Red Hat Enterprise Linux 4.8: RHSA-2009-1024-01 Important Security Update
red hat
May 18, 2009
Updated kernel packages are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 4
Solution
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
Summary
The kernel packages contain the Linux kernel, the core of any Linux
operating system.
Security Fixes:
* the exit_notify() function in the Linux kernel did not properly reset the
exit signal if a process executed a set user ID (setuid) application before
exiting. This could allow a local, unprivileged user to elevate their
privileges. (CVE-2009-1337, Important)
* the Linux kernel implementation of the Network File System (NFS) did not
properly initialize the file name limit in the nfs_server data structure.
This flaw could possibly lead to a denial of service on a client mounting
an NFS share. (CVE-2009-1336, Moderate)
Bug Fixes and Enhancements:
Kernel Feature Support:
* added a new allowable value to "/proc/sys/kernel/wake_balance" to allow
the scheduler to run the thread on any available CPU rather than scheduling
it on the optimal CPU.
* added "max_writeback_pages" tunable parameter to /proc/sys/vm/ to allow
the maximum number of modified pages kupdate writes to disk, per iteration
per run.
* added "swap_token_timeout" tunable parameter to /proc/sys/vm/ to provide
a valid hold time for the swap out protection token.
* added diskdump support to sata_svw driver.
* limited physical memory to 64GB for 32-bit kernels running on systems
with more than 64GB of physical memory to prevent boot failures.
* improved reliability of autofs.
* added support for 'rdattr_error' in NFSv4 readdir requests.
* fixed various short packet handling issues for NFSv4 readdir and sunrpc.
* fixed several CIFS bugs.
Networking and IPv6 Enablement:
* added router solicitation support.
* enforced sg requires tx csum in ethtool.
Platform Support:
x86, AMD64, Intel 64, IBM System z
* added support for a new Intel chipset.
* added initialization vendor info in boot_cpu_data.
* added support for N_Port ID Virtualization (NPIV) for IBM System z guests
using zFCP.
* added HDMI support for some AMD and ATI chipsets.
* updated HDA driver in ALSA to latest upstream as of 2008-07-22.
* added support for affected_cpus for cpufreq.
* removed polling timer from i8042.
* fixed PM-Timer when using the ASUS A8V Deluxe motherboard.
* backported usbfs_mutex in usbfs.
64-bit PowerPC:
* updated eHEA driver from version 0078-04 to 0078-08.
* updated logging of checksum errors in the eHEA driver.
Network Driver Updates:
* updated forcedeth driver to latest upstream version 0.61.
* fixed various e1000 issues when using Intel ESB2 hardware.
* updated e1000e driver to upstream version 0.3.3.3-k6.
* updated igb to upstream version 1.2.45-k2.
* updated tg3 to upstream version 3.96.
* updated ixgbe to upstream version 1.3.18-k4.
* updated bnx2 to upstream version 1.7.9.
* updated bnx2x to upstream version 1.45.23.
* fixed bugs and added enhancements for the NetXen NX2031 and NX3031
products.
* updated Realtek r8169 driver to support newer network chipsets. All
variants of RTL810x/RTL8168(9) are now supported.
Storage Driver Updates:
* fixed various SCSI issues. Also, the SCSI sd driver now calls the
revalidate_disk wrapper.
* fixed a dmraid reduced I/O delay bug in certain configurations.
* removed quirk aac_quirk_scsi_32 for some aacraid controllers.
* updated FCP driver on IBM System z systems with support for
point-to-point connections.
* updated lpfc to version 8.0.16.46.
* updated megaraid_sas to version 4.01-RH1.
* updated MPT Fusion driver to version 3.12.29.00rh.
* updated qla2xxx firmware to 4.06.01 for 4GB/s and 8GB/s adapters.
* updated qla2xxx driver to version 8.02.09.00.04.08-d.
* fixed sata_nv in libsata to disable ADMA mode by default.
Miscellaneous Updates:
* upgraded OpenFabrics Alliance Enterprise Distribution (OFED) to version
1.4.
* added driver support and fixes for various Wacom tablets.
Users should install this update, which resolves these issues and adds
these enhancements.
References
https://www.cve.org/CVERecord?id=CVE-2009-1336 https://www.cve.org/CVERecord?id=CVE-2009-1337 https://access.redhat.com/security/updates/classification#important https://docs.redhat.com/en
Package List
Red Hat Enterprise Linux AS version 4:
Source:
i386:
kernel-2.6.9-89.EL.i686.rpm
kernel-debuginfo-2.6.9-89.EL.i686.rpm
kernel-devel-2.6.9-89.EL.i686.rpm
kernel-hugemem-2.6.9-89.EL.i686.rpm
kernel-hugemem-devel-2.6.9-89.EL.i686.rpm
kernel-smp-2.6.9-89.EL.i686.rpm
kernel-smp-devel-2.6.9-89.EL.i686.rpm
kernel-xenU-2.6.9-89.EL.i686.rpm
kernel-xenU-devel-2.6.9-89.EL.i686.rpm
ia64:
kernel-2.6.9-89.EL.ia64.rpm
kernel-debuginfo-2.6.9-89.EL.ia64.rpm
kernel-devel-2.6.9-89.EL.ia64.rpm
kernel-largesmp-2.6.9-89.EL.ia64.rpm
kernel-largesmp-devel-2.6.9-89.EL.ia64.rpm
noarch:
kernel-doc-2.6.9-89.EL.noarch.rpm
ppc:
kernel-2.6.9-89.EL.ppc64.rpm
kernel-2.6.9-89.EL.ppc64iseries.rpm
kernel-debuginfo-2.6.9-89.EL.ppc64.rpm
kernel-debuginfo-2.6.9-89.EL.ppc64iseries.rpm
kernel-devel-2.6.9-89.EL.ppc64.rpm
kernel-devel-2.6.9-89.EL.ppc64iseries.rpm
kernel-largesmp-2.6.9-89.EL.ppc64.rpm
kernel-largesmp-devel-2.6.9-89.EL.ppc64.rpm
s390:
kernel-2.6.9-89.EL.s390.rpm
kernel-debuginfo-2.6.9-89.EL.s390.rpm
kernel-devel-2.6.9-89.EL.s390.rpm
s390x:
kernel-2.6.9-89.EL.s390x.rpm
kernel-debuginfo-2.6.9-89.EL.s390x.rpm
kernel-devel-2.6.9-89.EL.s390x.rpm
x86_64:
kernel-2.6.9-89.EL.x86_64.rpm
kernel-debuginfo-2.6.9-89.EL.x86_64.rpm
kernel-devel-2.6.9-89.EL.x86_64.rpm
Read the Full Advisory
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Advisory ID: RHSA-2009:1024-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2009:1024.html
Issue date: 2009-05-18
Keywords: nahant kernel update
Obsoletes: RHSA-2008:0665-13
Topic
Updated kernel packages are now available as part of the ongoing supportand maintenance of Red Hat Enterprise Linux version 4. This is the eighthregular update.These updated packages fix two security issues, hundreds of bugs, and addnumerous enhancements. Space precludes a detailed description of each ofthese in this advisory. Refer to the Red Hat Enterprise Linux 4.8 ReleaseNotes for information on 22 of the most significant of these changes. Formore detailed information on specific bug fixes or enhancements, refer tothe Bugzilla numbers associated with this advisory.This update has been rated as having important security impact by the RedHat Security Response Team.
Relevant Releases Architectures
Red Hat Enterprise Linux AS version 4 - i386, ia64, noarch, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux Desktop version 4 - i386, noarch, x86_64
Red Hat Enterprise Linux ES version 4 - i386, ia64, noarch, x86_64
Red Hat Enterprise Linux WS version 4 - i386, ia64, noarch, x86_64
Bugs Fixed
161590 - sr_get_mcn: check for kmalloc failure
161594 - drivers/scsi/sg.c: fix check after use
169129 - remove tape during error handling -> "illegal state transition"
175189 - Debug: sleeping function called from invalid context at include/linux/rwsem.h:43
175830 - dm-snap.c: Data read from snapshot may be corrupt if origin is being written to simultaneously
182687 - lm_sensors fails with piix4_smbus errors on ServerWorks Grand Champion SL/w83781d
183651 - sd data corrupter
185585 - Hangs when registering modules to handle ioctls in kernel compatibility mode
191764 - [PATCH] Don't match tcp/udp source/destination port for IP fragments
191767 - [PATCH] NET: Ensure device name passed to SO_BINDTODEVICE is NULL terminated.
191770 - [PATCH] Netfilter ip_queue: Fix wrong skb->len == nlmsg_len assumption
191777 - [PATCH] Fix deadlock in br_stp_disable_bridge
191797 - [PATCH] Fix extra dst release when ip_options_echo fails
203235 - PMTimer doesn't get detected in an Asus A8V Deluxe motherboard
243067 - Kernel panic using USB serial I/O
248666 - Serious problems during the diskdump, can cause the machine to hang and not reboot.
249775 - Request to backport zFCP NPIV support to RHEL 4
249867 - Kernel can BUG() in low memory conditions
253754 - use after free in nlm subsystem
294821 - RHEL4.5: PM Timer appears in top-level make menuconfig
298811 - pci_alloc_consistent() for 64k on 16gig machine -> return value is not multiple of 64k
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!