Synopsis

Updated kernel packages available for Red Hat Enterprise Linux 4 Update 1

Type/Severity

Security Advisory: Important

Topic

Updated kernel packages are now available as part of ongoing support
and maintenance of Red Hat Enterprise Linux version 4. This is the
first regular update.

[Updated 9 August 2005]
The advisory text has been updated to show that this update also contained
fixes for the security issues named CAN-2005-0209 and CAN-2005-0937. No
changes have been made to the packages associated with this advisory.

Description

The Linux kernel handles the basic functions of the operating system.

This is the first regular kernel update to Red Hat Enterprise Linux 4.

A flaw affecting the auditing code was discovered. On Itanium
architectures a local user could use this flaw to cause a denial of service
(crash). This issue is rated as having important security impact
(CAN-2005-0136).

A flaw was discovered in the servicing of a raw device ioctl. A local user
who has access to raw devices could use this flaw to write to kernel memory
and cause a denial of service or potentially gain privileges. This issue
is rated as having moderate security impact (CAN-2005-1264).

A flaw in fragment forwarding was discovered that affected the netfilter
subsystem for certain network interface cards. A remote attacker could send
a set of bad fragments and cause a denial of service (system crash). Acenic
and SunGEM network interfaces were the only adapters affected, which are in
widespread use. (CAN-2005-0209)

A flaw in the futex functions was discovered affecting the Linux 2.6
kernel. A local user could use this flaw to cause a denial of service
(system crash). (CAN-2005-0937)

New features introduced by this update include:

• Fixed TCP BIC congestion handling.
  
• Diskdump support for more controllers (megaraid, SATA)
  
• Device mapper multipath support
  
• AMD64 dual core support.
  
• Intel ICH7 hardware support.
  

There were many bug fixes in various parts of the kernel. The ongoing
effort to resolve these problems has resulted in a marked improvement
in the reliability and scalability of Red Hat Enterprise Linux 4.

The following device drivers have been upgraded to new versions:
ata_piix -------- 1.03
bonding --------- 2.6.1
e1000 ----------- 5.6.10.1-k2-NAPI
e100 ------------ 3.3.6-k2-NAPI
ibmveth --------- 1.03
libata ---------- 1.02 to 1.10
lpfc ------------ 0:8.0.16 to 0:8.0.16.6_x2
megaraid_mbox --- 2.20.4.0 to 2.20.4.5
megaraid_mm ----- 2.20.2.0-rh1 to 2.20.2.5
sata_nv --------- 0.03 to 0.6
sata_promise ---- 1.00 to 1.01
sata_sil -------- 0.8
sata_sis -------- 0.5
sata_svw -------- 1.05
sata_sx4 -------- 0.7
sata_via -------- 1.0
sata_vsc -------- 1.0
tg3 ------------- 3.22-rh
ipw2100 --------- 1.0.3
ipw2200 --------- 1.0.0

All Red Hat Enterprise Linux 4 users are advised to upgrade their
kernels to the packages associated with their machine architectures
and configurations as listed in this erratum.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 133590 - PTRACE_ATTACH race with real parent's wait calls can produced bogus wait returns
• BZ - 134338 - Intolerable Disk I/O Performance under 64-bit VM: fix I/O buffers
• BZ - 137154 - "waitid(POSIX Interface)" cannot run properly.
• BZ - 138563 - [PATCH] RHEL4 U1: EFI GPT: reduce alternate header probing
• BZ - 140083 - lx-choptp19 crashed running 2.4.21-20.EL.BZ131027.hotfixhugemem
• BZ - 140383 - BLKFLSBUF ioctl can cause other reads
• BZ - 140472 - x86, x86_64 and IA64 scsi inquiry command hangs in wait_for_completion
• BZ - 141699 - FEAT: RHEL 4 U3: spinloops on ia64 need cpu_relax
• BZ - 141983 - RHEL4 U2: DBS: quiet warning messages from cpufreq.c
• BZ - 142167 - [RHEL4][Diskdump] smp_call_function issue
• BZ - 142464 - [PATCH] "RPC: garbage, exit EIO" when using NFSv3 with Kerberos 5
• BZ - 143073 - traced process cannot be killed
• BZ - 143472 - hugetlb mmap failed in compatibility mode in em64t
• BZ - 143907 - ext2 and device dm-0 byond 2Terabyte causes /var/log/messages file size to crash system
• BZ - 144741 - RHEL4 U1: ICH7 Support patch
• BZ - 145424 - problems with ipsec from rhel3 to rhel4
• BZ - 146067 - [PATCH] Channel bonding driver configured in 802.3 ad mode causes kernel panic when shutdwon
• BZ - 146089 - 20050115 ptrace/kill and ptrace/dump race fixes
• BZ - 146703 - NLM (NFSv3) problems when mounting with "sec=krb5"
• BZ - 146797 - SCTP memory consumption and system freezes
• BZ - 146911 - Thread suspension via async signal fails on rhel4-rc2
• BZ - 147832 - oom-killer triggered during Red Hat Cert
• BZ - 150110 - chipset identifier for zx2
• BZ - 150151 - Lockd callbacks to NFS clients fail completely
• BZ - 151284 - mmap of file over NFS corrupts data
• BZ - 152101 - host panics when mounting nfs4 volumes
• BZ - 152102 - host loses connection to nfs server when the server is solaris
• BZ - 152557 - 20050117 Oopsable NFS locking
• BZ - 154221 - Thread exits siliently via __RESTORE_ALL exeception for iret
• BZ - 154639 - kernel thread current->mm dereference in grab_swap_token causes oops
• BZ - 154972 - unexplained SIGSEGV death in SIGSEGV signal handler
• BZ - 155283 - CAN-2005-0136 ptrace corner cases on ia64
• BZ - 155765 - oops on 2.6.9-5.0.5.ELsmp
• BZ - 156875 - libata - master supports lba48 but slave does not
• BZ - 157450 - CAN-2005-1263 Linux kernel ELF core dump privilege elevation

CVEs

• CVE-2005-0136
• CVE-2005-0209
• CVE-2005-0937
• CVE-2005-1264
• CVE-2005-3107

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
kernel-2.6.9-11.EL.src.rpm	SHA-256: bc1f9fb9ceca17820f75be16b4232a95d67eda8dc81c22bc46569fb7a4947744
x86_64
kernel-2.6.9-11.EL.x86_64.rpm	SHA-256: 99f8ada4a9c5c72ba036916671f496f572c59fb1aba02742729105b6eda1cab6
kernel-2.6.9-11.EL.x86_64.rpm	SHA-256: 99f8ada4a9c5c72ba036916671f496f572c59fb1aba02742729105b6eda1cab6
kernel-devel-2.6.9-11.EL.x86_64.rpm	SHA-256: b615bdbde86b66db263fdc939d912a012649faeedfe836c5e528255a4f7299e7
kernel-devel-2.6.9-11.EL.x86_64.rpm	SHA-256: b615bdbde86b66db263fdc939d912a012649faeedfe836c5e528255a4f7299e7
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
kernel-smp-2.6.9-11.EL.x86_64.rpm	SHA-256: 962baabc195ce8526c4ebc09f3e1266f1718e610002efbb6e3a2238774858c73
kernel-smp-2.6.9-11.EL.x86_64.rpm	SHA-256: 962baabc195ce8526c4ebc09f3e1266f1718e610002efbb6e3a2238774858c73
kernel-smp-devel-2.6.9-11.EL.x86_64.rpm	SHA-256: e7c39ab2d8c252ee76d5dc3cd6c39290c912bdb708a2104f68851da4fdded7b4
kernel-smp-devel-2.6.9-11.EL.x86_64.rpm	SHA-256: e7c39ab2d8c252ee76d5dc3cd6c39290c912bdb708a2104f68851da4fdded7b4
ia64
kernel-2.6.9-11.EL.ia64.rpm	SHA-256: e3c179bbb386d6802cbf82c7b79b2f912d5c73e1be2e550a6b1251feebbf34d7
kernel-2.6.9-11.EL.ia64.rpm	SHA-256: e3c179bbb386d6802cbf82c7b79b2f912d5c73e1be2e550a6b1251feebbf34d7
kernel-devel-2.6.9-11.EL.ia64.rpm	SHA-256: cc52cac72ee056b82ae5de6560714b4785e5c8111e207f7e06bb71cc4b00873a
kernel-devel-2.6.9-11.EL.ia64.rpm	SHA-256: cc52cac72ee056b82ae5de6560714b4785e5c8111e207f7e06bb71cc4b00873a
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
i386
kernel-2.6.9-11.EL.i686.rpm	SHA-256: c8d9913dbe8d657705bd9499a2e2334720d65bc80e136cc5d5237ca21a33b5c4
kernel-2.6.9-11.EL.i686.rpm	SHA-256: c8d9913dbe8d657705bd9499a2e2334720d65bc80e136cc5d5237ca21a33b5c4
kernel-devel-2.6.9-11.EL.i686.rpm	SHA-256: 754c90895f3ae6ab1f22d52028192bbd9759bdb7d24f7c8d45baf132cc7d8947
kernel-devel-2.6.9-11.EL.i686.rpm	SHA-256: 754c90895f3ae6ab1f22d52028192bbd9759bdb7d24f7c8d45baf132cc7d8947
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
kernel-hugemem-2.6.9-11.EL.i686.rpm	SHA-256: 2703d2b1d22704814ffcbfd472e12ac53c38bc29b84bcdf77302007bf370e6cc
kernel-hugemem-2.6.9-11.EL.i686.rpm	SHA-256: 2703d2b1d22704814ffcbfd472e12ac53c38bc29b84bcdf77302007bf370e6cc
kernel-hugemem-devel-2.6.9-11.EL.i686.rpm	SHA-256: f2e412ce470d40a05742afe9d1b255221260e67570b42e9341271360b60b3253
kernel-hugemem-devel-2.6.9-11.EL.i686.rpm	SHA-256: f2e412ce470d40a05742afe9d1b255221260e67570b42e9341271360b60b3253
kernel-smp-2.6.9-11.EL.i686.rpm	SHA-256: 9334a3d2e28416b296a4bb6ea026650b8c344eac6852693b5ebbeb501575784d
kernel-smp-2.6.9-11.EL.i686.rpm	SHA-256: 9334a3d2e28416b296a4bb6ea026650b8c344eac6852693b5ebbeb501575784d
kernel-smp-devel-2.6.9-11.EL.i686.rpm	SHA-256: 314965162dd7115f7ad9b4251e2d830e6f43816e15903d23d33853f7a8da88a0
kernel-smp-devel-2.6.9-11.EL.i686.rpm	SHA-256: 314965162dd7115f7ad9b4251e2d830e6f43816e15903d23d33853f7a8da88a0

Red Hat Enterprise Linux Workstation 4

SRPM
kernel-2.6.9-11.EL.src.rpm	SHA-256: bc1f9fb9ceca17820f75be16b4232a95d67eda8dc81c22bc46569fb7a4947744
x86_64
kernel-2.6.9-11.EL.x86_64.rpm	SHA-256: 99f8ada4a9c5c72ba036916671f496f572c59fb1aba02742729105b6eda1cab6
kernel-devel-2.6.9-11.EL.x86_64.rpm	SHA-256: b615bdbde86b66db263fdc939d912a012649faeedfe836c5e528255a4f7299e7
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
kernel-smp-2.6.9-11.EL.x86_64.rpm	SHA-256: 962baabc195ce8526c4ebc09f3e1266f1718e610002efbb6e3a2238774858c73
kernel-smp-devel-2.6.9-11.EL.x86_64.rpm	SHA-256: e7c39ab2d8c252ee76d5dc3cd6c39290c912bdb708a2104f68851da4fdded7b4
ia64
kernel-2.6.9-11.EL.ia64.rpm	SHA-256: e3c179bbb386d6802cbf82c7b79b2f912d5c73e1be2e550a6b1251feebbf34d7
kernel-devel-2.6.9-11.EL.ia64.rpm	SHA-256: cc52cac72ee056b82ae5de6560714b4785e5c8111e207f7e06bb71cc4b00873a
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
i386
kernel-2.6.9-11.EL.i686.rpm	SHA-256: c8d9913dbe8d657705bd9499a2e2334720d65bc80e136cc5d5237ca21a33b5c4
kernel-devel-2.6.9-11.EL.i686.rpm	SHA-256: 754c90895f3ae6ab1f22d52028192bbd9759bdb7d24f7c8d45baf132cc7d8947
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
kernel-hugemem-2.6.9-11.EL.i686.rpm	SHA-256: 2703d2b1d22704814ffcbfd472e12ac53c38bc29b84bcdf77302007bf370e6cc
kernel-hugemem-devel-2.6.9-11.EL.i686.rpm	SHA-256: f2e412ce470d40a05742afe9d1b255221260e67570b42e9341271360b60b3253
kernel-smp-2.6.9-11.EL.i686.rpm	SHA-256: 9334a3d2e28416b296a4bb6ea026650b8c344eac6852693b5ebbeb501575784d
kernel-smp-devel-2.6.9-11.EL.i686.rpm	SHA-256: 314965162dd7115f7ad9b4251e2d830e6f43816e15903d23d33853f7a8da88a0

Red Hat Enterprise Linux Desktop 4

SRPM
kernel-2.6.9-11.EL.src.rpm	SHA-256: bc1f9fb9ceca17820f75be16b4232a95d67eda8dc81c22bc46569fb7a4947744
x86_64
kernel-2.6.9-11.EL.x86_64.rpm	SHA-256: 99f8ada4a9c5c72ba036916671f496f572c59fb1aba02742729105b6eda1cab6
kernel-devel-2.6.9-11.EL.x86_64.rpm	SHA-256: b615bdbde86b66db263fdc939d912a012649faeedfe836c5e528255a4f7299e7
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
kernel-smp-2.6.9-11.EL.x86_64.rpm	SHA-256: 962baabc195ce8526c4ebc09f3e1266f1718e610002efbb6e3a2238774858c73
kernel-smp-devel-2.6.9-11.EL.x86_64.rpm	SHA-256: e7c39ab2d8c252ee76d5dc3cd6c39290c912bdb708a2104f68851da4fdded7b4
i386
kernel-2.6.9-11.EL.i686.rpm	SHA-256: c8d9913dbe8d657705bd9499a2e2334720d65bc80e136cc5d5237ca21a33b5c4
kernel-devel-2.6.9-11.EL.i686.rpm	SHA-256: 754c90895f3ae6ab1f22d52028192bbd9759bdb7d24f7c8d45baf132cc7d8947
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
kernel-hugemem-2.6.9-11.EL.i686.rpm	SHA-256: 2703d2b1d22704814ffcbfd472e12ac53c38bc29b84bcdf77302007bf370e6cc
kernel-hugemem-devel-2.6.9-11.EL.i686.rpm	SHA-256: f2e412ce470d40a05742afe9d1b255221260e67570b42e9341271360b60b3253
kernel-smp-2.6.9-11.EL.i686.rpm	SHA-256: 9334a3d2e28416b296a4bb6ea026650b8c344eac6852693b5ebbeb501575784d
kernel-smp-devel-2.6.9-11.EL.i686.rpm	SHA-256: 314965162dd7115f7ad9b4251e2d830e6f43816e15903d23d33853f7a8da88a0

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
kernel-2.6.9-11.EL.src.rpm	SHA-256: bc1f9fb9ceca17820f75be16b4232a95d67eda8dc81c22bc46569fb7a4947744
s390x
kernel-2.6.9-11.EL.s390x.rpm	SHA-256: 8dac234b63b2ab239e57a8f54ef7945d9cfed963cd5eac89705b251e5061c18a
kernel-devel-2.6.9-11.EL.s390x.rpm	SHA-256: 285dc6610af1ccd538a7c995987924c45b6c671d3ea450d95d98cb673eead475
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d
s390
kernel-2.6.9-11.EL.s390.rpm	SHA-256: c7622586f0b71b9ac57597f7d0e6d5a7f7ed02f023e8b167eb2c8b7bf50708ce
kernel-devel-2.6.9-11.EL.s390.rpm	SHA-256: 53ca53d0a43cf34a1ebbd449f9ebd59ad5d2464ab0be677a176382948eca29ba
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d

Red Hat Enterprise Linux for Power, big endian 4

SRPM
kernel-2.6.9-11.EL.src.rpm	SHA-256: bc1f9fb9ceca17820f75be16b4232a95d67eda8dc81c22bc46569fb7a4947744
ppc
kernel-2.6.9-11.EL.ppc64.rpm	SHA-256: b61f087ad899ab2b22b8918a6240e98131d09988f28b45f261a13a3fc606c030
kernel-2.6.9-11.EL.ppc64iseries.rpm	SHA-256: 21216b34b6feba38872893f3c80e18a94b6e43a56032d7c4044159a0c2e5091a
kernel-devel-2.6.9-11.EL.ppc64.rpm	SHA-256: e18bf07681c8b43d25c220c1160d3da95babb1ffa00a1d1b35338b0445ab47ed
kernel-devel-2.6.9-11.EL.ppc64iseries.rpm	SHA-256: 5fb5287d690756da4f6c4860ac6b0822b614e6e9873c8e27b10dd5fea3a87a09
kernel-doc-2.6.9-11.EL.noarch.rpm	SHA-256: 013101b0dfb4991fc4bf17cd98c48df3502a8f0a65b1f2e292ca11712b184f7d