Synopsis

util-linux and mount security update

Type/Severity

Security Advisory: Moderate

Topic

Updated util-linux and mount packages that fix two security issues are now
available.

This update has been rated as having moderate security impact by the Red
Hat Security Response Team.

Description

The util-linux package contains a large variety of low-level system
utilities that are necessary for a Linux system to function.

The mount package contains the mount, umount, swapon and swapoff programs.

A bug was found in the way the umount command is executed by normal users.
It may be possible for a user to gain elevated privileges if the user is
able to execute the "umount -r" command on a mounted file system. The
file system will be re-mounted only with the "readonly" flag set, clearing
flags such as "nosuid" and "noexec". The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CAN-2005-2876 to
this issue.

This update also fixes a hardlink bug in the script command for Red Hat
Enterprise Linux 2.1. If a local user places a hardlinked file named
"typescript" in a directory they have write access to, the file will be
overwritten if the user running script has write permissions to the
destination file. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2001-1494 to this issue.

All users of util-linux and mount should upgrade to these updated packages,
which contain backported patches to correct these issues.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Server 2 ia64
• Red Hat Enterprise Linux Server 2 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Workstation 2 ia64
• Red Hat Enterprise Linux Workstation 2 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc

Fixes

• BZ - 161337 - CAN-2001-1494 hardlink vulnerability in 'script' command
• BZ - 168206 - CAN-2005-2876 umount unsafe -r usage
• BZ - 168209 - CAN-2005-2876 umount unsafe -r usage

CVEs

• CVE-2001-1494
• CVE-2005-2876

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
x86_64
util-linux-2.12a-16.EL4.12.x86_64.rpm	SHA-256: f6b6638de150a21285b5e4bfa0ecdb7118ef3ae2a46d9f5758b20c2e169a61d9
util-linux-2.12a-16.EL4.12.x86_64.rpm	SHA-256: f6b6638de150a21285b5e4bfa0ecdb7118ef3ae2a46d9f5758b20c2e169a61d9
ia64
util-linux-2.12a-16.EL4.12.ia64.rpm	SHA-256: 69b4932058c52e010b59d12c13c23bdb6cc57645d920d52d0d68b3977b34a7f2
util-linux-2.12a-16.EL4.12.ia64.rpm	SHA-256: 69b4932058c52e010b59d12c13c23bdb6cc57645d920d52d0d68b3977b34a7f2
i386
util-linux-2.12a-16.EL4.12.i386.rpm	SHA-256: a2eca1fb5550404cf23e082af6218c60898eabab95b6a47ff4ae742a99b187f9
util-linux-2.12a-16.EL4.12.i386.rpm	SHA-256: a2eca1fb5550404cf23e082af6218c60898eabab95b6a47ff4ae742a99b187f9

Red Hat Enterprise Linux Workstation 4

SRPM
x86_64
util-linux-2.12a-16.EL4.12.x86_64.rpm	SHA-256: f6b6638de150a21285b5e4bfa0ecdb7118ef3ae2a46d9f5758b20c2e169a61d9
ia64
util-linux-2.12a-16.EL4.12.ia64.rpm	SHA-256: 69b4932058c52e010b59d12c13c23bdb6cc57645d920d52d0d68b3977b34a7f2
i386
util-linux-2.12a-16.EL4.12.i386.rpm	SHA-256: a2eca1fb5550404cf23e082af6218c60898eabab95b6a47ff4ae742a99b187f9

Red Hat Enterprise Linux Desktop 4

SRPM
x86_64
util-linux-2.12a-16.EL4.12.x86_64.rpm	SHA-256: f6b6638de150a21285b5e4bfa0ecdb7118ef3ae2a46d9f5758b20c2e169a61d9
i386
util-linux-2.12a-16.EL4.12.i386.rpm	SHA-256: a2eca1fb5550404cf23e082af6218c60898eabab95b6a47ff4ae742a99b187f9

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
s390x
util-linux-2.12a-16.EL4.12.s390x.rpm	SHA-256: db91b7fe908225fcbfc880a6a3cf717aff28fa29da33c17bcee270b14d40368a
s390
util-linux-2.12a-16.EL4.12.s390.rpm	SHA-256: 124af82a44992402924f6121ab244808e49a1c94a07c4f2c1839c4659cc517c9

Red Hat Enterprise Linux for Power, big endian 4

SRPM
ppc
util-linux-2.12a-16.EL4.12.ppc.rpm	SHA-256: 1c12360b2b7e474387f29e970e2ec1853e30fd579918d873434064a0a52bb875