
for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

2. Relevant releases/architectures:

RHEL Desktop Workstation (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64

3. Description:

dbus-glib is an add-on library to integrate the standard D-Bus library with
the GLib main loop and threading model. NetworkManager is a network link
manager that attempts to keep a wired or wireless network connection active
at all times.

It was discovered that dbus-glib did not enforce the "access" flag on
exported GObject properties. If such a property were read/write internally
but specified as read-only externally, a malicious, local user could use
this flaw to modify that property of an application. Such a change could
impact the application's behavior (for example, if an IP address were
changed the network may not come up properly after reboot) and possibly
lead to a denial of service. (CVE-2010-1172)

Due to the way dbus-glib translates an application's XML definitions of
service interfaces and properties into C code at application build time,
applications built against dbus-glib that use read-only properties needed
to be rebuilt to fully fix the flaw. As such, this update provides
NetworkManager packages that have been rebuilt against the updated
dbus-glib packages. No other applications shipped with Red Hat Enterprise
Linux 5 were affected.

All dbus-glib and NetworkManager users are advised to upgrade to these
updated packages, which contain a backported patch to correct this issue.
Running instances of NetworkManager must be restarted (service
NetworkManager restart) for this update to take effect.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

585394 - CVE-2010-1172 dbus-glib: property access not validated

6. Package List:

Red Hat Enterprise Linux Desktop (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/NetworkManager-0.7.0-10.el5_5.1.src.rpm
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/dbus-glib-0.73-10.el5_5.src.rpm

i386:
NetworkManager-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-debuginfo-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-devel-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-glib-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-glib-devel-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-gnome-0.7.0-10.el5_5.1.i386.rpm
dbus-glib-0.73-10.el5_5.i386.rpm
dbus-glib-debuginfo-0.73-10.el5_5.i386.rpm
dbus-glib-devel-0.73-10.el5_5.i386.rpm

x86_64:
NetworkManager-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-0.7.0-10.el5_5.1.x86_64.rpm
NetworkManager-debuginfo-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-debuginfo-0.7.0-10.el5_5.1.x86_64.rpm
NetworkManager-glib-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-glib-0.7.0-10.el5_5.1.x86_64.rpm
NetworkManager-gnome-0.7.0-10.el5_5.1.x86_64.rpm
dbus-glib-0.73-10.el5_5.i386.rpm
dbus-glib-0.73-10.el5_5.x86_64.rpm
dbus-glib-debuginfo-0.73-10.el5_5.i386.rpm
dbus-glib-debuginfo-0.73-10.el5_5.x86_64.rpm

RHEL Desktop Workstation (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/NetworkManager-0.7.0-10.el5_5.1.src.rpm
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/dbus-glib-0.73-10.el5_5.src.rpm

i386:
NetworkManager-debuginfo-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-devel-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-glib-devel-0.7.0-10.el5_5.1.i386.rpm
dbus-glib-debuginfo-0.73-10.el5_5.i386.rpm
dbus-glib-devel-0.73-10.el5_5.i386.rpm

x86_64:
NetworkManager-debuginfo-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-debuginfo-0.7.0-10.el5_5.1.x86_64.rpm
NetworkManager-devel-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-devel-0.7.0-10.el5_5.1.x86_64.rpm
NetworkManager-glib-devel-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-glib-devel-0.7.0-10.el5_5.1.x86_64.rpm
dbus-glib-debuginfo-0.73-10.el5_5.i386.rpm
dbus-glib-debuginfo-0.73-10.el5_5.x86_64.rpm
dbus-glib-devel-0.73-10.el5_5.i386.rpm
dbus-glib-devel-0.73-10.el5_5.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/NetworkManager-0.7.0-10.el5_5.1.src.rpm
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/dbus-glib-0.73-10.el5_5.src.rpm

i386:
NetworkManager-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-debuginfo-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-devel-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-glib-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-glib-devel-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-gnome-0.7.0-10.el5_5.1.i386.rpm
dbus-glib-0.73-10.el5_5.i386.rpm
dbus-glib-debuginfo-0.73-10.el5_5.i386.rpm
dbus-glib-devel-0.73-10.el5_5.i386.rpm

ia64:
NetworkManager-0.7.0-10.el5_5.1.ia64.rpm
NetworkManager-debuginfo-0.7.0-10.el5_5.1.ia64.rpm
NetworkManager-devel-0.7.0-10.el5_5.1.ia64.rpm
NetworkManager-glib-0.7.0-10.el5_5.1.ia64.rpm
NetworkManager-glib-devel-0.7.0-10.el5_5.1.ia64.rpm
NetworkManager-gnome-0.7.0-10.el5_5.1.ia64.rpm
dbus-glib-0.73-10.el5_5.ia64.rpm
dbus-glib-debuginfo-0.73-10.el5_5.ia64.rpm
dbus-glib-devel-0.73-10.el5_5.ia64.rpm

ppc:
NetworkManager-0.7.0-10.el5_5.1.ppc.rpm
NetworkManager-0.7.0-10.el5_5.1.ppc64.rpm
NetworkManager-debuginfo-0.7.0-10.el5_5.1.ppc.rpm
NetworkManager-debuginfo-0.7.0-10.el5_5.1.ppc64.rpm
NetworkManager-devel-0.7.0-10.el5_5.1.ppc.rpm
NetworkManager-devel-0.7.0-10.el5_5.1.ppc64.rpm
NetworkManager-glib-0.7.0-10.el5_5.1.ppc.rpm
NetworkManager-glib-0.7.0-10.el5_5.1.ppc64.rpm
NetworkManager-glib-devel-0.7.0-10.el5_5.1.ppc.rpm
NetworkManager-glib-devel-0.7.0-10.el5_5.1.ppc64.rpm
NetworkManager-gnome-0.7.0-10.el5_5.1.ppc.rpm
dbus-glib-0.73-10.el5_5.ppc.rpm
dbus-glib-0.73-10.el5_5.ppc64.rpm
dbus-glib-debuginfo-0.73-10.el5_5.ppc.rpm
dbus-glib-debuginfo-0.73-10.el5_5.ppc64.rpm
dbus-glib-devel-0.73-10.el5_5.ppc.rpm
dbus-glib-devel-0.73-10.el5_5.ppc64.rpm

s390x:
dbus-glib-0.73-10.el5_5.s390.rpm
dbus-glib-0.73-10.el5_5.s390x.rpm
dbus-glib-debuginfo-0.73-10.el5_5.s390.rpm
dbus-glib-debuginfo-0.73-10.el5_5.s390x.rpm
dbus-glib-devel-0.73-10.el5_5.s390.rpm
dbus-glib-devel-0.73-10.el5_5.s390x.rpm

x86_64:
NetworkManager-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-0.7.0-10.el5_5.1.x86_64.rpm
NetworkManager-debuginfo-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-debuginfo-0.7.0-10.el5_5.1.x86_64.rpm
NetworkManager-devel-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-devel-0.7.0-10.el5_5.1.x86_64.rpm
NetworkManager-glib-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-glib-0.7.0-10.el5_5.1.x86_64.rpm
NetworkManager-glib-devel-0.7.0-10.el5_5.1.i386.rpm
NetworkManager-glib-devel-0.7.0-10.el5_5.1.x86_64.rpm
NetworkManager-gnome-0.7.0-10.el5_5.1.x86_64.rpm
dbus-glib-0.73-10.el5_5.i386.rpm
dbus-glib-0.73-10.el5_5.x86_64.rpm
dbus-glib-debuginfo-0.73-10.el5_5.i386.rpm
dbus-glib-debuginfo-0.73-10.el5_5.x86_64.rpm
dbus-glib-devel-0.73-10.el5_5.i386.rpm
dbus-glib-devel-0.73-10.el5_5.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2010-1172.html
http://www.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2010 Red Hat, Inc.

[RHSA-2010:0615-01] Low: libvirt security and bug fix update

=====================================================================
Red Hat Security Advisory

Synopsis: Low: libvirt security and bug fix update
Advisory ID: RHSA-2010:0615-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2010-0615.html
Issue date: 2010-08-10
CVE Names: CVE-2010-2239 CVE-2010-2242
=====================================================================

1. Summary:

Updated libvirt packages that fix two security issues and three bugs are
now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having low
security impact. Common Vulnerability Scoring System (CVSS) base scores,
which give detailed severity ratings, are available for each vulnerability
from the CVE links in the References section.

2. Relevant releases/architectures:

RHEL Desktop Multi OS (v. 5 client) - i386, x86_64
RHEL Virtualization (v. 5 server) - i386, ia64, x86_64

3. Description:

The libvirt library is a C API for managing and interacting with the
virtualization capabilities of Linux and other operating systems. In
addition, libvirt provides tools for remotely managing virtualized systems.

It was found that libvirt did not set the user-defined backing store format
when creating a new image, possibly resulting in applications having to
probe the backing store to discover the format. A privileged guest user
could use this flaw to read arbitrary files on the host. (CVE-2010-2239)

It was found that libvirt created insecure iptables rules on the host when
a guest system was configured for IP masquerading, allowing the guest to
use privileged ports on the host when accessing network resources. A
privileged guest user could use this flaw to access network resources that
would otherwise not be accessible to the guest. (CVE-2010-2242)

Red Hat would like to thank Jeremy Nickurak for reporting the CVE-2010-2242
issue.

This update also fixes the following bugs:

* a Linux software bridge assumes the MAC address of the enslaved interface
with the numerically lowest MAC address. When the bridge changes its MAC
address, for a period of time it does not relay packets across network
segments, resulting in a temporary network "blackout". The bridge should
thus avoid changing its MAC address in order not to disrupt network
communications.

The Linux kernel assigns network TAP devices a random MAC address.
Occasionally, this random MAC address is lower than that of the physical
interface which is enslaved (for example, eth0 or eth1), which causes the
bridge to change its MAC address, thereby disrupting network communications
for a period of time.

With this update, libvirt now sets an explicit MAC address for all TAP
devices created using the configured MAC address from the XML, but with the
high bit set to 0xFE. The result is that TAP device MAC addresses are now
numerically greater than those for physical interfaces, and bridges should
no longer attempt to switch their MAC address to that of the TAP device,
thus avoiding potential spurious network disruptions. (BZ#617243)

* a memory leak in the libvirt driver for the Xen hypervisor has been fixed
with this update. (BZ#619711)

* the xm and virsh management user interfaces for virtual guests can be
called on the command line to list the number of active guests. However,
under certain circumstances, running the "virsh list" command resulted in
virsh not listing all of the virtual guests that were active (that is,
running) at the time. This update incorporates a fix that matches the logic
used for determining active guests with that of "xm list", such that both
commands should now list the same number of active virtual guests under all
circumstances. (BZ#618200)

All users of libvirt are advised to upgrade to these updated packages,
which contain backported patches to correct these issues. After installing
the updated packages, the system must be rebooted for the update to take
effect.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

602455 - CVE-2010-2242 libvirt: improperly mapped source privileged ports may allow for obtaining privileged resources on the host
607812 - CVE-2010-2239 libvirt: not setting user defined backing store format when creating new image
617243 - libvirt should not use the MAC address assigned to tap devices/vnet interfaces by the TAP/TUN driver.
618200 - Discrepancy between xm and virsh output when listing active Xen domains
619711 - Memory leak in libvirtd

6. Package List:

RHEL Desktop Multi OS (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/libvirt-0.6.3-33.el5_5.3.src.rpm

i386:
libvirt-0.6.3-33.el5_5.3.i386.rpm
libvirt-debuginfo-0.6.3-33.el5_5.3.i386.rpm
libvirt-devel-0.6.3-33.el5_5.3.i386.rpm
libvirt-python-0.6.3-33.el5_5.3.i386.rpm

x86_64:
libvirt-0.6.3-33.el5_5.3.i386.rpm
libvirt-0.6.3-33.el5_5.3.x86_64.rpm
libvirt-debuginfo-0.6.3-33.el5_5.3.i386.rpm
libvirt-debuginfo-0.6.3-33.el5_5.3.x86_64.rpm
libvirt-devel-0.6.3-33.el5_5.3.i386.rpm
libvirt-devel-0.6.3-33.el5_5.3.x86_64.rpm
libvirt-python-0.6.3-33.el5_5.3.x86_64.rpm

RHEL Virtualization (v. 5 server):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/libvirt-0.6.3-33.el5_5.3.src.rpm

i386:
libvirt-0.6.3-33.el5_5.3.i386.rpm
libvirt-debuginfo-0.6.3-33.el5_5.3.i386.rpm
libvirt-devel-0.6.3-33.el5_5.3.i386.rpm
libvirt-python-0.6.3-33.el5_5.3.i386.rpm

ia64:
libvirt-0.6.3-33.el5_5.3.ia64.rpm
libvirt-debuginfo-0.6.3-33.el5_5.3.ia64.rpm
libvirt-devel-0.6.3-33.el5_5.3.ia64.rpm
libvirt-python-0.6.3-33.el5_5.3.ia64.rpm

x86_64:
libvirt-0.6.3-33.el5_5.3.i386.rpm
libvirt-0.6.3-33.el5_5.3.x86_64.rpm
libvirt-debuginfo-0.6.3-33.el5_5.3.i386.rpm
libvirt-debuginfo-0.6.3-33.el5_5.3.x86_64.rpm
libvirt-devel-0.6.3-33.el5_5.3.i386.rpm
libvirt-devel-0.6.3-33.el5_5.3.x86_64.rpm
libvirt-python-0.6.3-33.el5_5.3.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2010-2239.html
https://www.redhat.com/security/data/cve/CVE-2010-2242.html
http://www.redhat.com/security/updates/classification/#low

8. Contact:

The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2010 Red Hat, Inc.

[RHSA-2010:0610-01] Important: kernel security and bug fix update

=====================================================================
Red Hat Security Advisory

Synopsis: Important: kernel security and bug fix update
Advisory ID: RHSA-2010:0610-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2010-0610.html
Issue date: 2010-08-10
CVE Names: CVE-2010-1084 CVE-2010-2066 CVE-2010-2070
CVE-2010-2226 CVE-2010-2248 CVE-2010-2521
CVE-2010-2524
=====================================================================

1. Summary:

Updated kernel packages that fix multiple security issues and several bugs
are now available for Red Hat Enterprise Linux 5.

The Red Hat Security Response Team has rated this update as having
important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux (v. 5 server) - i386, ia64, noarch, ppc, s390x, x86_64
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, noarch, x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issues:

* instances of unsafe sprintf() use were found in the Linux kernel
Bluetooth implementation. Creating a large number of Bluetooth L2CAP, SCO,
or RFCOMM sockets could result in arbitrary memory pages being overwritten.
A local, unprivileged user could use this flaw to cause a kernel panic
(denial of service) or escalate their privileges. (CVE-2010-1084,
Important)

* a flaw was found in the Xen hypervisor implementation when using the
Intel Itanium architecture, allowing guests to enter an unsupported state.
An unprivileged guest user could trigger this flaw by setting the BE (Big
Endian) bit of the Processor Status Register (PSR), leading to the guest
crashing (denial of service). (CVE-2010-2070, Important)

* a flaw was found in the CIFSSMBWrite() function in the Linux kernel
Common Internet File System (CIFS) implementation. A remote attacker could
send a specially-crafted SMB response packet to a target CIFS client,
resulting in a kernel panic (denial of service). (CVE-2010-2248, Important)

* buffer overflow flaws were found in the Linux kernel's implementation of
the server-side External Data Representation (XDR) for the Network File
System (NFS) version 4. An attacker on the local network could send a
specially-crafted large compound request to the NFSv4 server, which could
possibly result in a kernel panic (denial of service) or, potentially, code
execution. (CVE-2010-2521, Important)

* a flaw was found in the handling of the SWAPEXT IOCTL in the Linux kernel
XFS file system implementation. A local user could use this flaw to read
write-only files, that they do not own, on an XFS file system. This could
lead to unintended information disclosure. (CVE-2010-2226, Moderate)

* a flaw was found in the dns_resolver upcall used by CIFS. A local,
unprivileged user could redirect a Microsoft Distributed File System link
to another IP address, tricking the client into mounting the share from a
server of the user's choosing. (CVE-2010-2524, Moderate)

* a missing check was found in the mext_check_arguments() function in the
ext4 file system code. A local user could use this flaw to cause the
MOVE_EXT IOCTL to overwrite the contents of an append-only file on an ext4
file system, if they have write permissions for that file. (CVE-2010-2066,
Low)

Red Hat would like to thank Neil Brown for reporting CVE-2010-1084, and Dan
Rosenberg for reporting CVE-2010-2226 and CVE-2010-2066.

This update also fixes several bugs. Documentation for these bug fixes will
be available shortly from the Technical Notes document linked to in the
References.

Users should upgrade to these updated packages, which contain backported
patches to correct these issues. The system must be rebooted for this
update to take effect.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

To install kernel packages manually, use "rpm -ivh [package]". Do not
use "rpm -Uvh" as that will remove the running kernel binaries from
your system. You may use "rpm -e" to remove old kernels after
determining that the new kernel functions properly on your system.

5. Bugs fixed (http://bugzilla.redhat.com/):

576018 - CVE-2010-1084 kernel: bluetooth: potential bad memory access with sysfs files
586415 - CVE-2010-2070 /kernel/security/CVE-2006-0742 test cause kernel-xen panic on ia64
601006 - CVE-2010-2066 kernel: ext4: Make sure the MOVE_EXT ioctl can't overwrite append-only files
605158 - CVE-2010-2226 kernel: xfs swapext ioctl minor security issue
607483 - [Stratus 5.6 bug] Circular lock dep warning on cfq_exit_lock [rhel-5.5.z]
607486 - RHEL5u4 2.6.18-160.el5: modprobe of acpiphp on system with no hotpluggable stots causes kernel PANIC [rhel-5.5.z]
608583 - CVE-2010-2248 kernel: cifs: Fix a kernel BUG with remote OS/2 server
612028 - CVE-2010-2521 kernel: nfsd4: bug in read_buf
612166 - CVE-2010-2524 kernel: dns_resolver upcall security issue
612539 - [5.4]The addition of SAS disk fails because of the timeout. [rhel-5.5.z]
613688 - [NetApp 5.6 bug] QLogic FC firmware errors seen on RHEL 5.5 [rhel-5.5.z]
613900 - [RHEL5.5] TCP bandwidth problems with TPA and bnx2x cards [rhel-5.5.z]
615260 - [Broadcom 5.6 bug] cnic: Panic in cnic_iscsi_nl_msg_recv() [rhel-5.5.z]

6. Package List:

Red Hat Enterprise Linux Desktop (v. 5 client):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/kernel-2.6.18-194.11.1.el5.src.rpm

i386:
kernel-2.6.18-194.11.1.el5.i686.rpm
kernel-PAE-2.6.18-194.11.1.el5.i686.rpm
kernel-PAE-debuginfo-2.6.18-194.11.1.el5.i686.rpm
kernel-PAE-devel-2.6.18-194.11.1.el5.i686.rpm
kernel-debug-2.6.18-194.11.1.el5.i686.rpm
kernel-debug-debuginfo-2.6.18-194.11.1.el5.i686.rpm
kernel-debug-devel-2.6.18-194.11.1.el5.i686.rpm
kernel-debuginfo-2.6.18-194.11.1.el5.i686.rpm
kernel-debuginfo-common-2.6.18-194.11.1.el5.i686.rpm
kernel-devel-2.6.18-194.11.1.el5.i686.rpm
kernel-headers-2.6.18-194.11.1.el5.i386.rpm
kernel-xen-2.6.18-194.11.1.el5.i686.rpm
kernel-xen-debuginfo-2.6.18-194.11.1.el5.i686.rpm
kernel-xen-devel-2.6.18-194.11.1.el5.i686.rpm

noarch:
kernel-doc-2.6.18-194.11.1.el5.noarch.rpm

x86_64:
kernel-2.6.18-194.11.1.el5.x86_64.rpm
kernel-debug-2.6.18-194.11.1.el5.x86_64.rpm
kernel-debug-debuginfo-2.6.18-194.11.1.el5.x86_64.rpm
kernel-debug-devel-2.6.18-194.11.1.el5.x86_64.rpm
kernel-debuginfo-2.6.18-194.11.1.el5.x86_64.rpm
kernel-debuginfo-common-2.6.18-194.11.1.el5.x86_64.rpm
kernel-devel-2.6.18-194.11.1.el5.x86_64.rpm
kernel-headers-2.6.18-194.11.1.el5.x86_64.rpm
kernel-xen-2.6.18-194.11.1.el5.x86_64.rpm
kernel-xen-debuginfo-2.6.18-194.11.1.el5.x86_64.rpm
kernel-xen-devel-2.6.18-194.11.1.el5.x86_64.rpm

Red Hat Enterprise Linux (v. 5 server):

Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/kernel-2.6.18-194.11.1.el5.src.rpm

i386:
kernel-2.6.18-194.11.1.el5.i686.rpm
kernel-PAE-2.6.18-194.11.1.el5.i686.rpm
kernel-PAE-debuginfo-2.6.18-194.11.1.el5.i686.rpm
kernel-PAE-devel-2.6.18-194.11.1.el5.i686.rpm
kernel-debug-2.6.18-194.11.1.el5.i686.rpm
kernel-debug-debuginfo-2.6.18-194.11.1.el5.i686.rpm
kernel-debug-devel-2.6.18-194.11.1.el5.i686.rpm
kernel-debuginfo-2.6.18-194.11.1.el5.i686.rpm
kernel-debuginfo-common-2.6.18-194.11.1.el5.i686.rpm
kernel-devel-2.6.18-194.11.1.el5.i686.rpm
kernel-headers-2.6.18-194.11.1.el5.i386.rpm
kernel-xen-2.6.18-194.11.1.el5.i686.rpm
kernel-xen-debuginfo-2.6.18-194.11.1.el5.i686.rpm
kernel-xen-devel-2.6.18-194.11.1.el5.i686.rpm

ia64:
kernel-2.6.18-194.11.1.el5.ia64.rpm
kernel-debug-2.6.18-194.11.1.el5.ia64.rpm
kernel-debug-debuginfo-2.6.18-194.11.1.el5.ia64.rpm
kernel-debug-devel-2.6.18-194.11.1.el5.ia64.rpm
kernel-debuginfo-2.6.18-194.11.1.el5.ia64.rpm
kernel-debuginfo-common-2.6.18-194.11.1.el5.ia64.rpm
kernel-devel-2.6.18-194.11.1.el5.ia64.rpm
kernel-headers-2.6.18-194.11.1.el5.ia64.rpm
kernel-xen-2.6.18-194.11.1.el5.ia64.rpm
kernel-xen-debuginfo-2.6.18-194.11.1.el5.ia64.rpm
kernel-xen-devel-2.6.18-194.11.1.el5.ia64.rpm

noarch:
kernel-doc-2.6.18-194.11.1.el5.noarch.rpm

ppc:
kernel-2.6.18-194.11.1.el5.ppc64.rpm
kernel-debug-2.6.18-194.11.1.el5.ppc64.rpm
kernel-debug-debuginfo-2.6.18-194.11.1.el5.ppc64.rpm
kernel-debug-devel-2.6.18-194.11.1.el5.ppc64.rpm
kernel-debuginfo-2.6.18-194.11.1.el5.ppc64.rpm
kernel-debuginfo-common-2.6.18-194.11.1.el5.ppc64.rpm
kernel-devel-2.6.18-194.11.1.el5.ppc64.rpm
kernel-headers-2.6.18-194.11.1.el5.ppc.rpm
kernel-headers-2.6.18-194.11.1.el5.ppc64.rpm
kernel-kdump-2.6.18-194.11.1.el5.ppc64.rpm
kernel-kdump-debuginfo-2.6.18-194.11.1.el5.ppc64.rpm
kernel-kdump-devel-2.6.18-194.11.1.el5.ppc64.rpm

s390x:
kernel-2.6.18-194.11.1.el5.s390x.rpm
kernel-debug-2.6.18-194.11.1.el5.s390x.rpm
kernel-debug-debuginfo-2.6.18-194.11.1.el5.s390x.rpm
kernel-debug-devel-2.6.18-194.11.1.el5.s390x.rpm
kernel-debuginfo-2.6.18-194.11.1.el5.s390x.rpm
kernel-debuginfo-common-2.6.18-194.11.1.el5.s390x.rpm
kernel-devel-2.6.18-194.11.1.el5.s390x.rpm
kernel-headers-2.6.18-194.11.1.el5.s390x.rpm
kernel-kdump-2.6.18-194.11.1.el5.s390x.rpm
kernel-kdump-debuginfo-2.6.18-194.11.1.el5.s390x.rpm
kernel-kdump-devel-2.6.18-194.11.1.el5.s390x.rpm

x86_64:
kernel-2.6.18-194.11.1.el5.x86_64.rpm
kernel-debug-2.6.18-194.11.1.el5.x86_64.rpm
kernel-debug-debuginfo-2.6.18-194.11.1.el5.x86_64.rpm
kernel-debug-devel-2.6.18-194.11.1.el5.x86_64.rpm
kernel-debuginfo-2.6.18-194.11.1.el5.x86_64.rpm
kernel-debuginfo-common-2.6.18-194.11.1.el5.x86_64.rpm
kernel-devel-2.6.18-194.11.1.el5.x86_64.rpm
kernel-headers-2.6.18-194.11.1.el5.x86_64.rpm
kernel-xen-2.6.18-194.11.1.el5.x86_64.rpm
kernel-xen-debuginfo-2.6.18-194.11.1.el5.x86_64.rpm
kernel-xen-devel-2.6.18-194.11.1.el5.x86_64.rpm

These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2010-1084.html
https://www.redhat.com/security/data/cve/CVE-2010-2066.html
https://www.redhat.com/security/data/cve/CVE-2010-2070.html
https://www.redhat.com/security/data/cve/CVE-2010-2226.html
https://www.redhat.com/security/data/cve/CVE-2010-2248.html
https://www.redhat.com/security/data/cve/CVE-2010-2521.html
https://www.redhat.com/security/data/cve/CVE-2010-2524.html
http://www.redhat.com/security/updates/classification/#important
http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/5/html/5.5_Technical_Notes/kernel.html#id3512211

8. Contact:

The Red Hat security contact is . More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2010 Red Hat, Inc.