Synopsis

Important: libcgroup security update

Type/Severity

Security Advisory: Important

Topic

Updated libcgroup packages that fix two security issues are now available
for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having
important security impact. Common Vulnerability Scoring System (CVSS) base
scores, which give detailed severity ratings, are available for each
vulnerability from the CVE links in the References section.

Description

The libcgroup packages provide tools and libraries to control and monitor
control groups.

A heap-based buffer overflow flaw was found in the way libcgroup converted
a list of user-provided controllers for a particular task into an array of
strings. A local attacker could use this flaw to escalate their privileges
via a specially-crafted list of controllers. (CVE-2011-1006)

It was discovered that libcgroup did not properly check the origin of
Netlink messages. A local attacker could use this flaw to send crafted
Netlink messages to the cgrulesengd daemon, causing it to put processes
into one or more existing control groups, based on the attacker's choosing,
possibly allowing the particular tasks to run with more resources (memory,
CPU, etc.) than originally intended. (CVE-2011-1022)

Red Hat would like to thank Nelson Elhage for reporting the CVE-2011-1006
issue.

All libcgroup users should upgrade to these updated packages, which contain
backported patches to correct these issues.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

• BZ - 678107 - CVE-2011-1006 libcgroup: Heap-based buffer overflow by converting list of controllers for given task into an array of strings
• BZ - 680409 - CVE-2011-1022 libcgroup: Uncheck origin of NETLINK messages

CVEs

• CVE-2011-1022
• CVE-2011-1006

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 6

SRPM
libcgroup-0.36.1-6.el6_0.1.src.rpm	SHA-256: b9203a89791d71b1282b75f04eca2cdb2f1ca7597ed9f64f3ac3d42af0037518
x86_64
libcgroup-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 7274e33b180f93bb1d26eab5c3144dc00875f15d7fb26d4a8a7bc3782655424e
libcgroup-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 52ba7e0b8e46ddf2efbc78d1a890cd4ccbb79ffabf1cbbcf2e6a51bba2133b07
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 886c44c98839260fe55a80c8172e3f2f91e6681ed7ae65318597c49f74c55e5b
libcgroup-debuginfo-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 886c44c98839260fe55a80c8172e3f2f91e6681ed7ae65318597c49f74c55e5b
libcgroup-devel-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 9fe10284dd885dfc1e6b7ed4e7e7e0d25c4ba315a2dc6481dcaaac2ea2666d72
libcgroup-devel-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 2c88acf5377a3d103e46358d6730227ab354619dc49544ff23cf6f20abb62303
libcgroup-pam-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 721534dd591d884ab0a6ad67648503223d261fe92a5cc3fdab102c79359347fe
libcgroup-pam-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 753843b27f86a54a85bbc9c700b14806a4dd11aa7347954211ddcf4449bdef09
i386
libcgroup-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 7274e33b180f93bb1d26eab5c3144dc00875f15d7fb26d4a8a7bc3782655424e
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-devel-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 9fe10284dd885dfc1e6b7ed4e7e7e0d25c4ba315a2dc6481dcaaac2ea2666d72
libcgroup-pam-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 721534dd591d884ab0a6ad67648503223d261fe92a5cc3fdab102c79359347fe

Red Hat Enterprise Linux Workstation 6

SRPM
libcgroup-0.36.1-6.el6_0.1.src.rpm	SHA-256: b9203a89791d71b1282b75f04eca2cdb2f1ca7597ed9f64f3ac3d42af0037518
x86_64
libcgroup-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 7274e33b180f93bb1d26eab5c3144dc00875f15d7fb26d4a8a7bc3782655424e
libcgroup-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 52ba7e0b8e46ddf2efbc78d1a890cd4ccbb79ffabf1cbbcf2e6a51bba2133b07
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 886c44c98839260fe55a80c8172e3f2f91e6681ed7ae65318597c49f74c55e5b
libcgroup-debuginfo-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 886c44c98839260fe55a80c8172e3f2f91e6681ed7ae65318597c49f74c55e5b
libcgroup-devel-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 9fe10284dd885dfc1e6b7ed4e7e7e0d25c4ba315a2dc6481dcaaac2ea2666d72
libcgroup-devel-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 2c88acf5377a3d103e46358d6730227ab354619dc49544ff23cf6f20abb62303
libcgroup-pam-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 721534dd591d884ab0a6ad67648503223d261fe92a5cc3fdab102c79359347fe
libcgroup-pam-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 753843b27f86a54a85bbc9c700b14806a4dd11aa7347954211ddcf4449bdef09
i386
libcgroup-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 7274e33b180f93bb1d26eab5c3144dc00875f15d7fb26d4a8a7bc3782655424e
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-devel-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 9fe10284dd885dfc1e6b7ed4e7e7e0d25c4ba315a2dc6481dcaaac2ea2666d72
libcgroup-pam-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 721534dd591d884ab0a6ad67648503223d261fe92a5cc3fdab102c79359347fe

Red Hat Enterprise Linux Desktop 6

SRPM
libcgroup-0.36.1-6.el6_0.1.src.rpm	SHA-256: b9203a89791d71b1282b75f04eca2cdb2f1ca7597ed9f64f3ac3d42af0037518
x86_64
libcgroup-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 7274e33b180f93bb1d26eab5c3144dc00875f15d7fb26d4a8a7bc3782655424e
libcgroup-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 52ba7e0b8e46ddf2efbc78d1a890cd4ccbb79ffabf1cbbcf2e6a51bba2133b07
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 886c44c98839260fe55a80c8172e3f2f91e6681ed7ae65318597c49f74c55e5b
libcgroup-debuginfo-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 886c44c98839260fe55a80c8172e3f2f91e6681ed7ae65318597c49f74c55e5b
libcgroup-devel-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 9fe10284dd885dfc1e6b7ed4e7e7e0d25c4ba315a2dc6481dcaaac2ea2666d72
libcgroup-devel-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 2c88acf5377a3d103e46358d6730227ab354619dc49544ff23cf6f20abb62303
libcgroup-pam-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 721534dd591d884ab0a6ad67648503223d261fe92a5cc3fdab102c79359347fe
libcgroup-pam-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 753843b27f86a54a85bbc9c700b14806a4dd11aa7347954211ddcf4449bdef09
i386
libcgroup-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 7274e33b180f93bb1d26eab5c3144dc00875f15d7fb26d4a8a7bc3782655424e
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-devel-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 9fe10284dd885dfc1e6b7ed4e7e7e0d25c4ba315a2dc6481dcaaac2ea2666d72
libcgroup-pam-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 721534dd591d884ab0a6ad67648503223d261fe92a5cc3fdab102c79359347fe

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
libcgroup-0.36.1-6.el6_0.1.src.rpm	SHA-256: b9203a89791d71b1282b75f04eca2cdb2f1ca7597ed9f64f3ac3d42af0037518
s390x
libcgroup-0.36.1-6.el6_0.1.s390.rpm	SHA-256: 3037a1bce29b7bf656d4e15ad82d9924d01c8ad6e8e2d25e324adf72fd32834e
libcgroup-0.36.1-6.el6_0.1.s390x.rpm	SHA-256: 360815aadb86459aa99922f4dd059b7166e0374c6a573b123733935616bb2564
libcgroup-debuginfo-0.36.1-6.el6_0.1.s390.rpm	SHA-256: 326fce5d4af8283fc7df4f043c1caceaabc414e9529630d609d44827b1dced6a
libcgroup-debuginfo-0.36.1-6.el6_0.1.s390.rpm	SHA-256: 326fce5d4af8283fc7df4f043c1caceaabc414e9529630d609d44827b1dced6a
libcgroup-debuginfo-0.36.1-6.el6_0.1.s390x.rpm	SHA-256: 2c73e94de32350bd4fd08f8ec0a3b8c4a556a9e099e5bfc5b0724311f97a037f
libcgroup-debuginfo-0.36.1-6.el6_0.1.s390x.rpm	SHA-256: 2c73e94de32350bd4fd08f8ec0a3b8c4a556a9e099e5bfc5b0724311f97a037f
libcgroup-devel-0.36.1-6.el6_0.1.s390.rpm	SHA-256: e4e37f5a4b39592aceb664ba5dbb4d8e61939baa0f4dcef0d7af99ee055e5c9e
libcgroup-devel-0.36.1-6.el6_0.1.s390x.rpm	SHA-256: 4e2f8b6cf8f74dbfe98ee1674fd952d16e53ccc6394ed663b30084c957365580
libcgroup-pam-0.36.1-6.el6_0.1.s390.rpm	SHA-256: 3e33e375821975a9a341f0b3cbfecb62eb05c72480471d4a825d40f469c8d657
libcgroup-pam-0.36.1-6.el6_0.1.s390x.rpm	SHA-256: 80ae12d14ec27e2d4612720bfdcabc9d60a7ca90b17400309f502ce65a50e9b7

Red Hat Enterprise Linux for Power, big endian 6

SRPM
libcgroup-0.36.1-6.el6_0.1.src.rpm	SHA-256: b9203a89791d71b1282b75f04eca2cdb2f1ca7597ed9f64f3ac3d42af0037518
ppc64
libcgroup-0.36.1-6.el6_0.1.ppc.rpm	SHA-256: cc893a813d1eeb026747a26a296f69eca5f24e9e349f67119b266522906e210f
libcgroup-0.36.1-6.el6_0.1.ppc64.rpm	SHA-256: 7a065b72b71ef3926f01ef44505a81f10f1a06a589dea6fc41cc76d55b49a4df
libcgroup-debuginfo-0.36.1-6.el6_0.1.ppc.rpm	SHA-256: 5a58017c13bde0a1ebef4dc921290bd3fa4533b0a5315ac5fed6d4e5b43a8645
libcgroup-debuginfo-0.36.1-6.el6_0.1.ppc.rpm	SHA-256: 5a58017c13bde0a1ebef4dc921290bd3fa4533b0a5315ac5fed6d4e5b43a8645
libcgroup-debuginfo-0.36.1-6.el6_0.1.ppc64.rpm	SHA-256: 8a516822ed61e338d98c71033b5f25eb2ec42bb37b1fbcfe57fd5b7d09606e00
libcgroup-debuginfo-0.36.1-6.el6_0.1.ppc64.rpm	SHA-256: 8a516822ed61e338d98c71033b5f25eb2ec42bb37b1fbcfe57fd5b7d09606e00
libcgroup-devel-0.36.1-6.el6_0.1.ppc.rpm	SHA-256: 0d9a2f9a6c34752b1de43ee9318f3629fbecb2bc06021a740b3c2fdfb4263c29
libcgroup-devel-0.36.1-6.el6_0.1.ppc64.rpm	SHA-256: b41021ab8baef8b984e8c1ef84c2a071277a6fb66926e952ae3ac20d18007d75
libcgroup-pam-0.36.1-6.el6_0.1.ppc.rpm	SHA-256: d016b93de63e1614666b8ce01b8b2fc0e2f05e01c7e8fd16bf1ef264c861fb1a
libcgroup-pam-0.36.1-6.el6_0.1.ppc64.rpm	SHA-256: 09fbff09bf5c33880d8b305c6e2407482135413e1fdffbfea8cc795f0eb311c2

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
libcgroup-0.36.1-6.el6_0.1.src.rpm	SHA-256: b9203a89791d71b1282b75f04eca2cdb2f1ca7597ed9f64f3ac3d42af0037518
x86_64
libcgroup-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 7274e33b180f93bb1d26eab5c3144dc00875f15d7fb26d4a8a7bc3782655424e
libcgroup-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 52ba7e0b8e46ddf2efbc78d1a890cd4ccbb79ffabf1cbbcf2e6a51bba2133b07
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 886c44c98839260fe55a80c8172e3f2f91e6681ed7ae65318597c49f74c55e5b
libcgroup-debuginfo-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 886c44c98839260fe55a80c8172e3f2f91e6681ed7ae65318597c49f74c55e5b
libcgroup-devel-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 9fe10284dd885dfc1e6b7ed4e7e7e0d25c4ba315a2dc6481dcaaac2ea2666d72
libcgroup-devel-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 2c88acf5377a3d103e46358d6730227ab354619dc49544ff23cf6f20abb62303
libcgroup-pam-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 721534dd591d884ab0a6ad67648503223d261fe92a5cc3fdab102c79359347fe
libcgroup-pam-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 753843b27f86a54a85bbc9c700b14806a4dd11aa7347954211ddcf4449bdef09

Red Hat Enterprise Linux Server from RHUI 6

SRPM
libcgroup-0.36.1-6.el6_0.1.src.rpm	SHA-256: b9203a89791d71b1282b75f04eca2cdb2f1ca7597ed9f64f3ac3d42af0037518
x86_64
libcgroup-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 7274e33b180f93bb1d26eab5c3144dc00875f15d7fb26d4a8a7bc3782655424e
libcgroup-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 52ba7e0b8e46ddf2efbc78d1a890cd4ccbb79ffabf1cbbcf2e6a51bba2133b07
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 886c44c98839260fe55a80c8172e3f2f91e6681ed7ae65318597c49f74c55e5b
libcgroup-debuginfo-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 886c44c98839260fe55a80c8172e3f2f91e6681ed7ae65318597c49f74c55e5b
libcgroup-devel-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 9fe10284dd885dfc1e6b7ed4e7e7e0d25c4ba315a2dc6481dcaaac2ea2666d72
libcgroup-devel-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 2c88acf5377a3d103e46358d6730227ab354619dc49544ff23cf6f20abb62303
libcgroup-pam-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 721534dd591d884ab0a6ad67648503223d261fe92a5cc3fdab102c79359347fe
libcgroup-pam-0.36.1-6.el6_0.1.x86_64.rpm	SHA-256: 753843b27f86a54a85bbc9c700b14806a4dd11aa7347954211ddcf4449bdef09
i386
libcgroup-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 7274e33b180f93bb1d26eab5c3144dc00875f15d7fb26d4a8a7bc3782655424e
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-debuginfo-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 499a86eba6974cfb9e8febbe1b7cc8d611eca30f07b429225dc34f8c3afc780a
libcgroup-devel-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 9fe10284dd885dfc1e6b7ed4e7e7e0d25c4ba315a2dc6481dcaaac2ea2666d72
libcgroup-pam-0.36.1-6.el6_0.1.i686.rpm	SHA-256: 721534dd591d884ab0a6ad67648503223d261fe92a5cc3fdab102c79359347fe