Synopsis

Important: kernel security and bug fix update

Type/Severity

Security Advisory: Important

Topic

An update for kernel is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• The NFSv2 and NFSv3 server implementations in the Linux kernel through 4.10.13 lacked certain checks for the end of a buffer. A remote attacker could trigger a pointer-arithmetic error or possibly cause other unspecified impacts using crafted requests related to fs/nfsd/nfs3xdr.c and fs/nfsd/nfsxdr.c. (CVE-2017-7895, Important)
  

Red Hat would like to thank Ari Kauppi for reporting this issue.

Bug Fix(es):

• When upgrading to kernel with the fix for stack guard flaw, a crash could occur in Java Virtual Machine (JVM) environments, which attempted to implement their own stack guard page. With this update, the underlying source code has been fixed to consider the PROT_NONE mapping as a part of the stack, and the crash in JVM no longer occurs under the described circumstances. (BZ#1467938)

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server - Extended Life Cycle Support 5 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 5 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 5 s390x

Fixes

• BZ - 1446103 - CVE-2017-7895 kernel: NFSv3 server does not properly handle payload bounds checking of WRITE requests

CVEs

• CVE-2017-7895

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - Extended Life Cycle Support 5

SRPM
kernel-2.6.18-422.el5.src.rpm	SHA-256: 56a4c5afe77fa61ae3c625fa4c8a9f5e93466bede9553e210222e5a899aee81c
x86_64
kernel-2.6.18-422.el5.x86_64.rpm	SHA-256: 086fb745708cc9cdc1b32da901fa4b45464562f44ebdefb9a30ebeaa9980b1f0
kernel-debug-2.6.18-422.el5.x86_64.rpm	SHA-256: 0da45bf4e384d1f7658bd1aeadc3e401ef36299d68a6692e09d5d6a84e30db16
kernel-debug-debuginfo-2.6.18-422.el5.x86_64.rpm	SHA-256: e616d1824a3179b5819d63645cefd6af340c9153a37d6f8e0e5acc7e86e65aaa
kernel-debug-devel-2.6.18-422.el5.x86_64.rpm	SHA-256: acf1088c8aeb81976cbdbd5df14f690d5183406c6fbb310389387b82b1938fb8
kernel-debuginfo-2.6.18-422.el5.x86_64.rpm	SHA-256: 666bb5c3baa80a74a8e4dabb54b67aa1aaa3d52f114de8b6798fa1d551d41885
kernel-debuginfo-common-2.6.18-422.el5.x86_64.rpm	SHA-256: 5020d8d65476401f4db9d8d302539f5e65fcee4d77a059928362016d238f84fe
kernel-devel-2.6.18-422.el5.x86_64.rpm	SHA-256: d2b5c56e5a5b6c70c99e9492477f2c44d6f923d58309a5d6649af52bc2d9869a
kernel-doc-2.6.18-422.el5.noarch.rpm	SHA-256: 339833d44e4579ac33282755bb64158eefaf806c8a4fdbefa574232c30e5e09f
kernel-headers-2.6.18-422.el5.x86_64.rpm	SHA-256: 030dd1a0011aded31f37ffa18fa4d76a346e1f2a6ac3ad2174a8054c3d37c09e
kernel-xen-2.6.18-422.el5.x86_64.rpm	SHA-256: 90517a3391ac5f4a22bf350013d1fd44907ebe078a098583b662efffc961ff8a
kernel-xen-debuginfo-2.6.18-422.el5.x86_64.rpm	SHA-256: 1ec88fc2ba14ef0a888a5714e069d8fe236d3303b708bb59fa027658b0e686c7
kernel-xen-devel-2.6.18-422.el5.x86_64.rpm	SHA-256: 1a71174dd32410dc6f7332d6fc907eb9263c5637243913f0e9c8d3a7e8d2e606
i386
kernel-2.6.18-422.el5.i686.rpm	SHA-256: 8f7073549af3ca1dad346d9b0d929fec60f8efd851e1518fc351b1f828f9b207
kernel-PAE-2.6.18-422.el5.i686.rpm	SHA-256: 2ce28ba17d1a758527517a2d7e141a982d37cf1db6d16ecfe8031efe7c8d7e15
kernel-PAE-debuginfo-2.6.18-422.el5.i686.rpm	SHA-256: 033bf3268968ee070864297933e1d3cb7ded17de57a7cb874cb966b98fc02f9b
kernel-PAE-devel-2.6.18-422.el5.i686.rpm	SHA-256: 30459d966439452495335fe5219b3ae1abb030c38069610a4fd589b715e43f06
kernel-debug-2.6.18-422.el5.i686.rpm	SHA-256: 85c170a99750057fdefe242d0b4ddf1845f70946c530ddda3783b5afd4e7450d
kernel-debug-debuginfo-2.6.18-422.el5.i686.rpm	SHA-256: d086fae29b7290b2dd87e46a1f507e90c0702312f9848547f7b23aead2388b1c
kernel-debug-devel-2.6.18-422.el5.i686.rpm	SHA-256: ffdd1be296a06ef8143e0b59f3aa669f9043bc9e0df0791fe15c3f6267c96387
kernel-debuginfo-2.6.18-422.el5.i686.rpm	SHA-256: 1a822548466093d6ef3a30603462d74d8f6eeb2da5fd8154c400279e80e908c1
kernel-debuginfo-common-2.6.18-422.el5.i686.rpm	SHA-256: 8f520270b6648cfef9d76f3fe087b1ab0b77bb264ce3b7009da05e338a0a63b1
kernel-devel-2.6.18-422.el5.i686.rpm	SHA-256: 4d0b352204e771f2bffcfae327d438e824cb5b23715eb349cc613292101c0d5e
kernel-doc-2.6.18-422.el5.noarch.rpm	SHA-256: 339833d44e4579ac33282755bb64158eefaf806c8a4fdbefa574232c30e5e09f
kernel-headers-2.6.18-422.el5.i386.rpm	SHA-256: 4ce8647f3d3fade3e7f35ccf049c5df072104a8fe69037eca395c56dd153f560
kernel-xen-2.6.18-422.el5.i686.rpm	SHA-256: 63d067e64741e856f65861148a3ae0160bb69f94d5f991038c662f51f7daae7a
kernel-xen-debuginfo-2.6.18-422.el5.i686.rpm	SHA-256: 042e3b22129ac2d5c10530a8198bcbbf70ed4a84b8a006e7529443bab90ef3d8
kernel-xen-devel-2.6.18-422.el5.i686.rpm	SHA-256: e9f91e2e859895622dfe393f37960359bacbc16aa98a9901924f4e2d190c9ad1

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 5

SRPM
kernel-2.6.18-422.el5.src.rpm	SHA-256: 56a4c5afe77fa61ae3c625fa4c8a9f5e93466bede9553e210222e5a899aee81c
s390x
kernel-2.6.18-422.el5.s390x.rpm	SHA-256: 34af3f6a299441a3caab2270e46c9a618e1471234445d4b0013eb5272c2e2281
kernel-debug-2.6.18-422.el5.s390x.rpm	SHA-256: a2154c9a9ae4aecee70882cc4c92b24b1efd503b417be98230176e222a2b8dbc
kernel-debug-debuginfo-2.6.18-422.el5.s390x.rpm	SHA-256: 6c20549236fb95b36cc598ae870410dd26607f2b58bd88fec5bbc2ad3c878114
kernel-debug-devel-2.6.18-422.el5.s390x.rpm	SHA-256: 9f0db2e3411fc51d8f1782e79ecef96fb260e163be7614c58e6d1c38e8c1aabf
kernel-debuginfo-2.6.18-422.el5.s390x.rpm	SHA-256: a2f6a3cb9fb801d1863545e249d6aa27f90f4e8a8b30145983240f279751ff03
kernel-debuginfo-common-2.6.18-422.el5.s390x.rpm	SHA-256: be65c6e1498e3a79d6c3627f6a95c0b82f8f7e4afff8988957f68509d276cb89
kernel-devel-2.6.18-422.el5.s390x.rpm	SHA-256: a27bc9e21c54a677f5f67d8d77efa19f73b11f3078500795c7d817bc5f368326
kernel-doc-2.6.18-422.el5.noarch.rpm	SHA-256: 339833d44e4579ac33282755bb64158eefaf806c8a4fdbefa574232c30e5e09f
kernel-headers-2.6.18-422.el5.s390x.rpm	SHA-256: a26ad541a13c737b5256ccedfe678900d12db5de5795211732b7ef6f55dcdef6
kernel-kdump-2.6.18-422.el5.s390x.rpm	SHA-256: b8b37240756e3cdce04615454720851f339f84cb8071f2f52b76fb2ec74ac3a2
kernel-kdump-debuginfo-2.6.18-422.el5.s390x.rpm	SHA-256: b4afd0d6678b8e8e12b98daed67bbce1df6cc56f03fcbe2412998602c6da1675
kernel-kdump-devel-2.6.18-422.el5.s390x.rpm	SHA-256: 0143a2d266497618c168ae885f82760232614bc969f4d103184e404ea67ae767