Mandriva Update for kernel MDVSA-2010:034-1 (kernel)

Solution
Please Install the Updated Packages.
Insight
Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel: Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain privileges via a negative event index in an IOCTL request. (CVE-2009-3080) The collect_rx_frame function in drivers/isdn/hisax/hfc_usb.c in the Linux kernel before 2.6.32-rc7 allows attackers to have an unspecified impact via a crafted HDLC packet that arrives over ISDN and triggers a buffer under-read. (CVE-2009-4005) Additionally, the Linux kernel was updated to the stable release 2.6.27.45. To update your kernel, please follow the directions located at: http://www.mandriva.com/en/security/kernelupdate Update: The virtualbox DKMS modules was not provided with MDVSA-2010:034 for the Enterprise 5 product. This advisory provides the missing virtualbox packages.
Affected
kernel on Mandriva Enterprise Server 5, Mandriva Enterprise Server 5/X86_64