Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

Updated kernel packages that fix multiple security issues are now available
for Red Hat Enterprise Linux 4.7 Extended Update Support.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

Description

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issues:

• a flaw was found in each of the following Intel PRO/1000 Linux drivers in
  the Linux kernel: e1000 and e1000e. A remote attacker using packets larger
  than the MTU could bypass the existing fragment check, resulting in
  partial, invalid frames being passed to the network stack. These flaws
  could also possibly be used to trigger a remote denial of service.
  (CVE-2009-4536, CVE-2009-4538, Important)
  
• a flaw was found in the Realtek r8169 Ethernet driver in the Linux
  kernel. Receiving overly-long frames with a certain revision of the network
  cards supported by this driver could possibly result in a remote denial of
  service. (CVE-2009-4537, Important)
  

Users should upgrade to these updated packages, which contain backported
patches to correct these issues. The system must be rebooted for this
update to take effect.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server - Extended Update Support 4.7 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 4.7 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 4.7 i386
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.7 ppc

Fixes

• BZ - 550907 - CVE-2009-4537 kernel: r8169 issue reported at 26c3
• BZ - 551214 - CVE-2009-4538 kernel: e1000e frame fragment issue
• BZ - 552126 - CVE-2009-4536 kernel: e1000 issue reported at 26c3

CVEs

• CVE-2009-4536
• CVE-2009-4537
• CVE-2009-4538

References

• http://www.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - Extended Update Support 4.7

SRPM
kernel-2.6.9-78.0.29.EL.src.rpm	SHA-256: f74cc82f2899690d25af61d9396879ffa25b5023bbce17f69c3aa39b7de1be34
x86_64
kernel-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 3195f271db26d8e0e208c6a222b1cfcabe605a22829802be64dfd390465280ba
kernel-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 3195f271db26d8e0e208c6a222b1cfcabe605a22829802be64dfd390465280ba
kernel-devel-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 7f923d330d34f85394a92c5b46f232a8456b1ea7bee0a4871ad0ff57a18dd8ff
kernel-devel-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 7f923d330d34f85394a92c5b46f232a8456b1ea7bee0a4871ad0ff57a18dd8ff
kernel-doc-2.6.9-78.0.29.EL.noarch.rpm	SHA-256: 862f5f8dbe21301c127c125b8e2c6a11f71587fbe355f85b77ad98330e84a4de
kernel-doc-2.6.9-78.0.29.EL.noarch.rpm	SHA-256: 862f5f8dbe21301c127c125b8e2c6a11f71587fbe355f85b77ad98330e84a4de
kernel-largesmp-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 0cc405a1ac0454cf97dd0f9d168e483d760720e7dbc0787da14e77470dca1d98
kernel-largesmp-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 0cc405a1ac0454cf97dd0f9d168e483d760720e7dbc0787da14e77470dca1d98
kernel-largesmp-devel-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: cf53763b0f2bebd5dfa889fa8436c2cd67abb7a1dba7f8487b18bf2c2febde11
kernel-largesmp-devel-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: cf53763b0f2bebd5dfa889fa8436c2cd67abb7a1dba7f8487b18bf2c2febde11
kernel-smp-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: b3570cc082e1967bcad9372712b99733fa51c7e003ef8a7e07d2beb37d4a711e
kernel-smp-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: b3570cc082e1967bcad9372712b99733fa51c7e003ef8a7e07d2beb37d4a711e
kernel-smp-devel-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 9ae12699585833a8e873ebbcc147d88e8c97f82fe65b8ef3a0ebd787e4192550
kernel-smp-devel-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 9ae12699585833a8e873ebbcc147d88e8c97f82fe65b8ef3a0ebd787e4192550
kernel-xenU-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 339387209c1fe7c5b798c6584864f21d831c3e5376e80d74977aebc20da9d5f9
kernel-xenU-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 339387209c1fe7c5b798c6584864f21d831c3e5376e80d74977aebc20da9d5f9
kernel-xenU-devel-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 8421cb9c4317ce54327e4b035b90b73feb0f5df8915725782df0cdaf4adebc76
kernel-xenU-devel-2.6.9-78.0.29.EL.x86_64.rpm	SHA-256: 8421cb9c4317ce54327e4b035b90b73feb0f5df8915725782df0cdaf4adebc76
ia64
kernel-2.6.9-78.0.29.EL.ia64.rpm	SHA-256: 883325d0d8764ce7850c88570e3f921beadd24378d9f7b323eabaf47abbf27cc
kernel-2.6.9-78.0.29.EL.ia64.rpm	SHA-256: 883325d0d8764ce7850c88570e3f921beadd24378d9f7b323eabaf47abbf27cc
kernel-devel-2.6.9-78.0.29.EL.ia64.rpm	SHA-256: 5c04153bad43ba551fbbfe9a75634b382581ed9de56900ec1cc3c574c300e9b1
kernel-devel-2.6.9-78.0.29.EL.ia64.rpm	SHA-256: 5c04153bad43ba551fbbfe9a75634b382581ed9de56900ec1cc3c574c300e9b1
kernel-doc-2.6.9-78.0.29.EL.noarch.rpm	SHA-256: 862f5f8dbe21301c127c125b8e2c6a11f71587fbe355f85b77ad98330e84a4de
kernel-doc-2.6.9-78.0.29.EL.noarch.rpm	SHA-256: 862f5f8dbe21301c127c125b8e2c6a11f71587fbe355f85b77ad98330e84a4de
kernel-largesmp-2.6.9-78.0.29.EL.ia64.rpm	SHA-256: d78f67cf81159b196e2d44b42b6cc7228b151aaf8b58d9a24ce6c7f452052957
kernel-largesmp-2.6.9-78.0.29.EL.ia64.rpm	SHA-256: d78f67cf81159b196e2d44b42b6cc7228b151aaf8b58d9a24ce6c7f452052957
kernel-largesmp-devel-2.6.9-78.0.29.EL.ia64.rpm	SHA-256: efadb9fd9232aae2dd82fbc97266e2cdea01c41f5f042a887000894f3b8d4fa7
kernel-largesmp-devel-2.6.9-78.0.29.EL.ia64.rpm	SHA-256: efadb9fd9232aae2dd82fbc97266e2cdea01c41f5f042a887000894f3b8d4fa7
i386
kernel-2.6.9-78.0.29.EL.i686.rpm	SHA-256: bee49e42e26d9602cbefca40ae09c5e5839993d23524e9ebbc53f8847dd56d76
kernel-2.6.9-78.0.29.EL.i686.rpm	SHA-256: bee49e42e26d9602cbefca40ae09c5e5839993d23524e9ebbc53f8847dd56d76
kernel-devel-2.6.9-78.0.29.EL.i686.rpm	SHA-256: 63d0dd53da9311bee59f1cbb1494dede923199142179036903ddab4e3188ff8e
kernel-devel-2.6.9-78.0.29.EL.i686.rpm	SHA-256: 63d0dd53da9311bee59f1cbb1494dede923199142179036903ddab4e3188ff8e
kernel-doc-2.6.9-78.0.29.EL.noarch.rpm	SHA-256: 862f5f8dbe21301c127c125b8e2c6a11f71587fbe355f85b77ad98330e84a4de
kernel-doc-2.6.9-78.0.29.EL.noarch.rpm	SHA-256: 862f5f8dbe21301c127c125b8e2c6a11f71587fbe355f85b77ad98330e84a4de
kernel-hugemem-2.6.9-78.0.29.EL.i686.rpm	SHA-256: 55ccaacea21bcab02a3a1df4306f25e3cc15cb464002717d739f449a97de66d6
kernel-hugemem-2.6.9-78.0.29.EL.i686.rpm	SHA-256: 55ccaacea21bcab02a3a1df4306f25e3cc15cb464002717d739f449a97de66d6
kernel-hugemem-devel-2.6.9-78.0.29.EL.i686.rpm	SHA-256: f154d58e49781814699d43daf7a8f62becb446dd9cdea16b8c623573eb4d599c
kernel-hugemem-devel-2.6.9-78.0.29.EL.i686.rpm	SHA-256: f154d58e49781814699d43daf7a8f62becb446dd9cdea16b8c623573eb4d599c
kernel-smp-2.6.9-78.0.29.EL.i686.rpm	SHA-256: 37d25249909285ffb4932e91ba95dd1eadc713ebcdc6d6ddff48d4559b524112
kernel-smp-2.6.9-78.0.29.EL.i686.rpm	SHA-256: 37d25249909285ffb4932e91ba95dd1eadc713ebcdc6d6ddff48d4559b524112
kernel-smp-devel-2.6.9-78.0.29.EL.i686.rpm	SHA-256: e05d951b06f44305a329351827c99de1703692b612200fe67c7b18f167d7c363
kernel-smp-devel-2.6.9-78.0.29.EL.i686.rpm	SHA-256: e05d951b06f44305a329351827c99de1703692b612200fe67c7b18f167d7c363
kernel-xenU-2.6.9-78.0.29.EL.i686.rpm	SHA-256: 3f544311194072f4a50e2c3338e6a062107581d9fc65f049ba3a5bf986dc5e55
kernel-xenU-2.6.9-78.0.29.EL.i686.rpm	SHA-256: 3f544311194072f4a50e2c3338e6a062107581d9fc65f049ba3a5bf986dc5e55
kernel-xenU-devel-2.6.9-78.0.29.EL.i686.rpm	SHA-256: fe0e3aba244531f6e9d2d3edd22d9010bf1fd6de648c99aab8210f33377055f3
kernel-xenU-devel-2.6.9-78.0.29.EL.i686.rpm	SHA-256: fe0e3aba244531f6e9d2d3edd22d9010bf1fd6de648c99aab8210f33377055f3

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7

SRPM
kernel-2.6.9-78.0.29.EL.src.rpm	SHA-256: f74cc82f2899690d25af61d9396879ffa25b5023bbce17f69c3aa39b7de1be34
s390x
kernel-2.6.9-78.0.29.EL.s390x.rpm	SHA-256: b212b28b6536b4a9e9cb8bed9ff2bc7f4e609394b8f87a24e4fc60c73216f578
kernel-devel-2.6.9-78.0.29.EL.s390x.rpm	SHA-256: 04b88a45225d8c651273927460160f7aaf347992611428b06febf14424cb7c4b
kernel-doc-2.6.9-78.0.29.EL.noarch.rpm	SHA-256: 862f5f8dbe21301c127c125b8e2c6a11f71587fbe355f85b77ad98330e84a4de
s390
kernel-2.6.9-78.0.29.EL.s390.rpm	SHA-256: af018cb75bdb91c9467f189bb6d9530499979cfc64ef7ff8c37cfa4726f73557
kernel-devel-2.6.9-78.0.29.EL.s390.rpm	SHA-256: 91446bfbb3cccc98c94ca365b795fd00f08c89f853958da8fa7ec5fef8559707
kernel-doc-2.6.9-78.0.29.EL.noarch.rpm	SHA-256: 862f5f8dbe21301c127c125b8e2c6a11f71587fbe355f85b77ad98330e84a4de

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.7

SRPM
kernel-2.6.9-78.0.29.EL.src.rpm	SHA-256: f74cc82f2899690d25af61d9396879ffa25b5023bbce17f69c3aa39b7de1be34
ppc
kernel-2.6.9-78.0.29.EL.ppc64.rpm	SHA-256: cee0e01e6641a3d556146e7c73858f7838e6c568e2d61a859ad039e2d68b229a
kernel-2.6.9-78.0.29.EL.ppc64iseries.rpm	SHA-256: e4a57d8a0c248dc2e172c7c8cf47b940f03aa87b77e04fc60c27aae8ac6c3231
kernel-devel-2.6.9-78.0.29.EL.ppc64.rpm	SHA-256: a3d28ea377545d668a0e65ba5c40512ec60cf7d3ec5143486537256526dd5674
kernel-devel-2.6.9-78.0.29.EL.ppc64iseries.rpm	SHA-256: bda19b867fcb00e2c6e9c978f90eb990e6e65596607123ad80c3da964ee88dd2
kernel-doc-2.6.9-78.0.29.EL.noarch.rpm	SHA-256: 862f5f8dbe21301c127c125b8e2c6a11f71587fbe355f85b77ad98330e84a4de
kernel-largesmp-2.6.9-78.0.29.EL.ppc64.rpm	SHA-256: ae5a09c0819155e1a5970c5f5cc97f26723dc1ca29ca67c15d180e636b6dadb1
kernel-largesmp-devel-2.6.9-78.0.29.EL.ppc64.rpm	SHA-256: 0b872f2149bcc90168a33af2cf33de65bd5f376050ff5f3c66424667f3956c20