Synopsis

udev security update

Type/Severity

Security Advisory: Important

Topic

Updated udev packages that fix a security issue are now available.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

The udev package contains an implementation of devfs in userspace using
sysfs and /sbin/hotplug.

Richard Cunningham discovered a flaw in the way udev sets permissions on
various files in /dev/input. It may be possible for an authenticated
attacker to gather sensitive data entered by a user at the console, such as
passwords. The Common Vulnerabilities and Exposures project has assigned
the name CVE-2005-3631 to this issue.

All users of udev should upgrade to these updated packages, which contain a
backported patch and are not vulnerable to this issue.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

(none)

CVEs

• CVE-2005-3631

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
udev-039-10.10.EL4.3.src.rpm	SHA-256: 69ef941962182264fe115bacee47e470a8731189ec0a4f0685dbd2ed9a6cb8d7
x86_64
udev-039-10.10.EL4.3.x86_64.rpm	SHA-256: 2b678230a2a95d54315b18e5b28f997d897210307d60f55cafe3c060cfbef5ad
udev-039-10.10.EL4.3.x86_64.rpm	SHA-256: 2b678230a2a95d54315b18e5b28f997d897210307d60f55cafe3c060cfbef5ad
ia64
udev-039-10.10.EL4.3.ia64.rpm	SHA-256: 99d6de033bf44bedd38351f26e49340f377ad59a354a0d2ef491b0809dc11e13
udev-039-10.10.EL4.3.ia64.rpm	SHA-256: 99d6de033bf44bedd38351f26e49340f377ad59a354a0d2ef491b0809dc11e13
i386
udev-039-10.10.EL4.3.i386.rpm	SHA-256: e99812a06cc66d142ed4a2d62f5d1efba31a7ade312ca2f39752bcc45b982c3e
udev-039-10.10.EL4.3.i386.rpm	SHA-256: e99812a06cc66d142ed4a2d62f5d1efba31a7ade312ca2f39752bcc45b982c3e

Red Hat Enterprise Linux Workstation 4

SRPM
udev-039-10.10.EL4.3.src.rpm	SHA-256: 69ef941962182264fe115bacee47e470a8731189ec0a4f0685dbd2ed9a6cb8d7
x86_64
udev-039-10.10.EL4.3.x86_64.rpm	SHA-256: 2b678230a2a95d54315b18e5b28f997d897210307d60f55cafe3c060cfbef5ad
ia64
udev-039-10.10.EL4.3.ia64.rpm	SHA-256: 99d6de033bf44bedd38351f26e49340f377ad59a354a0d2ef491b0809dc11e13
i386
udev-039-10.10.EL4.3.i386.rpm	SHA-256: e99812a06cc66d142ed4a2d62f5d1efba31a7ade312ca2f39752bcc45b982c3e

Red Hat Enterprise Linux Desktop 4

SRPM
udev-039-10.10.EL4.3.src.rpm	SHA-256: 69ef941962182264fe115bacee47e470a8731189ec0a4f0685dbd2ed9a6cb8d7
x86_64
udev-039-10.10.EL4.3.x86_64.rpm	SHA-256: 2b678230a2a95d54315b18e5b28f997d897210307d60f55cafe3c060cfbef5ad
i386
udev-039-10.10.EL4.3.i386.rpm	SHA-256: e99812a06cc66d142ed4a2d62f5d1efba31a7ade312ca2f39752bcc45b982c3e

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
udev-039-10.10.EL4.3.src.rpm	SHA-256: 69ef941962182264fe115bacee47e470a8731189ec0a4f0685dbd2ed9a6cb8d7
s390x
udev-039-10.10.EL4.3.s390x.rpm	SHA-256: 462c0f37b5fe8d4a5fa602f216ea865de2d4dc757113bf86c66f3b9fdf8e2489
s390
udev-039-10.10.EL4.3.s390.rpm	SHA-256: 4a0d6b5fbe12422fe9ef4e799fb10e128dc8c76fce89730712b81db703d7537e

Red Hat Enterprise Linux for Power, big endian 4

SRPM
udev-039-10.10.EL4.3.src.rpm	SHA-256: 69ef941962182264fe115bacee47e470a8731189ec0a4f0685dbd2ed9a6cb8d7
ppc
udev-039-10.10.EL4.3.ppc.rpm	SHA-256: f819a4988a78e87bf9396553a7e40ab6bf1fd81340b106a40c170e7eea867faf