An kernel update has been released for Red Hat Enterprise Linux 3
----------------------------------------------------------------------
Red Hat Security Advisory
Synopsis: Updated kernel packages fix security vulnerabilities
Advisory ID: RHSA-2004:183-01
Issue date: 2004-04-22
Updated on: 2004-04-22
Product: Red Hat Enterprise Linux
Keywords:
Cross references:
Obsoletes: RHSA-2004:066
CVE Names: CAN-2004-0109 CAN-2004-0424
----------------------------------------------------------------------
1. Topic:
Updated kernel packages that fix two privilege escalation vulnerabilities are now available.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS version 3 - athlon, i386, i686, ia64, ppc64, ppc64iseries, ppc64pseries, s390, s390x, x86_64
Red Hat Enterprise Linux ES version 3 - athlon, i386, i686
Red Hat Enterprise Linux WS version 3 - athlon, i386, i686, ia64, x86_64
3. Problem description:
The Linux kernel handles the basic functions of the operating system.
iSEC Security Research discovered a flaw in the ip_setsockopt() function code of the Linux kernel versions 2.4.22 to 2.4.25 inclusive. This flaw also affects the 2.4.21 kernel in Red Hat Enterprise Linux 3 which contained a backported version of the affected code. A local user could use this flaw to gain root privileges. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0424 to this issue.
iDefense reported a buffer overflow flaw in the ISO9660 filesystem code. An attacker could create a malicious filesystem in such a way that root privileges may be obtained if the filesystem is mounted. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0109 to this issue.
All Red Hat Enterprise Linux 3 users are advised to upgrade their kernels to the packages associated with their machine architectures and configurations as listed in this erratum.
4. Solution:
Before applying this update, make sure all previously released errata relevant to your system have been applied.
To update all RPMs for your particular architecture, run:
rpm -Fvh [filenames]
where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs.
Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command:
up2date
This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
If up2date fails to connect to Red Hat Network due to SSL Certificate Errors, you need to install a version of the up2date client with an updated certificate. The latest version of up2date is available from the Red Hat FTP site and may also be downloaded directly from the RHN website:
https://rhn.redhat.com/help/latest-up2date.pxt
5. Bug IDs fixed (http://bugzilla.redhat.com/bugzilla for more info):
120028 - CAN-2004-0109 kernel iso9660 buffer overflow
121314 - Linux kernel setsockopt MCAST_MSFILTER integer overflow
6. RPMs required:
Red Hat Enterprise Linux AS version 3:
SRPMS:
ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
athlon:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
i386:
Available from Red Hat Network: kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.i386.rpm
i686:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
ia64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm
ppc64:
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.ppc64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.ppc64.rpm
ppc64iseries:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ppc64iseries.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ppc64iseries.rpm
ppc64pseries:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ppc64pseries.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ppc64pseries.rpm
s390:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.s390.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.s390.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.s390.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.s390.rpm
s390x:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.s390x.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.s390x.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.s390x.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.s390x.rpm
x86_64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
Red Hat Enterprise Linux ES version 3:
SRPMS:
ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
athlon:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
i386:
Available from Red Hat Network: kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.i386.rpm
i686:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
Red Hat Enterprise Linux WS version 3:
SRPMS:
ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
athlon:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
i386:
Available from Red Hat Network: kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.i386.rpm
i686:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
ia64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm
x86_64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
7. Verification:
MD5 sum Package Name
- --------------------------------------------------------------------------
75e184e496f05cd18eea12a94a45d992 3AS/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
747381f00d4483d2b680d81a79ee87d0 3AS/en/os/athlon/kernel-2.4.21-9.0.3.EL.athlon.rpm
4419e2bc38199f6e108c87c34c29c77f 3AS/en/os/athlon/kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
c40f0b228e80bd863eeba517a05909c8 3AS/en/os/athlon/kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
5fef3bbf1605baaea07bd77ff96fff79 3AS/en/os/athlon/kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
9d44d75032a22e1bafe070cbf83abea3 3AS/en/os/i386/kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
090afc63ecd3b2dd68e76c25c428c0c3 3AS/en/os/i386/kernel-doc-2.4.21-9.0.3.EL.i386.rpm
52678a51fc609431df2d2c7ec3d66396 3AS/en/os/i386/kernel-source-2.4.21-9.0.3.EL.i386.rpm
0f0d28e815672056c265bc5d95a26b04 3AS/en/os/i686/kernel-2.4.21-9.0.3.EL.i686.rpm
15edf9ad36ad8ab7655025be9c68149b 3AS/en/os/i686/kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
be46b5651aea10e71f8ce5cd403e5597 3AS/en/os/i686/kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
58ef6536346d05530dea4d6553f22403 3AS/en/os/i686/kernel-smp-2.4.21-9.0.3.EL.i686.rpm
8803be23264421aaa299d55b8e534e9e 3AS/en/os/i686/kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
d678cc5434f16bb05af6ca66cafdea05 3AS/en/os/i686/kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
cb457e3e0a0460153b3bfbe5c39ef260 3AS/en/os/ia64/kernel-2.4.21-9.0.3.EL.ia64.rpm
e5325b4988f0e75f185c1208749d1c62 3AS/en/os/ia64/kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
977e74c136ab7e8cb2de0af714478544 3AS/en/os/ia64/kernel-source-2.4.21-9.0.3.EL.ia64.rpm
b852fe340ebf22869bb1e02ce589aa0d 3AS/en/os/ia64/kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm
528032788bee51dae3dcd354d2f8b73a 3AS/en/os/ppc64/kernel-doc-2.4.21-9.0.3.EL.ppc64.rpm
7c2229ba9d9eafacb71bcc6e752f3a19 3AS/en/os/ppc64/kernel-source-2.4.21-9.0.3.EL.ppc64.rpm
97c5ecb52204e12156f7895edac7e064 3AS/en/os/ppc64iseries/kernel-2.4.21-9.0.3.EL.ppc64iseries.rpm
83307f0d8628593d4f82e2d73c0056fc 3AS/en/os/ppc64iseries/kernel-unsupported-2.4.21-9.0.3.EL.ppc64iseries.rpm
c823973a230c40ac9edd411897b7113d 3AS/en/os/ppc64pseries/kernel-2.4.21-9.0.3.EL.ppc64pseries.rpm
65c97716b999af8eab0e1f8e24b209d8 3AS/en/os/ppc64pseries/kernel-unsupported-2.4.21-9.0.3.EL.ppc64pseries.rpm
ae7e0719db784bb53d78caadb9a28f46 3AS/en/os/s390/kernel-2.4.21-9.0.3.EL.s390.rpm
1642932547b2719d36eca9b51d4825d6 3AS/en/os/s390/kernel-doc-2.4.21-9.0.3.EL.s390.rpm
ae2f9d3424d123c7b3e0ba43d0031d81 3AS/en/os/s390/kernel-source-2.4.21-9.0.3.EL.s390.rpm
d334ddf760fce749557602fb71b20fe7 3AS/en/os/s390/kernel-unsupported-2.4.21-9.0.3.EL.s390.rpm
2e08a2aa7c25dc023f31f7028daf1dbb 3AS/en/os/s390x/kernel-2.4.21-9.0.3.EL.s390x.rpm
f2d16837ef21af8e303a7694cfc50e73 3AS/en/os/s390x/kernel-doc-2.4.21-9.0.3.EL.s390x.rpm
7383745e47cdd0e97d21d203df9a953e 3AS/en/os/s390x/kernel-source-2.4.21-9.0.3.EL.s390x.rpm
abb43640b44870450af1f3b61a2d4b1e 3AS/en/os/s390x/kernel-unsupported-2.4.21-9.0.3.EL.s390x.rpm
4153e7472cbc9e57331d8bd6ab963374 3AS/en/os/x86_64/kernel-2.4.21-9.0.3.EL.x86_64.rpm
b069533b3d6f1fc3aeba858a28dcfa1f 3AS/en/os/x86_64/kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
970369d2dfd7c9ea04d8073b7a8c9f3b 3AS/en/os/x86_64/kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
07628c9fe1be29deeabd2192dfeffcfb 3AS/en/os/x86_64/kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
dc4d55f0619c476d947f39a6760dca10 3AS/en/os/x86_64/kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
b8d738cb4bc5240bb089b59622da1ff4 3AS/en/os/x86_64/kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
75e184e496f05cd18eea12a94a45d992 3ES/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
747381f00d4483d2b680d81a79ee87d0 3ES/en/os/athlon/kernel-2.4.21-9.0.3.EL.athlon.rpm
4419e2bc38199f6e108c87c34c29c77f 3ES/en/os/athlon/kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
c40f0b228e80bd863eeba517a05909c8 3ES/en/os/athlon/kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
5fef3bbf1605baaea07bd77ff96fff79 3ES/en/os/athlon/kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
9d44d75032a22e1bafe070cbf83abea3 3ES/en/os/i386/kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
090afc63ecd3b2dd68e76c25c428c0c3 3ES/en/os/i386/kernel-doc-2.4.21-9.0.3.EL.i386.rpm
52678a51fc609431df2d2c7ec3d66396 3ES/en/os/i386/kernel-source-2.4.21-9.0.3.EL.i386.rpm
0f0d28e815672056c265bc5d95a26b04 3ES/en/os/i686/kernel-2.4.21-9.0.3.EL.i686.rpm
15edf9ad36ad8ab7655025be9c68149b 3ES/en/os/i686/kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
be46b5651aea10e71f8ce5cd403e5597 3ES/en/os/i686/kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
58ef6536346d05530dea4d6553f22403 3ES/en/os/i686/kernel-smp-2.4.21-9.0.3.EL.i686.rpm
8803be23264421aaa299d55b8e534e9e 3ES/en/os/i686/kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
d678cc5434f16bb05af6ca66cafdea05 3ES/en/os/i686/kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
75e184e496f05cd18eea12a94a45d992 3WS/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
747381f00d4483d2b680d81a79ee87d0 3WS/en/os/athlon/kernel-2.4.21-9.0.3.EL.athlon.rpm
4419e2bc38199f6e108c87c34c29c77f 3WS/en/os/athlon/kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
c40f0b228e80bd863eeba517a05909c8 3WS/en/os/athlon/kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
5fef3bbf1605baaea07bd77ff96fff79 3WS/en/os/athlon/kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
9d44d75032a22e1bafe070cbf83abea3 3WS/en/os/i386/kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
090afc63ecd3b2dd68e76c25c428c0c3 3WS/en/os/i386/kernel-doc-2.4.21-9.0.3.EL.i386.rpm
52678a51fc609431df2d2c7ec3d66396 3WS/en/os/i386/kernel-source-2.4.21-9.0.3.EL.i386.rpm
0f0d28e815672056c265bc5d95a26b04 3WS/en/os/i686/kernel-2.4.21-9.0.3.EL.i686.rpm
15edf9ad36ad8ab7655025be9c68149b 3WS/en/os/i686/kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
be46b5651aea10e71f8ce5cd403e5597 3WS/en/os/i686/kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
58ef6536346d05530dea4d6553f22403 3WS/en/os/i686/kernel-smp-2.4.21-9.0.3.EL.i686.rpm
8803be23264421aaa299d55b8e534e9e 3WS/en/os/i686/kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
d678cc5434f16bb05af6ca66cafdea05 3WS/en/os/i686/kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
cb457e3e0a0460153b3bfbe5c39ef260 3WS/en/os/ia64/kernel-2.4.21-9.0.3.EL.ia64.rpm
e5325b4988f0e75f185c1208749d1c62 3WS/en/os/ia64/kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
977e74c136ab7e8cb2de0af714478544 3WS/en/os/ia64/kernel-source-2.4.21-9.0.3.EL.ia64.rpm
b852fe340ebf22869bb1e02ce589aa0d 3WS/en/os/ia64/kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm
4153e7472cbc9e57331d8bd6ab963374 3WS/en/os/x86_64/kernel-2.4.21-9.0.3.EL.x86_64.rpm
b069533b3d6f1fc3aeba858a28dcfa1f 3WS/en/os/x86_64/kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
970369d2dfd7c9ea04d8073b7a8c9f3b 3WS/en/os/x86_64/kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
07628c9fe1be29deeabd2192dfeffcfb 3WS/en/os/x86_64/kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
dc4d55f0619c476d947f39a6760dca10 3WS/en/os/x86_64/kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
b8d738cb4bc5240bb089b59622da1ff4 3WS/en/os/x86_64/kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key is available from https://www.redhat.com/security/team/key.html
You can verify each package with the following command:
rpm --checksig -v filename
If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command:
md5sum filename
8. References:
http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt
http://www.idefense.com/application/poi/display?id=101
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0109
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0424
9. Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://www.redhat.com/security/team/contact.html
Copyright 2004 Red Hat, Inc.
----------------------------------------------------------------------
Red Hat Security Advisory
Synopsis: Updated kernel packages fix security vulnerabilities
Advisory ID: RHSA-2004:183-01
Issue date: 2004-04-22
Updated on: 2004-04-22
Product: Red Hat Enterprise Linux
Keywords:
Cross references:
Obsoletes: RHSA-2004:066
CVE Names: CAN-2004-0109 CAN-2004-0424
----------------------------------------------------------------------
1. Topic:
Updated kernel packages that fix two privilege escalation vulnerabilities are now available.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS version 3 - athlon, i386, i686, ia64, ppc64, ppc64iseries, ppc64pseries, s390, s390x, x86_64
Red Hat Enterprise Linux ES version 3 - athlon, i386, i686
Red Hat Enterprise Linux WS version 3 - athlon, i386, i686, ia64, x86_64
3. Problem description:
The Linux kernel handles the basic functions of the operating system.
iSEC Security Research discovered a flaw in the ip_setsockopt() function code of the Linux kernel versions 2.4.22 to 2.4.25 inclusive. This flaw also affects the 2.4.21 kernel in Red Hat Enterprise Linux 3 which contained a backported version of the affected code. A local user could use this flaw to gain root privileges. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0424 to this issue.
iDefense reported a buffer overflow flaw in the ISO9660 filesystem code. An attacker could create a malicious filesystem in such a way that root privileges may be obtained if the filesystem is mounted. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CAN-2004-0109 to this issue.
All Red Hat Enterprise Linux 3 users are advised to upgrade their kernels to the packages associated with their machine architectures and configurations as listed in this erratum.
4. Solution:
Before applying this update, make sure all previously released errata relevant to your system have been applied.
To update all RPMs for your particular architecture, run:
rpm -Fvh [filenames]
where [filenames] is a list of the RPMs you wish to upgrade. Only those RPMs which are currently installed will be updated. Those RPMs which are not installed but included in the list will not be updated. Note that you can also use wildcards (*.rpm) if your current directory *only* contains the desired RPMs.
Please note that this update is also available via Red Hat Network. Many people find this an easier way to apply updates. To use Red Hat Network, launch the Red Hat Update Agent with the following command:
up2date
This will start an interactive process that will result in the appropriate RPMs being upgraded on your system.
If up2date fails to connect to Red Hat Network due to SSL Certificate Errors, you need to install a version of the up2date client with an updated certificate. The latest version of up2date is available from the Red Hat FTP site and may also be downloaded directly from the RHN website:
https://rhn.redhat.com/help/latest-up2date.pxt
5. Bug IDs fixed (http://bugzilla.redhat.com/bugzilla for more info):
120028 - CAN-2004-0109 kernel iso9660 buffer overflow
121314 - Linux kernel setsockopt MCAST_MSFILTER integer overflow
6. RPMs required:
Red Hat Enterprise Linux AS version 3:
SRPMS:
ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
athlon:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
i386:
Available from Red Hat Network: kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.i386.rpm
i686:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
ia64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm
ppc64:
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.ppc64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.ppc64.rpm
ppc64iseries:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ppc64iseries.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ppc64iseries.rpm
ppc64pseries:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ppc64pseries.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ppc64pseries.rpm
s390:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.s390.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.s390.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.s390.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.s390.rpm
s390x:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.s390x.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.s390x.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.s390x.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.s390x.rpm
x86_64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
Red Hat Enterprise Linux ES version 3:
SRPMS:
ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
athlon:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
i386:
Available from Red Hat Network: kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.i386.rpm
i686:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
Red Hat Enterprise Linux WS version 3:
SRPMS:
ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
athlon:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
i386:
Available from Red Hat Network: kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.i386.rpm
i686:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
ia64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm
x86_64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
7. Verification:
MD5 sum Package Name
- --------------------------------------------------------------------------
75e184e496f05cd18eea12a94a45d992 3AS/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
747381f00d4483d2b680d81a79ee87d0 3AS/en/os/athlon/kernel-2.4.21-9.0.3.EL.athlon.rpm
4419e2bc38199f6e108c87c34c29c77f 3AS/en/os/athlon/kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
c40f0b228e80bd863eeba517a05909c8 3AS/en/os/athlon/kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
5fef3bbf1605baaea07bd77ff96fff79 3AS/en/os/athlon/kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
9d44d75032a22e1bafe070cbf83abea3 3AS/en/os/i386/kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
090afc63ecd3b2dd68e76c25c428c0c3 3AS/en/os/i386/kernel-doc-2.4.21-9.0.3.EL.i386.rpm
52678a51fc609431df2d2c7ec3d66396 3AS/en/os/i386/kernel-source-2.4.21-9.0.3.EL.i386.rpm
0f0d28e815672056c265bc5d95a26b04 3AS/en/os/i686/kernel-2.4.21-9.0.3.EL.i686.rpm
15edf9ad36ad8ab7655025be9c68149b 3AS/en/os/i686/kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
be46b5651aea10e71f8ce5cd403e5597 3AS/en/os/i686/kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
58ef6536346d05530dea4d6553f22403 3AS/en/os/i686/kernel-smp-2.4.21-9.0.3.EL.i686.rpm
8803be23264421aaa299d55b8e534e9e 3AS/en/os/i686/kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
d678cc5434f16bb05af6ca66cafdea05 3AS/en/os/i686/kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
cb457e3e0a0460153b3bfbe5c39ef260 3AS/en/os/ia64/kernel-2.4.21-9.0.3.EL.ia64.rpm
e5325b4988f0e75f185c1208749d1c62 3AS/en/os/ia64/kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
977e74c136ab7e8cb2de0af714478544 3AS/en/os/ia64/kernel-source-2.4.21-9.0.3.EL.ia64.rpm
b852fe340ebf22869bb1e02ce589aa0d 3AS/en/os/ia64/kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm
528032788bee51dae3dcd354d2f8b73a 3AS/en/os/ppc64/kernel-doc-2.4.21-9.0.3.EL.ppc64.rpm
7c2229ba9d9eafacb71bcc6e752f3a19 3AS/en/os/ppc64/kernel-source-2.4.21-9.0.3.EL.ppc64.rpm
97c5ecb52204e12156f7895edac7e064 3AS/en/os/ppc64iseries/kernel-2.4.21-9.0.3.EL.ppc64iseries.rpm
83307f0d8628593d4f82e2d73c0056fc 3AS/en/os/ppc64iseries/kernel-unsupported-2.4.21-9.0.3.EL.ppc64iseries.rpm
c823973a230c40ac9edd411897b7113d 3AS/en/os/ppc64pseries/kernel-2.4.21-9.0.3.EL.ppc64pseries.rpm
65c97716b999af8eab0e1f8e24b209d8 3AS/en/os/ppc64pseries/kernel-unsupported-2.4.21-9.0.3.EL.ppc64pseries.rpm
ae7e0719db784bb53d78caadb9a28f46 3AS/en/os/s390/kernel-2.4.21-9.0.3.EL.s390.rpm
1642932547b2719d36eca9b51d4825d6 3AS/en/os/s390/kernel-doc-2.4.21-9.0.3.EL.s390.rpm
ae2f9d3424d123c7b3e0ba43d0031d81 3AS/en/os/s390/kernel-source-2.4.21-9.0.3.EL.s390.rpm
d334ddf760fce749557602fb71b20fe7 3AS/en/os/s390/kernel-unsupported-2.4.21-9.0.3.EL.s390.rpm
2e08a2aa7c25dc023f31f7028daf1dbb 3AS/en/os/s390x/kernel-2.4.21-9.0.3.EL.s390x.rpm
f2d16837ef21af8e303a7694cfc50e73 3AS/en/os/s390x/kernel-doc-2.4.21-9.0.3.EL.s390x.rpm
7383745e47cdd0e97d21d203df9a953e 3AS/en/os/s390x/kernel-source-2.4.21-9.0.3.EL.s390x.rpm
abb43640b44870450af1f3b61a2d4b1e 3AS/en/os/s390x/kernel-unsupported-2.4.21-9.0.3.EL.s390x.rpm
4153e7472cbc9e57331d8bd6ab963374 3AS/en/os/x86_64/kernel-2.4.21-9.0.3.EL.x86_64.rpm
b069533b3d6f1fc3aeba858a28dcfa1f 3AS/en/os/x86_64/kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
970369d2dfd7c9ea04d8073b7a8c9f3b 3AS/en/os/x86_64/kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
07628c9fe1be29deeabd2192dfeffcfb 3AS/en/os/x86_64/kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
dc4d55f0619c476d947f39a6760dca10 3AS/en/os/x86_64/kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
b8d738cb4bc5240bb089b59622da1ff4 3AS/en/os/x86_64/kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
75e184e496f05cd18eea12a94a45d992 3ES/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
747381f00d4483d2b680d81a79ee87d0 3ES/en/os/athlon/kernel-2.4.21-9.0.3.EL.athlon.rpm
4419e2bc38199f6e108c87c34c29c77f 3ES/en/os/athlon/kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
c40f0b228e80bd863eeba517a05909c8 3ES/en/os/athlon/kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
5fef3bbf1605baaea07bd77ff96fff79 3ES/en/os/athlon/kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
9d44d75032a22e1bafe070cbf83abea3 3ES/en/os/i386/kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
090afc63ecd3b2dd68e76c25c428c0c3 3ES/en/os/i386/kernel-doc-2.4.21-9.0.3.EL.i386.rpm
52678a51fc609431df2d2c7ec3d66396 3ES/en/os/i386/kernel-source-2.4.21-9.0.3.EL.i386.rpm
0f0d28e815672056c265bc5d95a26b04 3ES/en/os/i686/kernel-2.4.21-9.0.3.EL.i686.rpm
15edf9ad36ad8ab7655025be9c68149b 3ES/en/os/i686/kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
be46b5651aea10e71f8ce5cd403e5597 3ES/en/os/i686/kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
58ef6536346d05530dea4d6553f22403 3ES/en/os/i686/kernel-smp-2.4.21-9.0.3.EL.i686.rpm
8803be23264421aaa299d55b8e534e9e 3ES/en/os/i686/kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
d678cc5434f16bb05af6ca66cafdea05 3ES/en/os/i686/kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
75e184e496f05cd18eea12a94a45d992 3WS/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
747381f00d4483d2b680d81a79ee87d0 3WS/en/os/athlon/kernel-2.4.21-9.0.3.EL.athlon.rpm
4419e2bc38199f6e108c87c34c29c77f 3WS/en/os/athlon/kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
c40f0b228e80bd863eeba517a05909c8 3WS/en/os/athlon/kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
5fef3bbf1605baaea07bd77ff96fff79 3WS/en/os/athlon/kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
9d44d75032a22e1bafe070cbf83abea3 3WS/en/os/i386/kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
090afc63ecd3b2dd68e76c25c428c0c3 3WS/en/os/i386/kernel-doc-2.4.21-9.0.3.EL.i386.rpm
52678a51fc609431df2d2c7ec3d66396 3WS/en/os/i386/kernel-source-2.4.21-9.0.3.EL.i386.rpm
0f0d28e815672056c265bc5d95a26b04 3WS/en/os/i686/kernel-2.4.21-9.0.3.EL.i686.rpm
15edf9ad36ad8ab7655025be9c68149b 3WS/en/os/i686/kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
be46b5651aea10e71f8ce5cd403e5597 3WS/en/os/i686/kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
58ef6536346d05530dea4d6553f22403 3WS/en/os/i686/kernel-smp-2.4.21-9.0.3.EL.i686.rpm
8803be23264421aaa299d55b8e534e9e 3WS/en/os/i686/kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
d678cc5434f16bb05af6ca66cafdea05 3WS/en/os/i686/kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
cb457e3e0a0460153b3bfbe5c39ef260 3WS/en/os/ia64/kernel-2.4.21-9.0.3.EL.ia64.rpm
e5325b4988f0e75f185c1208749d1c62 3WS/en/os/ia64/kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
977e74c136ab7e8cb2de0af714478544 3WS/en/os/ia64/kernel-source-2.4.21-9.0.3.EL.ia64.rpm
b852fe340ebf22869bb1e02ce589aa0d 3WS/en/os/ia64/kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm
4153e7472cbc9e57331d8bd6ab963374 3WS/en/os/x86_64/kernel-2.4.21-9.0.3.EL.x86_64.rpm
b069533b3d6f1fc3aeba858a28dcfa1f 3WS/en/os/x86_64/kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
970369d2dfd7c9ea04d8073b7a8c9f3b 3WS/en/os/x86_64/kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
07628c9fe1be29deeabd2192dfeffcfb 3WS/en/os/x86_64/kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
dc4d55f0619c476d947f39a6760dca10 3WS/en/os/x86_64/kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
b8d738cb4bc5240bb089b59622da1ff4 3WS/en/os/x86_64/kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key is available from https://www.redhat.com/security/team/key.html
You can verify each package with the following command:
rpm --checksig -v filename
If you only wish to verify that each package has not been corrupted or tampered with, examine only the md5sum with the following command:
md5sum filename
8. References:
http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt
http://www.idefense.com/application/poi/display?id=101
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0109
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0424
9. Contact:
The Red Hat security contact is secalert@redhat.com. More contact details at https://www.redhat.com/security/team/contact.html
Copyright 2004 Red Hat, Inc.
