Issued:
2009-04-16
Updated:
2009-04-16

RHSA-2009:0427 - Security Advisory

Synopsis

Important: udev security update

Type/Severity

Security Advisory: Important

Topic

Updated udev packages that fix one security issue are now available for Red
Hat Enterprise Linux 5.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

udev provides a user-space API and implements a dynamic device directory,
providing only the devices present on the system. udev replaces devfs in
order to provide greater hot plug functionality. Netlink is a datagram
oriented service, used to transfer information between kernel modules and
user-space processes.

It was discovered that udev did not properly check the origin of Netlink
messages. A local attacker could use this flaw to gain root privileges via
a crafted Netlink message sent to udev, causing it to create a
world-writable block device file for an existing system block device (for
example, the root file system). (CVE-2009-1185)

Red Hat would like to thank Sebastian Krahmer of the SUSE Security Team for
responsibly reporting this flaw.

Users of udev are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
update, the udevd daemon will be restarted automatically.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux Server - Extended Update Support 5.3 x86_64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.3 ia64
  • Red Hat Enterprise Linux Server - Extended Update Support 5.3 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux Desktop 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.3 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386
  • Red Hat Enterprise Linux Server - AUS 5.3 x86_64
  • Red Hat Enterprise Linux Server - AUS 5.3 ia64
  • Red Hat Enterprise Linux Server - AUS 5.3 i386
  • Red Hat Enterprise Linux Desktop 5 x86_64
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.3 ppc

Fixes

  • BZ - 495051 - CVE-2009-1185 udev: Uncheck origin of NETLINK messages

CVEs

References

Red Hat Enterprise Linux Server 5

SRPM
udev-095-14.20.el5_3.src.rpm SHA-256: bfbf617de3f3c666a2452c786fd136885388677951f6d04d85a6223ee3348300
x86_64
libvolume_id-095-14.20.el5_3.i386.rpm SHA-256: a19a46d7ba8ea9abfb246a81efac4fbb44ca4eec0178094c6049e85da38397ef
libvolume_id-095-14.20.el5_3.x86_64.rpm SHA-256: 7272650804efb1913b49d7674cd1ece4a87bb2f39fbd80fdcabc5a7b4f73c301
libvolume_id-devel-095-14.20.el5_3.i386.rpm SHA-256: 577ae962aef3c032174e417fa09bbaa1121bddc8aa3baa1cb3227afb9eb595f3
libvolume_id-devel-095-14.20.el5_3.x86_64.rpm SHA-256: ddc4b0460fccb5ed29ba1f6478386bc73e1b7872b47a1bc7ce84a28a9f3a0c80
udev-095-14.20.el5_3.x86_64.rpm SHA-256: 49bbd63039152e369695505adb7c08375889d01a9fcf7e8db4e8933b6f65cfe0
ia64
libvolume_id-095-14.20.el5_3.ia64.rpm SHA-256: 3b3eb428fe8d19a2c873ef6d7ad9d9caf0c0317b6c4325c67f764fdd0e8ab8c4
libvolume_id-devel-095-14.20.el5_3.ia64.rpm SHA-256: ad93aea6e7d60593d564ac98e8a85a740a31afa771033183d92204270aaad3fd
udev-095-14.20.el5_3.ia64.rpm SHA-256: c21d7bb03dd0e9e743168a4793b298fb439b610df8b4d9e968456ac9d6c66860
i386
libvolume_id-095-14.20.el5_3.i386.rpm SHA-256: a19a46d7ba8ea9abfb246a81efac4fbb44ca4eec0178094c6049e85da38397ef
libvolume_id-devel-095-14.20.el5_3.i386.rpm SHA-256: 577ae962aef3c032174e417fa09bbaa1121bddc8aa3baa1cb3227afb9eb595f3
udev-095-14.20.el5_3.i386.rpm SHA-256: 49891dc2ee6a4da30f8dd02f5fb8b26ebdff1cb4fe40b3d9c30fc2b7ad241e9b

Red Hat Enterprise Linux Workstation 5

SRPM
udev-095-14.20.el5_3.src.rpm SHA-256: bfbf617de3f3c666a2452c786fd136885388677951f6d04d85a6223ee3348300
x86_64
libvolume_id-095-14.20.el5_3.i386.rpm SHA-256: a19a46d7ba8ea9abfb246a81efac4fbb44ca4eec0178094c6049e85da38397ef
libvolume_id-095-14.20.el5_3.x86_64.rpm SHA-256: 7272650804efb1913b49d7674cd1ece4a87bb2f39fbd80fdcabc5a7b4f73c301
libvolume_id-devel-095-14.20.el5_3.i386.rpm SHA-256: 577ae962aef3c032174e417fa09bbaa1121bddc8aa3baa1cb3227afb9eb595f3
libvolume_id-devel-095-14.20.el5_3.x86_64.rpm SHA-256: ddc4b0460fccb5ed29ba1f6478386bc73e1b7872b47a1bc7ce84a28a9f3a0c80
udev-095-14.20.el5_3.x86_64.rpm SHA-256: 49bbd63039152e369695505adb7c08375889d01a9fcf7e8db4e8933b6f65cfe0
i386
libvolume_id-095-14.20.el5_3.i386.rpm SHA-256: a19a46d7ba8ea9abfb246a81efac4fbb44ca4eec0178094c6049e85da38397ef
libvolume_id-devel-095-14.20.el5_3.i386.rpm SHA-256: 577ae962aef3c032174e417fa09bbaa1121bddc8aa3baa1cb3227afb9eb595f3
udev-095-14.20.el5_3.i386.rpm SHA-256: 49891dc2ee6a4da30f8dd02f5fb8b26ebdff1cb4fe40b3d9c30fc2b7ad241e9b

Red Hat Enterprise Linux Desktop 5

SRPM
udev-095-14.20.el5_3.src.rpm SHA-256: bfbf617de3f3c666a2452c786fd136885388677951f6d04d85a6223ee3348300
x86_64
libvolume_id-095-14.20.el5_3.i386.rpm SHA-256: a19a46d7ba8ea9abfb246a81efac4fbb44ca4eec0178094c6049e85da38397ef
libvolume_id-095-14.20.el5_3.x86_64.rpm SHA-256: 7272650804efb1913b49d7674cd1ece4a87bb2f39fbd80fdcabc5a7b4f73c301
udev-095-14.20.el5_3.x86_64.rpm SHA-256: 49bbd63039152e369695505adb7c08375889d01a9fcf7e8db4e8933b6f65cfe0
i386
libvolume_id-095-14.20.el5_3.i386.rpm SHA-256: a19a46d7ba8ea9abfb246a81efac4fbb44ca4eec0178094c6049e85da38397ef
udev-095-14.20.el5_3.i386.rpm SHA-256: 49891dc2ee6a4da30f8dd02f5fb8b26ebdff1cb4fe40b3d9c30fc2b7ad241e9b

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
udev-095-14.20.el5_3.src.rpm SHA-256: bfbf617de3f3c666a2452c786fd136885388677951f6d04d85a6223ee3348300
s390x
libvolume_id-095-14.20.el5_3.s390.rpm SHA-256: 10cf0646ed0e0f6b39c5362817f5d035bd72075059f2256b9227b186fad64396
libvolume_id-095-14.20.el5_3.s390x.rpm SHA-256: 72faac67736f12fbcd1e59922b5ab27cce2094729ded97e0d0a55bd52112abdc
libvolume_id-devel-095-14.20.el5_3.s390.rpm SHA-256: 9ade1c723992eebab8bc77286acc9ae7fdb5011d55b28823328a4c12958263a7
libvolume_id-devel-095-14.20.el5_3.s390x.rpm SHA-256: 75f2ec261045707ae4d1089b2cd9b55e5a42c1cc0bf22faf9438e3613137f78f
udev-095-14.20.el5_3.s390x.rpm SHA-256: 98eb9fac655b594c3ef627959966fe2625222bc30bdf26fa99300a7cc8f8d583

Red Hat Enterprise Linux for Power, big endian 5

SRPM
udev-095-14.20.el5_3.src.rpm SHA-256: bfbf617de3f3c666a2452c786fd136885388677951f6d04d85a6223ee3348300
ppc
libvolume_id-095-14.20.el5_3.ppc.rpm SHA-256: ac40c878ff2e2b00bf1827b7366b9fc60fe8a6a80a497dcd2fafaa4884e12021
libvolume_id-095-14.20.el5_3.ppc64.rpm SHA-256: 69e4c03b810c271143e920010aa6104ef4e1b4ab1e71fc6ab75ef6ba59291acb
libvolume_id-devel-095-14.20.el5_3.ppc.rpm SHA-256: fcb76de87435dd637c78482d8810daeb8829132256f661679ebacaeae03529a4
libvolume_id-devel-095-14.20.el5_3.ppc64.rpm SHA-256: 521f9e1db0c2238103ade2849ab1fff93791a206e97c9615b28886e6d620c683
udev-095-14.20.el5_3.ppc.rpm SHA-256: 8fe08b5e730023fbe6e8838af66ee393977b37f030f08b1193d1f3eea7cbf700

Red Hat Enterprise Linux Server from RHUI 5

SRPM
udev-095-14.20.el5_3.src.rpm SHA-256: bfbf617de3f3c666a2452c786fd136885388677951f6d04d85a6223ee3348300
x86_64
libvolume_id-095-14.20.el5_3.i386.rpm SHA-256: a19a46d7ba8ea9abfb246a81efac4fbb44ca4eec0178094c6049e85da38397ef
libvolume_id-095-14.20.el5_3.x86_64.rpm SHA-256: 7272650804efb1913b49d7674cd1ece4a87bb2f39fbd80fdcabc5a7b4f73c301
libvolume_id-devel-095-14.20.el5_3.i386.rpm SHA-256: 577ae962aef3c032174e417fa09bbaa1121bddc8aa3baa1cb3227afb9eb595f3
libvolume_id-devel-095-14.20.el5_3.x86_64.rpm SHA-256: ddc4b0460fccb5ed29ba1f6478386bc73e1b7872b47a1bc7ce84a28a9f3a0c80
udev-095-14.20.el5_3.x86_64.rpm SHA-256: 49bbd63039152e369695505adb7c08375889d01a9fcf7e8db4e8933b6f65cfe0
i386
libvolume_id-095-14.20.el5_3.i386.rpm SHA-256: a19a46d7ba8ea9abfb246a81efac4fbb44ca4eec0178094c6049e85da38397ef
libvolume_id-devel-095-14.20.el5_3.i386.rpm SHA-256: 577ae962aef3c032174e417fa09bbaa1121bddc8aa3baa1cb3227afb9eb595f3
udev-095-14.20.el5_3.i386.rpm SHA-256: 49891dc2ee6a4da30f8dd02f5fb8b26ebdff1cb4fe40b3d9c30fc2b7ad241e9b

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.