-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

====================================================================                   Red Hat Security Advisory

Synopsis:          Important: kernel security update
Advisory ID:       RHSA-2016:2076-01
Product:           Red Hat Enterprise Linux
Advisory URL:      https://access.redhat.com/errata/RHSA-2016:2076.html
Issue date:        2016-10-18
CVE Names:         CVE-2016-4470 
====================================================================
1. Summary:

An update for kernel is now available for Red Hat Enterprise Linux 6.7
Extended Update Support.

Red Hat Product Security has rated this update as having a security impact
of Important. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available for each vulnerability
from the CVE link(s) in the References section.

2. Relevant releases/architectures:

Red Hat Enterprise Linux HPC Node EUS (v. 6.7) - noarch, x86_64
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) - x86_64
Red Hat Enterprise Linux Server EUS (v. 6.7) - i386, noarch, ppc64, s390x, x86_64
Red Hat Enterprise Linux Server Optional EUS (v. 6.7) - i386, ppc64, s390x, x86_64

3. Description:

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security Fix(es):

* A flaw was found in the Linux kernel's keyring handling code, where in
key_reject_and_link() an uninitialized variable would eventually lead to
arbitrary free address which could allow attacker to use a use-after-free
style attack. (CVE-2016-4470, Important)

This issue was discovered by David Howells (Red Hat Inc.).

4. Solution:

For details on how to apply this update, which includes the changes
described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

5. Bugs fixed (https://bugzilla.redhat.com/):

1341716 - CVE-2016-4470 kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path

6. Package List:

Red Hat Enterprise Linux HPC Node EUS (v. 6.7):

Source:
kernel-2.6.32-573.35.1.el6.src.rpm

noarch:
kernel-abi-whitelists-2.6.32-573.35.1.el6.noarch.rpm
kernel-doc-2.6.32-573.35.1.el6.noarch.rpm
kernel-firmware-2.6.32-573.35.1.el6.noarch.rpm

x86_64:
kernel-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debug-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debug-debuginfo-2.6.32-573.35.1.el6.i686.rpm
kernel-debug-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debug-devel-2.6.32-573.35.1.el6.i686.rpm
kernel-debug-devel-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.i686.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debuginfo-common-i686-2.6.32-573.35.1.el6.i686.rpm
kernel-debuginfo-common-x86_64-2.6.32-573.35.1.el6.x86_64.rpm
kernel-devel-2.6.32-573.35.1.el6.x86_64.rpm
kernel-headers-2.6.32-573.35.1.el6.x86_64.rpm
perf-2.6.32-573.35.1.el6.x86_64.rpm
perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm
perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm

Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7):

x86_64:
kernel-debug-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debuginfo-common-x86_64-2.6.32-573.35.1.el6.x86_64.rpm
perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
python-perf-2.6.32-573.35.1.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm

Red Hat Enterprise Linux Server EUS (v. 6.7):

Source:
kernel-2.6.32-573.35.1.el6.src.rpm

i386:
kernel-2.6.32-573.35.1.el6.i686.rpm
kernel-debug-2.6.32-573.35.1.el6.i686.rpm
kernel-debug-debuginfo-2.6.32-573.35.1.el6.i686.rpm
kernel-debug-devel-2.6.32-573.35.1.el6.i686.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.i686.rpm
kernel-debuginfo-common-i686-2.6.32-573.35.1.el6.i686.rpm
kernel-devel-2.6.32-573.35.1.el6.i686.rpm
kernel-headers-2.6.32-573.35.1.el6.i686.rpm
perf-2.6.32-573.35.1.el6.i686.rpm
perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm

noarch:
kernel-abi-whitelists-2.6.32-573.35.1.el6.noarch.rpm
kernel-doc-2.6.32-573.35.1.el6.noarch.rpm
kernel-firmware-2.6.32-573.35.1.el6.noarch.rpm

ppc64:
kernel-2.6.32-573.35.1.el6.ppc64.rpm
kernel-bootwrapper-2.6.32-573.35.1.el6.ppc64.rpm
kernel-debug-2.6.32-573.35.1.el6.ppc64.rpm
kernel-debug-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm
kernel-debug-devel-2.6.32-573.35.1.el6.ppc64.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm
kernel-debuginfo-common-ppc64-2.6.32-573.35.1.el6.ppc64.rpm
kernel-devel-2.6.32-573.35.1.el6.ppc64.rpm
kernel-headers-2.6.32-573.35.1.el6.ppc64.rpm
perf-2.6.32-573.35.1.el6.ppc64.rpm
perf-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm

s390x:
kernel-2.6.32-573.35.1.el6.s390x.rpm
kernel-debug-2.6.32-573.35.1.el6.s390x.rpm
kernel-debug-debuginfo-2.6.32-573.35.1.el6.s390x.rpm
kernel-debug-devel-2.6.32-573.35.1.el6.s390x.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.s390x.rpm
kernel-debuginfo-common-s390x-2.6.32-573.35.1.el6.s390x.rpm
kernel-devel-2.6.32-573.35.1.el6.s390x.rpm
kernel-headers-2.6.32-573.35.1.el6.s390x.rpm
kernel-kdump-2.6.32-573.35.1.el6.s390x.rpm
kernel-kdump-debuginfo-2.6.32-573.35.1.el6.s390x.rpm
kernel-kdump-devel-2.6.32-573.35.1.el6.s390x.rpm
perf-2.6.32-573.35.1.el6.s390x.rpm
perf-debuginfo-2.6.32-573.35.1.el6.s390x.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.s390x.rpm

x86_64:
kernel-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debug-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debug-debuginfo-2.6.32-573.35.1.el6.i686.rpm
kernel-debug-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debug-devel-2.6.32-573.35.1.el6.i686.rpm
kernel-debug-devel-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.i686.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debuginfo-common-i686-2.6.32-573.35.1.el6.i686.rpm
kernel-debuginfo-common-x86_64-2.6.32-573.35.1.el6.x86_64.rpm
kernel-devel-2.6.32-573.35.1.el6.x86_64.rpm
kernel-headers-2.6.32-573.35.1.el6.x86_64.rpm
perf-2.6.32-573.35.1.el6.x86_64.rpm
perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm
perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm

Red Hat Enterprise Linux Server Optional EUS (v. 6.7):

i386:
kernel-debug-debuginfo-2.6.32-573.35.1.el6.i686.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.i686.rpm
kernel-debuginfo-common-i686-2.6.32-573.35.1.el6.i686.rpm
perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm
python-perf-2.6.32-573.35.1.el6.i686.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm

ppc64:
kernel-debug-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm
kernel-debuginfo-common-ppc64-2.6.32-573.35.1.el6.ppc64.rpm
perf-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm
python-perf-2.6.32-573.35.1.el6.ppc64.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm

s390x:
kernel-debug-debuginfo-2.6.32-573.35.1.el6.s390x.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.s390x.rpm
kernel-debuginfo-common-s390x-2.6.32-573.35.1.el6.s390x.rpm
kernel-kdump-debuginfo-2.6.32-573.35.1.el6.s390x.rpm
perf-debuginfo-2.6.32-573.35.1.el6.s390x.rpm
python-perf-2.6.32-573.35.1.el6.s390x.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.s390x.rpm

x86_64:
kernel-debug-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
kernel-debuginfo-common-x86_64-2.6.32-573.35.1.el6.x86_64.rpm
perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
python-perf-2.6.32-573.35.1.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and
details on how to verify the signature are available from
https://access.redhat.com/security/team/key/

7. References:

https://access.redhat.com/security/cve/CVE-2016-4470
https://access.redhat.com/security/updates/classification/#important

8. Contact:

The Red Hat security contact is . More contact
details at https://access.redhat.com/security/team/contact/

Copyright 2016 Red Hat, Inc.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iD8DBQFYBmzyXlSAg2UNWIIRAmMAAJwJ9jVdz3i/NG5+eL+yTpGTopxIwgCeLTwc
8HqGcTiiy71cGkJ2URvuecU=iAGx
-----END PGP SIGNATURE-----


-- 
Enterprise-watch-list mailing list
Enterprise-watch-list@redhat.com
https://www.redhat.com/mailman/listinfo/enterprise-watch-list

RedHat: RHSA-2016-2076:01 Important: kernel security update

An update for kernel is now available for Red Hat Enterprise Linux 6.7 Extended Update Support

Summary

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* A flaw was found in the Linux kernel's keyring handling code, where in key_reject_and_link() an uninitialized variable would eventually lead to arbitrary free address which could allow attacker to use a use-after-free style attack. (CVE-2016-4470, Important)
This issue was discovered by David Howells (Red Hat Inc.).



Summary


Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.

References

https://access.redhat.com/security/cve/CVE-2016-4470 https://access.redhat.com/security/updates/classification/#important

Package List

Red Hat Enterprise Linux HPC Node EUS (v. 6.7):
Source: kernel-2.6.32-573.35.1.el6.src.rpm
noarch: kernel-abi-whitelists-2.6.32-573.35.1.el6.noarch.rpm kernel-doc-2.6.32-573.35.1.el6.noarch.rpm kernel-firmware-2.6.32-573.35.1.el6.noarch.rpm
x86_64: kernel-2.6.32-573.35.1.el6.x86_64.rpm kernel-debug-2.6.32-573.35.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-573.35.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-573.35.1.el6.i686.rpm kernel-debug-devel-2.6.32-573.35.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-573.35.1.el6.i686.rpm kernel-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-573.35.1.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-573.35.1.el6.x86_64.rpm kernel-devel-2.6.32-573.35.1.el6.x86_64.rpm kernel-headers-2.6.32-573.35.1.el6.x86_64.rpm perf-2.6.32-573.35.1.el6.x86_64.rpm perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7):
x86_64: kernel-debug-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-573.35.1.el6.x86_64.rpm perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm python-perf-2.6.32-573.35.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
Red Hat Enterprise Linux Server EUS (v. 6.7):
Source: kernel-2.6.32-573.35.1.el6.src.rpm
i386: kernel-2.6.32-573.35.1.el6.i686.rpm kernel-debug-2.6.32-573.35.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-573.35.1.el6.i686.rpm kernel-debug-devel-2.6.32-573.35.1.el6.i686.rpm kernel-debuginfo-2.6.32-573.35.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-573.35.1.el6.i686.rpm kernel-devel-2.6.32-573.35.1.el6.i686.rpm kernel-headers-2.6.32-573.35.1.el6.i686.rpm perf-2.6.32-573.35.1.el6.i686.rpm perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm
noarch: kernel-abi-whitelists-2.6.32-573.35.1.el6.noarch.rpm kernel-doc-2.6.32-573.35.1.el6.noarch.rpm kernel-firmware-2.6.32-573.35.1.el6.noarch.rpm
ppc64: kernel-2.6.32-573.35.1.el6.ppc64.rpm kernel-bootwrapper-2.6.32-573.35.1.el6.ppc64.rpm kernel-debug-2.6.32-573.35.1.el6.ppc64.rpm kernel-debug-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm kernel-debug-devel-2.6.32-573.35.1.el6.ppc64.rpm kernel-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm kernel-debuginfo-common-ppc64-2.6.32-573.35.1.el6.ppc64.rpm kernel-devel-2.6.32-573.35.1.el6.ppc64.rpm kernel-headers-2.6.32-573.35.1.el6.ppc64.rpm perf-2.6.32-573.35.1.el6.ppc64.rpm perf-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm
s390x: kernel-2.6.32-573.35.1.el6.s390x.rpm kernel-debug-2.6.32-573.35.1.el6.s390x.rpm kernel-debug-debuginfo-2.6.32-573.35.1.el6.s390x.rpm kernel-debug-devel-2.6.32-573.35.1.el6.s390x.rpm kernel-debuginfo-2.6.32-573.35.1.el6.s390x.rpm kernel-debuginfo-common-s390x-2.6.32-573.35.1.el6.s390x.rpm kernel-devel-2.6.32-573.35.1.el6.s390x.rpm kernel-headers-2.6.32-573.35.1.el6.s390x.rpm kernel-kdump-2.6.32-573.35.1.el6.s390x.rpm kernel-kdump-debuginfo-2.6.32-573.35.1.el6.s390x.rpm kernel-kdump-devel-2.6.32-573.35.1.el6.s390x.rpm perf-2.6.32-573.35.1.el6.s390x.rpm perf-debuginfo-2.6.32-573.35.1.el6.s390x.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.s390x.rpm
x86_64: kernel-2.6.32-573.35.1.el6.x86_64.rpm kernel-debug-2.6.32-573.35.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-573.35.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-573.35.1.el6.i686.rpm kernel-debug-devel-2.6.32-573.35.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-573.35.1.el6.i686.rpm kernel-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-573.35.1.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-573.35.1.el6.x86_64.rpm kernel-devel-2.6.32-573.35.1.el6.x86_64.rpm kernel-headers-2.6.32-573.35.1.el6.x86_64.rpm perf-2.6.32-573.35.1.el6.x86_64.rpm perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
Red Hat Enterprise Linux Server Optional EUS (v. 6.7):
i386: kernel-debug-debuginfo-2.6.32-573.35.1.el6.i686.rpm kernel-debuginfo-2.6.32-573.35.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-573.35.1.el6.i686.rpm perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm python-perf-2.6.32-573.35.1.el6.i686.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.i686.rpm
ppc64: kernel-debug-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm kernel-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm kernel-debuginfo-common-ppc64-2.6.32-573.35.1.el6.ppc64.rpm perf-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm python-perf-2.6.32-573.35.1.el6.ppc64.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.ppc64.rpm
s390x: kernel-debug-debuginfo-2.6.32-573.35.1.el6.s390x.rpm kernel-debuginfo-2.6.32-573.35.1.el6.s390x.rpm kernel-debuginfo-common-s390x-2.6.32-573.35.1.el6.s390x.rpm kernel-kdump-debuginfo-2.6.32-573.35.1.el6.s390x.rpm perf-debuginfo-2.6.32-573.35.1.el6.s390x.rpm python-perf-2.6.32-573.35.1.el6.s390x.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.s390x.rpm
x86_64: kernel-debug-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-573.35.1.el6.x86_64.rpm perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm python-perf-2.6.32-573.35.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-573.35.1.el6.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/


Severity
Advisory ID: RHSA-2016:2076-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2016:2076.html
Issued Date: : 2016-10-18
CVE Names: CVE-2016-4470

Topic

An update for kernel is now available for Red Hat Enterprise Linux 6.7Extended Update Support.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.


Topic


 

Relevant Releases Architectures

Red Hat Enterprise Linux HPC Node EUS (v. 6.7) - noarch, x86_64

Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) - x86_64

Red Hat Enterprise Linux Server EUS (v. 6.7) - i386, noarch, ppc64, s390x, x86_64

Red Hat Enterprise Linux Server Optional EUS (v. 6.7) - i386, ppc64, s390x, x86_64


Bugs Fixed

1341716 - CVE-2016-4470 kernel: Uninitialized variable in request_key handling causes kernel crash in error handling path


Related News

28.Lock Globe Esm H320
1 - 2 min read
The intersection of Linux and quantum computing has become increasingly apparent, emphasizing the importance of Linux-based operating systems in
6.EmailConnection Touch Esm H320
2 - 3 min read
Recent security updates for Ubuntu and Debian have been released to address vulnerabilities in Thunderbird, the popular open-source mail and
30.Lock Globe Motherboard Esm H320
1 - 2 min read
As cybersecurity practitioners, we are no strangers to the constant threat of malicious actors and the importance of remaining vigilant to protect
22.Lock ScreenEffect Esm H320
1 - 2 min read
EndeavorOS Gemini is a captivating and charming desktop operating system based on Arch Linux. The new release includes a kernel upgrade, 3D graphics
25.@Sign Hook Keyboard Esm H320
1 min read
Cyber risk is increasing for individuals and organizations, making flexible and robust solutions for identifying spam and malware increasingly
19.Laptop Bed Esm H320
2 - 3 min read
The recently released Linux Kernel 6.9 brings forth a blend of crucial upgrades and enhancements, catering to the ever-evolving needs of the Linux
4.Lock AbstractDigital Esm H320
1 - 2 min read
Nmap 7.95 introduces myriad enhancements, primarily focusing on OS and service detection signatures. This reflects the dedication of the Nmap
5.ShakingHands Esm H320
3 - 5 min read
There has been a promising shift in the tech industry, with major companies pledging to release products with built-in security features. This

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved