Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

An update for kernel is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support and Red Hat Enterprise Linux 6.6 Telco Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lacked certain checks for the end of a buffer. A remote attacker could trigger a pointer-arithmetic error or possibly cause other unspecified impacts using crafted requests related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c. (CVE-2017-7895, Important)
  

Red Hat would like to thank Ari Kauppi for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server - AUS 6.6 x86_64
• Red Hat Enterprise Linux Server - TUS 6.6 x86_64

Fixes

• BZ - 1446103 - CVE-2017-7895 kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests

CVEs

• CVE-2017-7895

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - AUS 6.6

SRPM
kernel-2.6.32-504.62.1.el6.src.rpm	SHA-256: b17d68fd6342d0385ec27c67faf4008bb87b4920c16e5e8acaf3b5ffcaf535d5
x86_64
kernel-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 6e2f4bbbb55b30de4c46d0eeec6857bec85dbd2ce5870bce118894e4fa2782d0
kernel-abi-whitelists-2.6.32-504.62.1.el6.noarch.rpm	SHA-256: ce33419780696e6df88d890e54317cb56c1f8e31f2c46e4b970f22aa702223fa
kernel-debug-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 7795ee3ff0e0df5df6708dd39e0940af33797b54339cb39ef7964db120e85379
kernel-debug-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 5448d9ca617cc6735ed40122b2a253c7727b7daf1f5ceb5eb82b1a4625146db6
kernel-debug-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 5448d9ca617cc6735ed40122b2a253c7727b7daf1f5ceb5eb82b1a4625146db6
kernel-debug-devel-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: dbaf4a614774b42e3ead49886ef72a4693ffdb6017ce00f67f7463c0d36a664e
kernel-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: b79b255a07adc41a4adf30ebdc21340447e43e84f712ef9f9693cbef60e2923a
kernel-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: b79b255a07adc41a4adf30ebdc21340447e43e84f712ef9f9693cbef60e2923a
kernel-debuginfo-common-x86_64-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 5e52d99620c83d8f1419a1ace2b2d4af8dccf9b29e6f1c80753484376be2c370
kernel-debuginfo-common-x86_64-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 5e52d99620c83d8f1419a1ace2b2d4af8dccf9b29e6f1c80753484376be2c370
kernel-devel-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: f0975ca39f828657e5d85b374c16fc9e570f607a38e5a97655c874f9cf126a75
kernel-doc-2.6.32-504.62.1.el6.noarch.rpm	SHA-256: f433f89863da63b9fde58b9929fd04933b824d94007f7dace8f7b805041f36ce
kernel-firmware-2.6.32-504.62.1.el6.noarch.rpm	SHA-256: e135f54a425a931eba8756c17b3b14bfd73c137a602d56319c97362b192ad0fa
kernel-headers-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 3e28a3f7137191e558b01f6ccc5d414c05b57fc76cef9788eadef987eb39711c
perf-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 2778d1267a0550aa4b31e9eed39d9972b3daa3e7e857351b5b838a7a7bb66c46
perf-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: df71b418379e294e6fa8e6d11e5d9336cffaf7fdd38a4c3ab1c02649834c1cc6
perf-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: df71b418379e294e6fa8e6d11e5d9336cffaf7fdd38a4c3ab1c02649834c1cc6
python-perf-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: faca908b7c41df190ea4e6866be574ff8b4339e4452614c7ce4f6b7cb231084c
python-perf-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 59b13fc2967f77ce0c64ccc7d86ff72e7f79ac3dbcaea9b06a7fd840cd0aa933
python-perf-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 59b13fc2967f77ce0c64ccc7d86ff72e7f79ac3dbcaea9b06a7fd840cd0aa933

Red Hat Enterprise Linux Server - TUS 6.6

SRPM
kernel-2.6.32-504.62.1.el6.src.rpm	SHA-256: b17d68fd6342d0385ec27c67faf4008bb87b4920c16e5e8acaf3b5ffcaf535d5
x86_64
kernel-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 6e2f4bbbb55b30de4c46d0eeec6857bec85dbd2ce5870bce118894e4fa2782d0
kernel-abi-whitelists-2.6.32-504.62.1.el6.noarch.rpm	SHA-256: ce33419780696e6df88d890e54317cb56c1f8e31f2c46e4b970f22aa702223fa
kernel-debug-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 7795ee3ff0e0df5df6708dd39e0940af33797b54339cb39ef7964db120e85379
kernel-debug-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 5448d9ca617cc6735ed40122b2a253c7727b7daf1f5ceb5eb82b1a4625146db6
kernel-debug-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 5448d9ca617cc6735ed40122b2a253c7727b7daf1f5ceb5eb82b1a4625146db6
kernel-debug-devel-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: dbaf4a614774b42e3ead49886ef72a4693ffdb6017ce00f67f7463c0d36a664e
kernel-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: b79b255a07adc41a4adf30ebdc21340447e43e84f712ef9f9693cbef60e2923a
kernel-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: b79b255a07adc41a4adf30ebdc21340447e43e84f712ef9f9693cbef60e2923a
kernel-debuginfo-common-x86_64-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 5e52d99620c83d8f1419a1ace2b2d4af8dccf9b29e6f1c80753484376be2c370
kernel-debuginfo-common-x86_64-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 5e52d99620c83d8f1419a1ace2b2d4af8dccf9b29e6f1c80753484376be2c370
kernel-devel-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: f0975ca39f828657e5d85b374c16fc9e570f607a38e5a97655c874f9cf126a75
kernel-doc-2.6.32-504.62.1.el6.noarch.rpm	SHA-256: f433f89863da63b9fde58b9929fd04933b824d94007f7dace8f7b805041f36ce
kernel-firmware-2.6.32-504.62.1.el6.noarch.rpm	SHA-256: e135f54a425a931eba8756c17b3b14bfd73c137a602d56319c97362b192ad0fa
kernel-headers-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 3e28a3f7137191e558b01f6ccc5d414c05b57fc76cef9788eadef987eb39711c
perf-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 2778d1267a0550aa4b31e9eed39d9972b3daa3e7e857351b5b838a7a7bb66c46
perf-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: df71b418379e294e6fa8e6d11e5d9336cffaf7fdd38a4c3ab1c02649834c1cc6
perf-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: df71b418379e294e6fa8e6d11e5d9336cffaf7fdd38a4c3ab1c02649834c1cc6
python-perf-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: faca908b7c41df190ea4e6866be574ff8b4339e4452614c7ce4f6b7cb231084c
python-perf-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 59b13fc2967f77ce0c64ccc7d86ff72e7f79ac3dbcaea9b06a7fd840cd0aa933
python-perf-debuginfo-2.6.32-504.62.1.el6.x86_64.rpm	SHA-256: 59b13fc2967f77ce0c64ccc7d86ff72e7f79ac3dbcaea9b06a7fd840cd0aa933