Synopsis: Important: kernel security and bug fix update
Issue date: 2009-08-13
CVE Names: CVE-2009-1389 CVE-2009-1439 CVE-2009-1633
CVE-2009-1439 kernel: cifs: memory overwrite when saving
nativeFileSystem field during mount
CVE-2009-1633 kernel: cifs: fix potential buffer overruns when
converting unicode strings sent by server
CVE-2009-1389 kernel: r8169: fix crash when large packets are received
These updated packages fix the following security issues:
* Michael Tokarev reported a flaw in the Realtek r8169 Ethernet driver
in the Linux kernel. This driver allowed interfaces using this driver to
receive frames larger than what could be handled. This could lead to a
remote denial of service or code execution. (CVE-2009-1389, Important)
* a buffer overflow flaw was found in the CIFSTCon() function of the
Linux kernel Common Internet File System (CIFS) implementation. When
mounting a CIFS share, a malicious server could send an overly-long
string to the client, possibly leading to a denial of service or
privilege escalation on the client mounting the CIFS share.
(CVE-2009-1439, Important)
* several flaws were found in the way the Linux kernel CIFS
implementation handles Unicode strings. CIFS clients convert Unicode
strings sent by a server to their local character sets, and then write
those strings into memory. If a malicious server sent a long enough
string, it could write past the end of the target memory region and
corrupt other memory areas, possibly leading to a denial of service or
privilege escalation on the client mounting the CIFS share.
(CVE-2009-1633, Important)
These updated packages also fix the following bugs:
* when using network bonding in the "balance-tlb" or "balance-alb" mode,
the primary setting for the primary slave device was lost when said
device was brought down (ifdown). Bringing the slave interface back up
(ifup) did not restore the primary setting (the device was not made the
active slave). (BZ#507563)
* a bug in timer_interrupt() may have caused the system time to move up
to two days or more into the future, or to be delayed for several
minutes.This bug only affected Intel 64 and AMD64 systems that have the
High Precision Event Timer (HPET) enabled in the BIOS, and could have
caused problems for applications that require timing to be accurate.
(BZ#508835)
* a race condition was resolved in the Linux kernel block layer between
show_partition() and rescan_partitions(). This could have caused a NULL
pointer dereference in show_partition(), leading to a system crash
(kernel panic). This issue was most likely to occur on systems running
monitoring software that regularly scanned hard disk partitions, or from
repeatedly running commands that probe for partition information.
(BZ#512310)
* previously, the Stratus memory tracker missed certain modified pages.
With this update, information about the type of page (small page or
huge page) is passed to the Stratus memory tracker, which resolves this
issue. The fix for this issue does not affect systems that do not use
memory tracking. (BZ#513182)
* a bug may have caused a system crash when using the cciss driver, due
toan uninitialized kernel structure. A reported case of this issue
occurred after issuing consecutive SCSI TUR commands (sg_turs sends SCSI
test-unit-ready commands in a loop). (BZ#513189)
* a bug in the SCSI implementation caused "Aborted Command - internal
target failure" errors to be sent to Device-Mapper Multipath, without
retries, resulting in Device-Mapper Multipath marking the path as failed
and making a path group switch. With this update, all errors that return
a sense key in the SCSI mid layer (including "Aborted Command - internal
target failure") are retried. (BZ#514007)
The system must be rebooted for this update to take effect.
SL 4.x
SRPMS:
kernel-2.6.9-89.0.7.EL.src.rpm
i386:
kernel-2.6.9-89.0.7.EL.i686.rpm
kernel-devel-2.6.9-89.0.7.EL.i686.rpm
kernel-doc-2.6.9-89.0.7.EL.noarch.rpm
kernel-hugemem-2.6.9-89.0.7.EL.i686.rpm
kernel-hugemem-devel-2.6.9-89.0.7.EL.i686.rpm
kernel-smp-2.6.9-89.0.7.EL.i686.rpm
kernel-smp-devel-2.6.9-89.0.7.EL.i686.rpm
kernel-xenU-2.6.9-89.0.7.EL.i686.rpm
kernel-xenU-devel-2.6.9-89.0.7.EL.i686.rpm
Dependancies:
kernel-module-fuse-2.6.9-89.0.7.EL-2.7.3-1.SL.i686.rpm
kernel-module-fuse-2.6.9-89.0.7.ELhugemem-2.7.3-1.SL.i686.rpm
kernel-module-fuse-2.6.9-89.0.7.ELsmp-2.7.3-1.SL.i686.rpm
kernel-module-fuse-2.6.9-89.0.7.ELxenU-2.7.3-1.SL.i686.rpm
kernel-module-ipw3945-2.6.9-89.0.7.EL-1.1.0-1.SL4.i686.rpm
kernel-module-ipw3945-2.6.9-89.0.7.ELhugemem-1.1.0-1.SL4.i686.rpm
kernel-module-ipw3945-2.6.9-89.0.7.ELsmp-1.1.0-1.SL4.i686.rpm
kernel-module-ipw3945-2.6.9-89.0.7.ELxenU-1.1.0-1.SL4.i686.rpm
kernel-module-madwifi-2.6.9-89.0.7.EL-0.9.4-10.sl4.i686.rpm
kernel-module-madwifi-2.6.9-89.0.7.ELhugemem-0.9.4-10.sl4.i686.rpm
kernel-module-madwifi-2.6.9-89.0.7.ELsmp-0.9.4-10.sl4.i686.rpm
kernel-module-madwifi-hal-2.6.9-89.0.7.EL-0.9.4-10.sl4.i686.rpm
kernel-module-madwifi-hal-2.6.9-89.0.7.ELhugemem-0.9.4-10.sl4.i686.rpm
kernel-module-madwifi-hal-2.6.9-89.0.7.ELsmp-0.9.4-10.sl4.i686.rpm
kernel-module-ndiswrapper-2.6.9-89.0.7.EL-1.41-1.SL.i686.rpm
kernel-module-ndiswrapper-2.6.9-89.0.7.ELhugemem-1.41-1.SL.i686.rpm
kernel-module-ndiswrapper-2.6.9-89.0.7.ELsmp-1.41-1.SL.i686.rpm
kernel-module-ndiswrapper-2.6.9-89.0.7.ELxenU-1.41-1.SL.i686.rpm
kernel-module-openafs-2.6.9-89.0.7.EL-1.4.7-68.2.SL4.i686.rpm
kernel-module-openafs-2.6.9-89.0.7.ELhugemem-1.4.7-68.2.SL4.i686.rpm
kernel-module-openafs-2.6.9-89.0.7.ELsmp-1.4.7-68.2.SL4.i686.rpm
kernel-module-openafs-2.6.9-89.0.7.ELxenU-1.4.7-68.2.SL4.i686.rpm
kernel-module-r1000-2.6.9-89.0.7.EL-2.2-2.SL4x.i686.rpm
kernel-module-r1000-2.6.9-89.0.7.ELhugemem-2.2-2.SL4x.i686.rpm
kernel-module-r1000-2.6.9-89.0.7.ELsmp-2.2-2.SL4x.i686.rpm
kernel-module-r1000-2.6.9-89.0.7.ELxenU-2.2-2.SL4x.i686.rpm
kernel-module-squashfs-2.6.9-89.0.7.EL-3.1.2-3.i686.rpm
kernel-module-squashfs-2.6.9-89.0.7.ELhugemem-3.1.2-3.i686.rpm
kernel-module-squashfs-2.6.9-89.0.7.ELsmp-3.1.2-3.i686.rpm
kernel-module-squashfs-2.6.9-89.0.7.ELxenU-3.1.2-3.i686.rpm
kernel-module-unionfs-2.6.9-89.0.7.EL-1.1.5-3.i686.rpm
kernel-module-unionfs-2.6.9-89.0.7.ELsmp-1.1.5-3.i686.rpm
x86_64:
kernel-2.6.9-89.0.7.EL.x86_64.rpm
kernel-devel-2.6.9-89.0.7.EL.x86_64.rpm
kernel-doc-2.6.9-89.0.7.EL.noarch.rpm
kernel-largesmp-2.6.9-89.0.7.EL.x86_64.rpm
kernel-largesmp-devel-2.6.9-89.0.7.EL.x86_64.rpm
kernel-smp-2.6.9-89.0.7.EL.x86_64.rpm
kernel-smp-devel-2.6.9-89.0.7.EL.x86_64.rpm
kernel-xenU-2.6.9-89.0.7.EL.x86_64.rpm
kernel-xenU-devel-2.6.9-89.0.7.EL.x86_64.rpm
Dependancies:
kernel-module-fuse-2.6.9-89.0.7.EL-2.7.3-1.SL.x86_64.rpm
kernel-module-fuse-2.6.9-89.0.7.ELlargesmp-2.7.3-1.SL.x86_64.rpm
kernel-module-fuse-2.6.9-89.0.7.ELsmp-2.7.3-1.SL.x86_64.rpm
kernel-module-fuse-2.6.9-89.0.7.ELxenU-2.7.3-1.SL.x86_64.rpm
kernel-module-ipw3945-2.6.9-89.0.7.EL-1.1.0-1.SL4.x86_64.rpm
kernel-module-ipw3945-2.6.9-89.0.7.ELlargesmp-1.1.0-1.SL4.x86_64.rpm
kernel-module-ipw3945-2.6.9-89.0.7.ELsmp-1.1.0-1.SL4.x86_64.rpm
kernel-module-ipw3945-2.6.9-89.0.7.ELxenU-1.1.0-1.SL4.x86_64.rpm
kernel-module-madwifi-2.6.9-89.0.7.EL-0.9.4-10.sl4.x86_64.rpm
kernel-module-madwifi-2.6.9-89.0.7.ELlargesmp-0.9.4-10.sl4.x86_64.rpm
kernel-module-madwifi-2.6.9-89.0.7.ELsmp-0.9.4-10.sl4.x86_64.rpm
kernel-module-madwifi-hal-2.6.9-89.0.7.EL-0.9.4-10.sl4.x86_64.rpm
kernel-module-madwifi-hal-2.6.9-89.0.7.ELlargesmp-0.9.4-10.sl4.x86_64.rpm
kernel-module-madwifi-hal-2.6.9-89.0.7.ELsmp-0.9.4-10.sl4.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-89.0.7.EL-1.41-1.SL.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-89.0.7.ELlargesmp-1.41-1.SL.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-89.0.7.ELsmp-1.41-1.SL.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-89.0.7.ELxenU-1.41-1.SL.x86_64.rpm
kernel-module-openafs-2.6.9-89.0.7.EL-1.4.7-68.2.SL4.x86_64.rpm
kernel-module-openafs-2.6.9-89.0.7.ELlargesmp-1.4.7-68.2.SL4.x86_64.rpm
kernel-module-openafs-2.6.9-89.0.7.ELsmp-1.4.7-68.2.SL4.x86_64.rpm
kernel-module-openafs-2.6.9-89.0.7.ELxenU-1.4.7-68.2.SL4.x86_64.rpm
kernel-module-r1000-2.6.9-89.0.7.EL-2.2-2.SL4x.x86_64.rpm
kernel-module-r1000-2.6.9-89.0.7.ELlargesmp-2.2-2.SL4x.x86_64.rpm
kernel-module-r1000-2.6.9-89.0.7.ELsmp-2.2-2.SL4x.x86_64.rpm
kernel-module-r1000-2.6.9-89.0.7.ELxenU-2.2-2.SL4x.x86_64.rpm
kernel-module-squashfs-2.6.9-89.0.7.EL-3.1.2-3.x86_64.rpm
kernel-module-squashfs-2.6.9-89.0.7.ELlargesmp-3.1.2-3.x86_64.rpm
kernel-module-squashfs-2.6.9-89.0.7.ELsmp-3.1.2-3.x86_64.rpm
kernel-module-squashfs-2.6.9-89.0.7.ELxenU-3.1.2-3.x86_64.rpm
kernel-module-unionfs-2.6.9-89.0.7.EL-1.1.5-3.x86_64.rpm
kernel-module-unionfs-2.6.9-89.0.7.ELsmp-1.1.5-3.x86_64.rpm
-Connie Sieh
-Troy Dawson
|
