Synopsis

Important: kernel security and enhancement update

Type/Severity

Security Advisory: Important

Topic

Updated kernel packages that fix one security issue and add one enhancement
are now available for Red Hat Enterprise Linux 4.7 Extended Update Support.

The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issue:

• a use-after-free flaw was found in the tcp_rcv_state_process() function
  in the Linux kernel TCP/IP protocol suite implementation. If a system using
  IPv6 had the IPV6_RECVPKTINFO option set on a listening socket, a remote
  attacker could send an IPv6 packet to that system, causing a kernel panic
  (denial of service). (CVE-2010-1188, Important)
  

This update also adds the following enhancement:

• kernel support for the iptables connlimit module. This module can be used
  to help mitigate some types of denial of service attacks. Note: This update
  alone does not address connlimit support. A future iptables package update
  will allow connlimit to work correctly. (BZ#563222)
  

Users should upgrade to these updated packages, which contain backported
patches to correct this issue and add this enhancement. The system must be
rebooted for this update to take effect.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

To install kernel packages manually, use "rpm -ivh [package]". Do not
use "rpm -Uvh" as that will remove the running kernel binaries from
your system. You may use "rpm -e" to remove old kernels after
determining that the new kernel functions properly on your system.

Affected Products

• Red Hat Enterprise Linux Server - Extended Update Support 4.7 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 4.7 ia64
• Red Hat Enterprise Linux Server - Extended Update Support 4.7 i386
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.7 ppc

Fixes

• BZ - 563222 - [RFE ] Connlimit kernel module support [rhel-4.9] [rhel-4.7.z]
• BZ - 577711 - CVE-2010-1188 kernel: ipv6: skb is unexpectedly freed

CVEs

• CVE-2010-1188

References

• http://www.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - Extended Update Support 4.7

SRPM
kernel-2.6.9-78.0.31.EL.src.rpm	SHA-256: 339a17412effad25b0bf9a129942d5b08f87fb836099bda666f1e61051976945
x86_64
kernel-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 4015fb2fce548361d8cdfa28c31884e890542ea6caf1fb24efb551c390661ce3
kernel-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 4015fb2fce548361d8cdfa28c31884e890542ea6caf1fb24efb551c390661ce3
kernel-devel-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 7f615c9855afb521da0231b1f529f1db2285e92a3c8be5c6d4314e13b4fd9cdf
kernel-devel-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 7f615c9855afb521da0231b1f529f1db2285e92a3c8be5c6d4314e13b4fd9cdf
kernel-doc-2.6.9-78.0.31.EL.noarch.rpm	SHA-256: 4fb0c599a6949bd22ee188e875ed75c4a70109cf56091cbc739cc75fdb5bd664
kernel-doc-2.6.9-78.0.31.EL.noarch.rpm	SHA-256: 4fb0c599a6949bd22ee188e875ed75c4a70109cf56091cbc739cc75fdb5bd664
kernel-largesmp-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 93b168c24ce4db6afb29e1e200ae8ec029b7d21cf4f5ebaf8fd24eae09f58b0a
kernel-largesmp-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 93b168c24ce4db6afb29e1e200ae8ec029b7d21cf4f5ebaf8fd24eae09f58b0a
kernel-largesmp-devel-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 990359d5ea760eaa5d1a16884571d7649afd439772ca9d24035251b6c4754b58
kernel-largesmp-devel-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 990359d5ea760eaa5d1a16884571d7649afd439772ca9d24035251b6c4754b58
kernel-smp-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 22e31f662a297e8e6a8011f0cc8af2be69c4b54e39975a580c95c493889132c4
kernel-smp-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 22e31f662a297e8e6a8011f0cc8af2be69c4b54e39975a580c95c493889132c4
kernel-smp-devel-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 52a7117fefcb64944f258c5c215ae8ae168fd28d82d325107afa79985120be31
kernel-smp-devel-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 52a7117fefcb64944f258c5c215ae8ae168fd28d82d325107afa79985120be31
kernel-xenU-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 99288c6541c3083a48735d5310dcff635f8292ae9cf40f0b187e2a6d71f2a054
kernel-xenU-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 99288c6541c3083a48735d5310dcff635f8292ae9cf40f0b187e2a6d71f2a054
kernel-xenU-devel-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 2108ef4542d60bca1c7f0959e83569ba4af3851b55900f64fc9e12295cdd3d68
kernel-xenU-devel-2.6.9-78.0.31.EL.x86_64.rpm	SHA-256: 2108ef4542d60bca1c7f0959e83569ba4af3851b55900f64fc9e12295cdd3d68
ia64
kernel-2.6.9-78.0.31.EL.ia64.rpm	SHA-256: 58da6d62a0c3667d12940cc195651d6a4a4c3ddfd86ad3d213e6f7c1977ff2ec
kernel-2.6.9-78.0.31.EL.ia64.rpm	SHA-256: 58da6d62a0c3667d12940cc195651d6a4a4c3ddfd86ad3d213e6f7c1977ff2ec
kernel-devel-2.6.9-78.0.31.EL.ia64.rpm	SHA-256: 5503e01f1470c0fec215a5c96510ad89751faca15fc6ef12d574212bff8f2600
kernel-devel-2.6.9-78.0.31.EL.ia64.rpm	SHA-256: 5503e01f1470c0fec215a5c96510ad89751faca15fc6ef12d574212bff8f2600
kernel-doc-2.6.9-78.0.31.EL.noarch.rpm	SHA-256: 4fb0c599a6949bd22ee188e875ed75c4a70109cf56091cbc739cc75fdb5bd664
kernel-doc-2.6.9-78.0.31.EL.noarch.rpm	SHA-256: 4fb0c599a6949bd22ee188e875ed75c4a70109cf56091cbc739cc75fdb5bd664
kernel-largesmp-2.6.9-78.0.31.EL.ia64.rpm	SHA-256: 442d282898ae1ea229b66e43469337bee66ff0a4e2052961c4b3008532492b0c
kernel-largesmp-2.6.9-78.0.31.EL.ia64.rpm	SHA-256: 442d282898ae1ea229b66e43469337bee66ff0a4e2052961c4b3008532492b0c
kernel-largesmp-devel-2.6.9-78.0.31.EL.ia64.rpm	SHA-256: 5b247b1468e8c16f17761c73accf6382b56291ddd44d863deb32f5a66e3814de
kernel-largesmp-devel-2.6.9-78.0.31.EL.ia64.rpm	SHA-256: 5b247b1468e8c16f17761c73accf6382b56291ddd44d863deb32f5a66e3814de
i386
kernel-2.6.9-78.0.31.EL.i686.rpm	SHA-256: b5a65a477774f6fc20cdd0b32b14eff7aacea5c9818c9befb737a9eabfd38277
kernel-2.6.9-78.0.31.EL.i686.rpm	SHA-256: b5a65a477774f6fc20cdd0b32b14eff7aacea5c9818c9befb737a9eabfd38277
kernel-devel-2.6.9-78.0.31.EL.i686.rpm	SHA-256: c7b6bc3b101a51e71b0bd5e44fa6ce26c6bd36f2d4e052eab78fc320f7ca6b03
kernel-devel-2.6.9-78.0.31.EL.i686.rpm	SHA-256: c7b6bc3b101a51e71b0bd5e44fa6ce26c6bd36f2d4e052eab78fc320f7ca6b03
kernel-doc-2.6.9-78.0.31.EL.noarch.rpm	SHA-256: 4fb0c599a6949bd22ee188e875ed75c4a70109cf56091cbc739cc75fdb5bd664
kernel-doc-2.6.9-78.0.31.EL.noarch.rpm	SHA-256: 4fb0c599a6949bd22ee188e875ed75c4a70109cf56091cbc739cc75fdb5bd664
kernel-hugemem-2.6.9-78.0.31.EL.i686.rpm	SHA-256: 3b5ef7442a2abb050ce44633db0e1055beb2d65578c177a68df0680734b01182
kernel-hugemem-2.6.9-78.0.31.EL.i686.rpm	SHA-256: 3b5ef7442a2abb050ce44633db0e1055beb2d65578c177a68df0680734b01182
kernel-hugemem-devel-2.6.9-78.0.31.EL.i686.rpm	SHA-256: 8f5f3c6af2f91099c78a9b5e91d43283f925858e34a0f7dc4288f02a7faa88ff
kernel-hugemem-devel-2.6.9-78.0.31.EL.i686.rpm	SHA-256: 8f5f3c6af2f91099c78a9b5e91d43283f925858e34a0f7dc4288f02a7faa88ff
kernel-smp-2.6.9-78.0.31.EL.i686.rpm	SHA-256: fbf66ee50076a5d2ccaa2052030b18e81985263f2fed291f4d37f373697ff36e
kernel-smp-2.6.9-78.0.31.EL.i686.rpm	SHA-256: fbf66ee50076a5d2ccaa2052030b18e81985263f2fed291f4d37f373697ff36e
kernel-smp-devel-2.6.9-78.0.31.EL.i686.rpm	SHA-256: c39798e121b2263119c2a2ce098116dc885686b2a60c9b019890227d4c01cd52
kernel-smp-devel-2.6.9-78.0.31.EL.i686.rpm	SHA-256: c39798e121b2263119c2a2ce098116dc885686b2a60c9b019890227d4c01cd52
kernel-xenU-2.6.9-78.0.31.EL.i686.rpm	SHA-256: 313cadbaa9735b210e2c8df2c40d481cb7aa7a39d138cbdb7311eedccb48473f
kernel-xenU-2.6.9-78.0.31.EL.i686.rpm	SHA-256: 313cadbaa9735b210e2c8df2c40d481cb7aa7a39d138cbdb7311eedccb48473f
kernel-xenU-devel-2.6.9-78.0.31.EL.i686.rpm	SHA-256: 2ce9389cc0a0c7e6270233bc448856172aa627704011d600c56a023227cf576b
kernel-xenU-devel-2.6.9-78.0.31.EL.i686.rpm	SHA-256: 2ce9389cc0a0c7e6270233bc448856172aa627704011d600c56a023227cf576b

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7

SRPM
kernel-2.6.9-78.0.31.EL.src.rpm	SHA-256: 339a17412effad25b0bf9a129942d5b08f87fb836099bda666f1e61051976945
s390x
kernel-2.6.9-78.0.31.EL.s390x.rpm	SHA-256: 4866d5b3eac2fe746544427645531a5e67ad031e3169b87a0197d14362bf7898
kernel-devel-2.6.9-78.0.31.EL.s390x.rpm	SHA-256: e647886b5d86fb80360c3b800a0b85dc446ecea69e5e92d81d8212ede9b19b53
kernel-doc-2.6.9-78.0.31.EL.noarch.rpm	SHA-256: 4fb0c599a6949bd22ee188e875ed75c4a70109cf56091cbc739cc75fdb5bd664
s390
kernel-2.6.9-78.0.31.EL.s390.rpm	SHA-256: e1116a429eb495824b55baf149cb57fc2b40670769d36c3c5b420db5db483a1d
kernel-devel-2.6.9-78.0.31.EL.s390.rpm	SHA-256: 35d8d73082bc89bd1f9f000d829db6eadb3da35c2ed24867f7c373d2846cd21b
kernel-doc-2.6.9-78.0.31.EL.noarch.rpm	SHA-256: 4fb0c599a6949bd22ee188e875ed75c4a70109cf56091cbc739cc75fdb5bd664

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.7

SRPM
kernel-2.6.9-78.0.31.EL.src.rpm	SHA-256: 339a17412effad25b0bf9a129942d5b08f87fb836099bda666f1e61051976945
ppc
kernel-2.6.9-78.0.31.EL.ppc64.rpm	SHA-256: 818850d17fcfce71e748015b7b10157894070e03fa9ab0510efa77a99dcc8ef4
kernel-2.6.9-78.0.31.EL.ppc64iseries.rpm	SHA-256: d49a74b21975cb2fe508a47f148716e3a302a53ca3aa84609a69b499cfd05ed8
kernel-devel-2.6.9-78.0.31.EL.ppc64.rpm	SHA-256: a97fb0610d4818206daf730d86d5363a43667bc7dab4e138f66f9fccc82a3bd8
kernel-devel-2.6.9-78.0.31.EL.ppc64iseries.rpm	SHA-256: b58b18ea497949cf74e7c9af54b50df1e0338576d76a21f8c639bc581b110a88
kernel-doc-2.6.9-78.0.31.EL.noarch.rpm	SHA-256: 4fb0c599a6949bd22ee188e875ed75c4a70109cf56091cbc739cc75fdb5bd664
kernel-largesmp-2.6.9-78.0.31.EL.ppc64.rpm	SHA-256: fe7639dd2808f42eba9336ac11197278b713071538aed7b6c67dca3b6fa8f560
kernel-largesmp-devel-2.6.9-78.0.31.EL.ppc64.rpm	SHA-256: 6ff3c0f4a82224e256b1d7ce9cca92ffd43809db816185762f4d6cf1bf19a74e