====================================================================                   Red Hat Security Advisory

Synopsis:          Moderate: GFS security and bug fix update
Advisory ID:       RHSA-2010:0330-01
Product:           Red Hat Global File System
Advisory URL:      https://access.redhat.com/errata/RHSA-2010:0330.html
Issue date:        2010-03-30
CVE Names:         CVE-2010-0727 
====================================================================
1. Summary:

Updated GFS packages that fix one security issue are now available for Red
Hat Enterprise Linux 3.9, kernel release 2.4.21-63.EL.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

2. Relevant releases/architectures:

Red Hat Global File System 3AS - i386, ia64, x86_64
Red Hat Global File System 3ES - i386, ia64, x86_64
Red Hat Global File System 3WS - i386, ia64, x86_64

3. Description:

The Red Hat Global File System (GFS) allows a cluster of Linux servers to
share data in a common pool of storage.

A flaw was found in the gfs_lock() implementation. The GFS locking code
could skip the lock operation for files that have the S_ISGID bit
(set-group-ID on execution) in their mode set. A local, unprivileged user
on a system that has a GFS file system mounted could use this flaw to cause
a kernel panic. (CVE-2010-0727)

As well, these updated GFS packages are in sync with the latest kernel
(2.4.21-63.EL). The modules in earlier GFS packages fail to load because
they do not match the running kernel. It is possible to force-load the
modules; however, with this update, force-loading the modules is not
required. (BZ#525198)

Users are advised to upgrade to these latest GFS packages, which resolve
this issue and are updated for use with the 2.4.21-63.EL kernel.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at

5. Bugs fixed (http://bugzilla.redhat.com/):

525198 - Need rebuild for 2.4.21-63.EL kernel
570863 - CVE-2010-0727 bug in GFS/GFS2 locking code leads to dos

6. Package List:

Red Hat Global File System 3AS:

Source:

i386:
GFS-6.0.2.36-13.i386.rpm
GFS-6.0.2.36-13.i686.rpm
GFS-debuginfo-6.0.2.36-13.i386.rpm
GFS-debuginfo-6.0.2.36-13.i686.rpm
GFS-devel-6.0.2.36-13.i386.rpm
GFS-devel-6.0.2.36-13.i686.rpm
GFS-modules-6.0.2.36-13.i386.rpm
GFS-modules-6.0.2.36-13.i686.rpm
GFS-modules-hugemem-6.0.2.36-13.i686.rpm
GFS-modules-smp-6.0.2.36-13.i686.rpm

ia64:
GFS-6.0.2.36-13.ia64.rpm
GFS-debuginfo-6.0.2.36-13.ia64.rpm
GFS-devel-6.0.2.36-13.ia64.rpm
GFS-modules-6.0.2.36-13.ia64.rpm

x86_64:
GFS-6.0.2.36-13.ia32e.rpm
GFS-6.0.2.36-13.x86_64.rpm
GFS-debuginfo-6.0.2.36-13.ia32e.rpm
GFS-debuginfo-6.0.2.36-13.x86_64.rpm
GFS-devel-6.0.2.36-13.ia32e.rpm
GFS-devel-6.0.2.36-13.x86_64.rpm
GFS-modules-6.0.2.36-13.ia32e.rpm
GFS-modules-6.0.2.36-13.x86_64.rpm
GFS-modules-smp-6.0.2.36-13.x86_64.rpm

Red Hat Global File System 3ES:

Source:

i386:
GFS-6.0.2.36-13.i386.rpm
GFS-6.0.2.36-13.i686.rpm
GFS-debuginfo-6.0.2.36-13.i386.rpm
GFS-debuginfo-6.0.2.36-13.i686.rpm
GFS-devel-6.0.2.36-13.i386.rpm
GFS-devel-6.0.2.36-13.i686.rpm
GFS-modules-6.0.2.36-13.i386.rpm
GFS-modules-6.0.2.36-13.i686.rpm
GFS-modules-hugemem-6.0.2.36-13.i686.rpm
GFS-modules-smp-6.0.2.36-13.i686.rpm

ia64:
GFS-6.0.2.36-13.ia64.rpm
GFS-debuginfo-6.0.2.36-13.ia64.rpm
GFS-devel-6.0.2.36-13.ia64.rpm
GFS-modules-6.0.2.36-13.ia64.rpm

x86_64:
GFS-6.0.2.36-13.ia32e.rpm
GFS-6.0.2.36-13.x86_64.rpm
GFS-debuginfo-6.0.2.36-13.ia32e.rpm
GFS-debuginfo-6.0.2.36-13.x86_64.rpm
GFS-devel-6.0.2.36-13.ia32e.rpm
GFS-devel-6.0.2.36-13.x86_64.rpm
GFS-modules-6.0.2.36-13.ia32e.rpm
GFS-modules-6.0.2.36-13.x86_64.rpm
GFS-modules-smp-6.0.2.36-13.x86_64.rpm

Red Hat Global File System 3WS:

Source:

i386:
GFS-6.0.2.36-13.i386.rpm
GFS-6.0.2.36-13.i686.rpm
GFS-debuginfo-6.0.2.36-13.i386.rpm
GFS-debuginfo-6.0.2.36-13.i686.rpm
GFS-devel-6.0.2.36-13.i386.rpm
GFS-devel-6.0.2.36-13.i686.rpm
GFS-modules-6.0.2.36-13.i386.rpm
GFS-modules-6.0.2.36-13.i686.rpm
GFS-modules-hugemem-6.0.2.36-13.i686.rpm
GFS-modules-smp-6.0.2.36-13.i686.rpm

ia64:
GFS-6.0.2.36-13.ia64.rpm
GFS-debuginfo-6.0.2.36-13.ia64.rpm
GFS-devel-6.0.2.36-13.ia64.rpm
GFS-modules-6.0.2.36-13.ia64.rpm

x86_64:
GFS-6.0.2.36-13.ia32e.rpm
GFS-6.0.2.36-13.x86_64.rpm
GFS-debuginfo-6.0.2.36-13.ia32e.rpm
GFS-debuginfo-6.0.2.36-13.x86_64.rpm
GFS-devel-6.0.2.36-13.ia32e.rpm
GFS-devel-6.0.2.36-13.x86_64.rpm
GFS-modules-6.0.2.36-13.ia32e.rpm
GFS-modules-6.0.2.36-13.x86_64.rpm
GFS-modules-smp-6.0.2.36-13.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and 
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2010-0727.html
http://www.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is .  More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2010 Red Hat, Inc.

Red Hat: 2010:0330-01: GFS: Moderate Advisory

Updated GFS packages that fix one security issue are now available for Red Hat Enterprise Linux 3.9, kernel release 2.4.21-63.EL

Summary

The Red Hat Global File System (GFS) allows a cluster of Linux servers to share data in a common pool of storage.
A flaw was found in the gfs_lock() implementation. The GFS locking code could skip the lock operation for files that have the S_ISGID bit (set-group-ID on execution) in their mode set. A local, unprivileged user on a system that has a GFS file system mounted could use this flaw to cause a kernel panic. (CVE-2010-0727)
As well, these updated GFS packages are in sync with the latest kernel (2.4.21-63.EL). The modules in earlier GFS packages fail to load because they do not match the running kernel. It is possible to force-load the modules; however, with this update, force-loading the modules is not required. (BZ#525198)
Users are advised to upgrade to these latest GFS packages, which resolve this issue and are updated for use with the 2.4.21-63.EL kernel.



Summary


Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at

References

https://www.redhat.com/security/data/cve/CVE-2010-0727.html http://www.redhat.com/security/updates/classification/#moderate

Package List

Red Hat Global File System 3AS:
Source:
i386: GFS-6.0.2.36-13.i386.rpm GFS-6.0.2.36-13.i686.rpm GFS-debuginfo-6.0.2.36-13.i386.rpm GFS-debuginfo-6.0.2.36-13.i686.rpm GFS-devel-6.0.2.36-13.i386.rpm GFS-devel-6.0.2.36-13.i686.rpm GFS-modules-6.0.2.36-13.i386.rpm GFS-modules-6.0.2.36-13.i686.rpm GFS-modules-hugemem-6.0.2.36-13.i686.rpm GFS-modules-smp-6.0.2.36-13.i686.rpm
ia64: GFS-6.0.2.36-13.ia64.rpm GFS-debuginfo-6.0.2.36-13.ia64.rpm GFS-devel-6.0.2.36-13.ia64.rpm GFS-modules-6.0.2.36-13.ia64.rpm
x86_64: GFS-6.0.2.36-13.ia32e.rpm GFS-6.0.2.36-13.x86_64.rpm GFS-debuginfo-6.0.2.36-13.ia32e.rpm GFS-debuginfo-6.0.2.36-13.x86_64.rpm GFS-devel-6.0.2.36-13.ia32e.rpm GFS-devel-6.0.2.36-13.x86_64.rpm GFS-modules-6.0.2.36-13.ia32e.rpm GFS-modules-6.0.2.36-13.x86_64.rpm GFS-modules-smp-6.0.2.36-13.x86_64.rpm
Red Hat Global File System 3ES:
Source:
i386: GFS-6.0.2.36-13.i386.rpm GFS-6.0.2.36-13.i686.rpm GFS-debuginfo-6.0.2.36-13.i386.rpm GFS-debuginfo-6.0.2.36-13.i686.rpm GFS-devel-6.0.2.36-13.i386.rpm GFS-devel-6.0.2.36-13.i686.rpm GFS-modules-6.0.2.36-13.i386.rpm GFS-modules-6.0.2.36-13.i686.rpm GFS-modules-hugemem-6.0.2.36-13.i686.rpm GFS-modules-smp-6.0.2.36-13.i686.rpm
ia64: GFS-6.0.2.36-13.ia64.rpm GFS-debuginfo-6.0.2.36-13.ia64.rpm GFS-devel-6.0.2.36-13.ia64.rpm GFS-modules-6.0.2.36-13.ia64.rpm
x86_64: GFS-6.0.2.36-13.ia32e.rpm GFS-6.0.2.36-13.x86_64.rpm GFS-debuginfo-6.0.2.36-13.ia32e.rpm GFS-debuginfo-6.0.2.36-13.x86_64.rpm GFS-devel-6.0.2.36-13.ia32e.rpm GFS-devel-6.0.2.36-13.x86_64.rpm GFS-modules-6.0.2.36-13.ia32e.rpm GFS-modules-6.0.2.36-13.x86_64.rpm GFS-modules-smp-6.0.2.36-13.x86_64.rpm
Red Hat Global File System 3WS:
Source:
i386: GFS-6.0.2.36-13.i386.rpm GFS-6.0.2.36-13.i686.rpm GFS-debuginfo-6.0.2.36-13.i386.rpm GFS-debuginfo-6.0.2.36-13.i686.rpm GFS-devel-6.0.2.36-13.i386.rpm GFS-devel-6.0.2.36-13.i686.rpm GFS-modules-6.0.2.36-13.i386.rpm GFS-modules-6.0.2.36-13.i686.rpm GFS-modules-hugemem-6.0.2.36-13.i686.rpm GFS-modules-smp-6.0.2.36-13.i686.rpm
ia64: GFS-6.0.2.36-13.ia64.rpm GFS-debuginfo-6.0.2.36-13.ia64.rpm GFS-devel-6.0.2.36-13.ia64.rpm GFS-modules-6.0.2.36-13.ia64.rpm
x86_64: GFS-6.0.2.36-13.ia32e.rpm GFS-6.0.2.36-13.x86_64.rpm GFS-debuginfo-6.0.2.36-13.ia32e.rpm GFS-debuginfo-6.0.2.36-13.x86_64.rpm GFS-devel-6.0.2.36-13.ia32e.rpm GFS-devel-6.0.2.36-13.x86_64.rpm GFS-modules-6.0.2.36-13.ia32e.rpm GFS-modules-6.0.2.36-13.x86_64.rpm GFS-modules-smp-6.0.2.36-13.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://www.redhat.com/security/team/key/#package


Severity
Advisory ID: RHSA-2010:0330-01
Product: Red Hat Global File System
Advisory URL: https://access.redhat.com/errata/RHSA-2010:0330.html
Issued Date: : 2010-03-30
CVE Names: CVE-2010-0727

Topic

Updated GFS packages that fix one security issue are now available for RedHat Enterprise Linux 3.9, kernel release 2.4.21-63.EL.The Red Hat Security Response Team has rated this update as having moderatesecurity impact. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available from the CVE link inthe References section.


Topic


 

Relevant Releases Architectures

Red Hat Global File System 3AS - i386, ia64, x86_64

Red Hat Global File System 3ES - i386, ia64, x86_64

Red Hat Global File System 3WS - i386, ia64, x86_64


Bugs Fixed

525198 - Need rebuild for 2.4.21-63.EL kernel

570863 - CVE-2010-0727 bug in GFS/GFS2 locking code leads to dos


Related News

Defending Against Remote Code Execution in Google Chrome: A Critical Update
2 - 3 min read
Google Chrome, a widely used web browser, serves millions of internet users by connecting them to the online world. Unfortunately, severe
Navigating the Linux Kernel
2 - 4 min read
The Linux operating system, widely acclaimed for its robustness and security , recently received widespread media attention due to a significant
Staying a Step Ahead of Adversaries: Mitigating Chromium
2 - 4 min read
Google Chrome, one of the world's most widely used web browsers, has recently been scrutinized due to the discovery of multiple Chromium
Unmasking Cicada3301: Examining the Threat of the New Rust-Based Ransomware
2 - 4 min read
Ransomware has long been a severe threat to organizations and admins alike. Recently, cybersecurity researchers discovered a new variant called
Buffer Overflow Exploits in Linux: Origins, Impact, and Countermeasures
3 - 6 min read
Buffer overflow vulnerabilities have long been one of the biggest headaches in computer security, especially on Linux operating systems that power
8 Expert-Recommended Security Practices to Fortify Your Linux Systems
4 - 8 min read
As a Linux admin or an infosec professional, you understand how the security landscape changes due to evolving threats, newly discovered
Open Source Strategies for Enhancing Security in Digital Business Operations
5 - 9 min read
Digital transformation, powered by the principles of open-source security , is vital for businesses looking to excel in today's technology-driven
Microsoft Update Mayhem: Rescuing Linux Dual-Boot Systems from Secure Boot Woes
2 - 4 min read
Microsoft's recent patch, intended to strengthen Secure Boot defenses, has resulted in an unexpected setback for Linux-Windows dual-boot setups

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved