---------------------------------------------------------------------- Secunia integrated with Microsoft WSUS http://secunia.com/blog/71/ ---------------------------------------------------------------------- TITLE: Red Hat update for kernel SECUNIA ADVISORY ID: SA38226 VERIFY ADVISORY: http://secunia.com/advisories/38226/ DESCRIPTION: Red Hat has issued an update for the kernel. This fixes some security issues and vulnerabilities, which can be exploited by malicious, local users to disclose system information. manipulate certain data, cause a DoS (Denial of Service), and potentially gain escalated privileges, and by malicious people to cause a DoS. For more information: SA23349 SA32320 SA35705 SA36927 SA37435 SA37590 SA38199 1) The qla2xxx driver for QLogic Fibre Channel PCI/PCIe host adapters sets world-writable permissions for the "/sys/class/scsi_host/[a qla2xxx host]/vport_create" and "/sys/class/scsi_host/[a qla2xxx host]/vport_delete" files, which can be exploited to change certain SCSI attributes. Note: This only affects systems using the qla2xxx driver with NPIV capable hardware. SOLUTION: Updated packages are available via Red Hat Network. http://rhn.redhat.com ORIGINAL ADVISORY: RHSA-2010-0046: https://rhn.redhat.com/errata/RHSA-2010-0046.html OTHER REFERENCES: SA23349: http://secunia.com/advisories/23349/ SA32320: http://secunia.com/advisories/32320/ SA35705: http://secunia.com/advisories/35705/ SA36927: http://secunia.com/advisories/36927/ SA37435: http://secunia.com/advisories/37435/ SA37590: http://secunia.com/advisories/37590/ SA38199: http://secunia.com/advisories/38199/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------