New kernel fixes local security issues

Updated kernel fixes local security issues and provides several updated
drivers to support newer hardware and fix bugs under Red Hat Linux 7.3.

[Update 8 May 2003]
Added missing modutils-devel packages for Red Hat Linux 7.3

The Linux kernel handles the basic functions of the operating system. A
security code audit of the 2.4 kernel found a number of possible local
security vulnerabilities which could allow a local user to obtain elevated
(root) privileges. The vulnerabilities were found in the ixj telephony card
driver, the pcilynx firewire driver, and the bttv video capture card driver.

In addition, several drivers (e100, e1000, tg3n and IDE) have been updated
to support newer hardware for Red Hat Linux 7.3, and a number of bugs have
been fixed in IDE tapestreamer driver.

All Red Hat Linux 7.3 and 8.0 users should upgrade to this errata kernel
which is not vulnerable to these security issues.

NOTE: As with the 8.0 release, IDE DMA on CD-ROM drives is disabled by
default. If you are sure that your CD-ROM drive is capable of IDE
DMA, place the following line in the /etc/modules.conf file:

options ide-cd dma=1

Thanks to Silvio Cesare for finding the local security issues.

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

The procedure for upgrading the kernel manually is documented at:

http://www.redhat.com/support/docs/howto/kernel-upgrade/

Please read the directions for your architecture carefully before
proceeding with the kernel upgrade.

Please note that this update is also available via Red Hat Network. Many
people find this to be an easier way to apply updates. To use Red Hat
Network, launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system. Note that you need to select the kernel
explicitly on default configurations of up2date.

71622 - cs4232 module is not auto-loaded on use
73339 - apm locks up Asus A7N266VM (nForce chipset)
74589 - speedstep doesn't work on IBM ThinkPad T30 (pentium 4)
74879 - aha152x driver broken
75107 - boot time in /proc/stat is incorrect
75113 - /proc/uptime shows wrong uptime (slightly) and idle time (totally)

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1572
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1573
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1574
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.18