RHSA-2005:472-05 (kernel security update) not required for all?

[Ben <bda20 cam ac uk>]

The security advisory RHSA-2005:472-05 says:

"These new kernel packages contain fixes for the three security issues
 described below as well as an important fix for a problem that could
 lead to data corruption on x86-architecture SMP systems with greater
 than 4GB of memory through heavy usage of multi-threaded applications."

According to my own records and RHN, all of my machines (WS and AS) are 
running kernel 2.4.21-32.EL, many (WS and AS) are running 2.4.21-32.ELsmp. 
One AS machine has 4GB of RAM, the remainder have between 512MB and 2GB of 
RAM.

All (bar one) were kickstarted from RHEL3 u4 kickstart points and have 
been through the 2.4.21-27.0.2.EL -> 2.4.21-27.0.4.EL -> 2.4.21-32.EL 
kernel upgrade path.  All are fully up to date with regard to up2date 
and the RHN.  None of these machines apparently require that 
RHSA-2005:472-05 be applied.

The remaining one AS machine was kickstarted very recently from a RHEL3 u5 
kickstart point directly to kernel 2.4.21-32.ELsmp.  Only this machine is 
listed in RHN as requiring the upgrade to 2.4.21-32.0.1.EL (the above 
RHSA-2005:472-05).  There's an additional RHSA-2005:413-04 regarding 
ImageMagick which also only seems to apply to this machine and none of the 
others but I'm not so concerned about that.

This single machine was kickstarted in an identical manner (other than 
using a u5 rather than a u4 kickstart set) to another machine, runs on 
identical hardware and has all the same RPMs on.  That other machine 
doesn't require either errata.  I don't get it.

Does anyone know what's going on?

Ben
--
Unix Support, MISD, University of Cambridge, England
Plugger of wire, typer of keyboard, imparter of Clue
        Life Is Short.          It's All Good.