RHBA-2008:0499 - Bug Fix Advisory

Topic

Updated kernel packages that fix several bugs are now available for Red Hat
Enterprise Linux 5.

Description

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

These updated packages fix the following bugs:

• the message buffer for the relay function is allocated against online

CPUs, not ones that will be hot-added in the future. If the buffer has
already been allocated, hot-adding a CPU, which the relay function works
on, will cause a panic, as the message buffer will not be available for
such a CPU. In these updated packages, hot-adding a CPU after the message
buffer has been allocated no longer causes a panic.

• after migrating a hypervisor guest, the MAC address table was not

updated, causing packet loss. This prevented network connections to the
guest. In these updated packages, after a migration, a gratuitous ARP
request is sent, causing the ARP caches to be refreshed, which minimizes
network downtime, and resolves this issue.

• the TAHI IPsec IPv6 Ready Logo test case failed on 64-bit PowerPC

systems, when using ESP with the encryption algorithm set to "3des-cbc",
and authentication set to "null".

• by default, Red Hat Enterprise Linux running on 64-bit PowerPC systems is

set for a 32-bit user-space. When compiling on such systems, 32-bit padding
was used, instead of the 64-bit padding required by 64-bit kernels. This
resulted in structure fields not being aligned, causing multicast socket
options to fail.

• the XFRM reverse feature for ICMPv6 did not work. In these updated

packages, this has been resolved, allowing the TAHI IPsec IPv6 Ready Logo
test case to pass successfully.

As well, from this release onwards, the changelog displays both Red Hat
Bugzilla numbers -- Z-Stream first, Y-Stream second -- for each changelog
entry.

Users of Red Hat Enterprise Linux 5 are advised to upgrade to these updated
packages, which resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.2 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.2 ia64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.2 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux for IBM z Systems 5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.2 s390x
• Red Hat Enterprise Linux for Power, big endian 5 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.2 ppc
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 447522 - Panic happens if relay function works on hot-added cpu. [rhel-5.2.z]
• BZ - 447684 - Fake ARP dropped after migration leading to loss of network connectivity
• BZ - 447685 - IPV6DOD: ESP with 3des-cbc for encrypt and authentication set to "null"
• BZ - 447687 - IPV6DOD: all MCAST_* socket options fail with 32-bit app, 64-bit kernel due to padding
• BZ - 447688 - IPV6DOD: xfrm reverse icmp feature does not seem to work correctly. [rhel-5.2.z]

CVEs

(none)

References

(none)