New kernel update available, fixes i810 video oops, several security issues

Updated kernel packages are now available which fix an oops in the i810 3D
kernel code. This kernel update also fixes a difficult to trigger race in
the dcache (filesystem cache) code, as well as some potential security
holes, although we are not currently aware of any exploits.

The 2.4.18-5 kernel introduced some safety checks in the VM subsystem that
were triggered when exiting an X session while using 3D acceleration with
the Intel i810/i815 chipset. Additionally, there was a difficult to trigger
race in the dcache of the file system subsystem.

This kernel update addresses both of these issues.

In addition, there are fixes for potential security holes in the following
drivers:

stradis
rio500
se401
usbvideo
apm

Finally, this kernel fixes a few files in the /proc file system which had
the capability to expose kernel memory when abused.

All of the security issues found during an audit and none of them, at the
time of this writing, have any known exploits.

We would like to thank Silvio Cesare, Stas Sergeev, Andi Kleen, Solar
Designer, and others for their auditing work.

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

The procedure for upgrading the kernel manually is documented at:

http://www.redhat.com/support/docs/howto/kernel-upgrade/

Please read the directions for your architecture carefully before
proceeding with the kernel upgrade.

Please note that this update is also available via Red Hat Network. Many
people find this to be an easier way to apply updates. To use Red Hat
Network, launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system. Note that you need to select the kernel
explicitly on default configurations of up2date.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0429
http://www.thefreeworld.net/non-US/