Home / mailings [RHSA-2007:0595-01] Moderate: kernel security and bug fix update
Posted on 10 July 2007
RedHat-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- ---------------------------------------------------------------------
Red Hat Security Advisory
Synopsis: Moderate: kernel security and bug fix update
Advisory ID: RHSA-2007:0595-01
Advisory URL: https://rhn.redhat.com/errata/RHSA-2007-0595.html
Issue date: 2007-07-10
Updated on: 2007-07-10
Product: Red Hat Enterprise Linux
CVE Names: CVE-2007-3107
- ---------------------------------------------------------------------
1. Summary:
Updated kernel packages that fix a security issue and a bug in the Red Hat
Enterprise Linux 5 kernel are now available.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, noarch, x86_64
RHEL Desktop Workstation (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, noarch, ppc, s390x, x86_64
3. Problem description:
The Linux kernel handles the basic functions of the operating system.
These new kernel packages contain a fix for the following security issue:
* a flaw in the signal handling on PowerPC-based systems that allowed a
local user to cause a denial of service (floating point corruption).
(CVE-2007-3107, Moderate).
In addition to the security issue described above, a fix for the following
have been included:
* a bug that can lead to data corruption with ServerWorks IDE controllers.
Red Hat Enterprise Linux 5 users are advised to upgrade to these packages,
which contain backported patches to correct these issues.
4. Solution:
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188
5. Bug IDs fixed (http://bugzilla.redhat.com/):
245580 - CVE-2007-3107 Data buffer miscompare on PowerPC when running HTX
6. RPMs required:
Red Hat Enterprise Linux Desktop (v. 5 client):
SRPMS:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/kernel-2.6.18-8.1.8.el5.src.rpm
ccbe8192d28c5643e24f0d59dd3ffd67 kernel-2.6.18-8.1.8.el5.src.rpm
i386:
3e58eb32058190282456b5fd50d1d0a9 kernel-2.6.18-8.1.8.el5.i686.rpm
e86c8a399ec8e9c61cd3a06ef5fcc72c kernel-PAE-2.6.18-8.1.8.el5.i686.rpm
ad4b5792668259e84cdcdac8700d3f7b kernel-PAE-debuginfo-2.6.18-8.1.8.el5.i686.rpm
a63c1acd8cb25932ceae804174878454 kernel-debuginfo-2.6.18-8.1.8.el5.i686.rpm
c6d441ea98dc19ad0d2e4519ce37fad6 kernel-debuginfo-common-2.6.18-8.1.8.el5.i686.rpm
369b98eb100f0fea6080e04dc56b28ba kernel-headers-2.6.18-8.1.8.el5.i386.rpm
a6acf16511257758eabd2befb5498b53 kernel-xen-2.6.18-8.1.8.el5.i686.rpm
c6c1bea1dfc733eb00c11d900fc1d095 kernel-xen-debuginfo-2.6.18-8.1.8.el5.i686.rpm
noarch:
7399c28871d391fccb59014103bdefe4 kernel-doc-2.6.18-8.1.8.el5.noarch.rpm
x86_64:
030ea917650057deafe66c292d7ab56d kernel-2.6.18-8.1.8.el5.x86_64.rpm
f856112851f7e639715388313e5fbe74 kernel-debuginfo-2.6.18-8.1.8.el5.x86_64.rpm
e935ebd99d2308b02c296653816eed07 kernel-debuginfo-common-2.6.18-8.1.8.el5.x86_64.rpm
abb52e09d47b6810e595d400530a7610 kernel-headers-2.6.18-8.1.8.el5.x86_64.rpm
aa4d7fb67b3578c13ee304bcbb54c304 kernel-xen-2.6.18-8.1.8.el5.x86_64.rpm
4f9ff59c4d4d4b314d38c8f7ab245636 kernel-xen-debuginfo-2.6.18-8.1.8.el5.x86_64.rpm
RHEL Desktop Workstation (v. 5 client):
SRPMS:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/kernel-2.6.18-8.1.8.el5.src.rpm
ccbe8192d28c5643e24f0d59dd3ffd67 kernel-2.6.18-8.1.8.el5.src.rpm
i386:
ad4b5792668259e84cdcdac8700d3f7b kernel-PAE-debuginfo-2.6.18-8.1.8.el5.i686.rpm
0c9e09e0836b39880581e3abdec33c39 kernel-PAE-devel-2.6.18-8.1.8.el5.i686.rpm
a63c1acd8cb25932ceae804174878454 kernel-debuginfo-2.6.18-8.1.8.el5.i686.rpm
c6d441ea98dc19ad0d2e4519ce37fad6 kernel-debuginfo-common-2.6.18-8.1.8.el5.i686.rpm
64c31079a5643fd9327edcfe8e191469 kernel-devel-2.6.18-8.1.8.el5.i686.rpm
c6c1bea1dfc733eb00c11d900fc1d095 kernel-xen-debuginfo-2.6.18-8.1.8.el5.i686.rpm
5b4b876f17154fa1fd744a8db5dc4eea kernel-xen-devel-2.6.18-8.1.8.el5.i686.rpm
x86_64:
f856112851f7e639715388313e5fbe74 kernel-debuginfo-2.6.18-8.1.8.el5.x86_64.rpm
e935ebd99d2308b02c296653816eed07 kernel-debuginfo-common-2.6.18-8.1.8.el5.x86_64.rpm
081997d16bf02e9ea9ed70644cb09676 kernel-devel-2.6.18-8.1.8.el5.x86_64.rpm
4f9ff59c4d4d4b314d38c8f7ab245636 kernel-xen-debuginfo-2.6.18-8.1.8.el5.x86_64.rpm
7a6a9de800775c5b96051bf207a96ea5 kernel-xen-devel-2.6.18-8.1.8.el5.x86_64.rpm
Red Hat Enterprise Linux (v. 5 server):
SRPMS:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/kernel-2.6.18-8.1.8.el5.src.rpm
ccbe8192d28c5643e24f0d59dd3ffd67 kernel-2.6.18-8.1.8.el5.src.rpm
i386:
3e58eb32058190282456b5fd50d1d0a9 kernel-2.6.18-8.1.8.el5.i686.rpm
e86c8a399ec8e9c61cd3a06ef5fcc72c kernel-PAE-2.6.18-8.1.8.el5.i686.rpm
ad4b5792668259e84cdcdac8700d3f7b kernel-PAE-debuginfo-2.6.18-8.1.8.el5.i686.rpm
0c9e09e0836b39880581e3abdec33c39 kernel-PAE-devel-2.6.18-8.1.8.el5.i686.rpm
a63c1acd8cb25932ceae804174878454 kernel-debuginfo-2.6.18-8.1.8.el5.i686.rpm
c6d441ea98dc19ad0d2e4519ce37fad6 kernel-debuginfo-common-2.6.18-8.1.8.el5.i686.rpm
64c31079a5643fd9327edcfe8e191469 kernel-devel-2.6.18-8.1.8.el5.i686.rpm
369b98eb100f0fea6080e04dc56b28ba kernel-headers-2.6.18-8.1.8.el5.i386.rpm
a6acf16511257758eabd2befb5498b53 kernel-xen-2.6.18-8.1.8.el5.i686.rpm
c6c1bea1dfc733eb00c11d900fc1d095 kernel-xen-debuginfo-2.6.18-8.1.8.el5.i686.rpm
5b4b876f17154fa1fd744a8db5dc4eea kernel-xen-devel-2.6.18-8.1.8.el5.i686.rpm
ia64:
700f83613226861d1a92e57860a112f0 kernel-2.6.18-8.1.8.el5.ia64.rpm
b516ba567326dbf332c6189916ee3eb5 kernel-debuginfo-2.6.18-8.1.8.el5.ia64.rpm
ba871b9b8b873a4c0e79884ba12c3c23 kernel-debuginfo-common-2.6.18-8.1.8.el5.ia64.rpm
e052a3ab0c0cd9eaee269410319bf760 kernel-devel-2.6.18-8.1.8.el5.ia64.rpm
c0fe8cb785e4f81994e941968f182771 kernel-headers-2.6.18-8.1.8.el5.ia64.rpm
7d3d52bf96815398149f56bb14fb6ce5 kernel-xen-2.6.18-8.1.8.el5.ia64.rpm
cfaf07086c6499a6280ceeb0aacc5edb kernel-xen-debuginfo-2.6.18-8.1.8.el5.ia64.rpm
9a88436ef78a5c7b3daeeaf1602a0f9c kernel-xen-devel-2.6.18-8.1.8.el5.ia64.rpm
noarch:
7399c28871d391fccb59014103bdefe4 kernel-doc-2.6.18-8.1.8.el5.noarch.rpm
ppc:
c9141104da9444d3f45acad60ad5d1c4 kernel-2.6.18-8.1.8.el5.ppc64.rpm
932be3eb9459b3ae30144521a5e512fe kernel-debuginfo-2.6.18-8.1.8.el5.ppc64.rpm
27f8fca5de1e7efe8d92c557f4394b71 kernel-debuginfo-common-2.6.18-8.1.8.el5.ppc64.rpm
4d0413de0b40d0eeec27ab192b28aff0 kernel-devel-2.6.18-8.1.8.el5.ppc64.rpm
8b4ad434207dce9f47074e207c11a3be kernel-headers-2.6.18-8.1.8.el5.ppc.rpm
f75b27870021e1472f936ca89d2e4a3c kernel-headers-2.6.18-8.1.8.el5.ppc64.rpm
0ebf821ec8c1da7c455dbfb2ae6e1d8b kernel-kdump-2.6.18-8.1.8.el5.ppc64.rpm
9f5da404db772ad524dc007bc5b6dddf kernel-kdump-debuginfo-2.6.18-8.1.8.el5.ppc64.rpm
bd6eb05a3964db319c6434c7b128c76e kernel-kdump-devel-2.6.18-8.1.8.el5.ppc64.rpm
s390x:
52b735abcc9ece904b64dc64d43e2d4a kernel-2.6.18-8.1.8.el5.s390x.rpm
b6eca7d81e3b4797cc887ca1ba70ac6b kernel-debuginfo-2.6.18-8.1.8.el5.s390x.rpm
b9e1591ae65451849cfaf913e522f23b kernel-debuginfo-common-2.6.18-8.1.8.el5.s390x.rpm
2670a4156ec41e85c8b1fed153856cce kernel-devel-2.6.18-8.1.8.el5.s390x.rpm
fb7e7eadd1ca1cb7587c20b159c8ffe2 kernel-headers-2.6.18-8.1.8.el5.s390x.rpm
x86_64:
030ea917650057deafe66c292d7ab56d kernel-2.6.18-8.1.8.el5.x86_64.rpm
f856112851f7e639715388313e5fbe74 kernel-debuginfo-2.6.18-8.1.8.el5.x86_64.rpm
e935ebd99d2308b02c296653816eed07 kernel-debuginfo-common-2.6.18-8.1.8.el5.x86_64.rpm
081997d16bf02e9ea9ed70644cb09676 kernel-devel-2.6.18-8.1.8.el5.x86_64.rpm
abb52e09d47b6810e595d400530a7610 kernel-headers-2.6.18-8.1.8.el5.x86_64.rpm
aa4d7fb67b3578c13ee304bcbb54c304 kernel-xen-2.6.18-8.1.8.el5.x86_64.rpm
4f9ff59c4d4d4b314d38c8f7ab245636 kernel-xen-debuginfo-2.6.18-8.1.8.el5.x86_64.rpm
7a6a9de800775c5b96051bf207a96ea5 kernel-xen-devel-2.6.18-8.1.8.el5.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3107
http://www.redhat.com/security/updates/classification/#moderate
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2007 Red Hat, Inc.
