Red Hat Product Errata RHSA-2019:1944 - Security Advisory
Issued:
2019-07-30
Updated:
2019-07-30

RHSA-2019:1944 - Security Advisory

Synopsis

Important: procps-ng security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for procps-ng is now available for Red Hat Enterprise Linux 7.4 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The procps-ng packages contain a set of system utilities that provide system information, including ps, free, skill, pkill, pgrep, snice, tload, top, uptime, vmstat, w, watch, and pwdx.

Security Fix(es):

  • procps-ng, procps: Integer overflows leading to heap overflow in file2strvec (CVE-2018-1124)
  • procps-ng, procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues (CVE-2018-1126)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
  • Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
  • Red Hat Enterprise Linux Server - AUS 7.4 x86_64
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
  • Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4 ppc64le
  • Red Hat Enterprise Linux Server - TUS 7.4 x86_64
  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.4 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64

Fixes

  • BZ - 1575465 - CVE-2018-1124 procps-ng, procps: Integer overflows leading to heap overflow in file2strvec
  • BZ - 1575853 - CVE-2018-1126 procps-ng, procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4

SRPM
procps-ng-3.3.10-16.el7_4.1.src.rpm SHA-256: 811ba10e64427404b9ee8a247c510f8a18de59bba1591da956b39984ecf45347
x86_64
procps-ng-3.3.10-16.el7_4.1.i686.rpm SHA-256: 9430d2f4243284132d40c3f1cf48ed505f74e9ce5f0379e2d452132e73442651
procps-ng-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: df2bb803c2bcc156e046e53c55bcc7f156c215f902bf22f96868b0965e807cc3
procps-ng-debuginfo-3.3.10-16.el7_4.1.i686.rpm SHA-256: b826eac0cd942c3232abd36112a605d0d4f1171c81afd671acc9d0d57d643a4e
procps-ng-debuginfo-3.3.10-16.el7_4.1.i686.rpm SHA-256: b826eac0cd942c3232abd36112a605d0d4f1171c81afd671acc9d0d57d643a4e
procps-ng-debuginfo-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: c4c1a511746f49c86a6219c1a25c09aa810733be070a3a0e1ff93ec55da17d6f
procps-ng-debuginfo-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: c4c1a511746f49c86a6219c1a25c09aa810733be070a3a0e1ff93ec55da17d6f
procps-ng-devel-3.3.10-16.el7_4.1.i686.rpm SHA-256: 0831ac7b2682ccf833de3a087bffbc3a1a1e0fc36049bf2c82d3be16aedfe4cf
procps-ng-devel-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: a76a8f398e60804070b84b9337782689ddba12d6d6ed92addd9d9969e01c5bff
procps-ng-i18n-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: 4111a1f506e81735248649eb4582403318c7b4db921089dbf5593d1e712293d1

Red Hat Enterprise Linux Server - AUS 7.4

SRPM
procps-ng-3.3.10-16.el7_4.1.src.rpm SHA-256: 811ba10e64427404b9ee8a247c510f8a18de59bba1591da956b39984ecf45347
x86_64
procps-ng-3.3.10-16.el7_4.1.i686.rpm SHA-256: 9430d2f4243284132d40c3f1cf48ed505f74e9ce5f0379e2d452132e73442651
procps-ng-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: df2bb803c2bcc156e046e53c55bcc7f156c215f902bf22f96868b0965e807cc3
procps-ng-debuginfo-3.3.10-16.el7_4.1.i686.rpm SHA-256: b826eac0cd942c3232abd36112a605d0d4f1171c81afd671acc9d0d57d643a4e
procps-ng-debuginfo-3.3.10-16.el7_4.1.i686.rpm SHA-256: b826eac0cd942c3232abd36112a605d0d4f1171c81afd671acc9d0d57d643a4e
procps-ng-debuginfo-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: c4c1a511746f49c86a6219c1a25c09aa810733be070a3a0e1ff93ec55da17d6f
procps-ng-debuginfo-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: c4c1a511746f49c86a6219c1a25c09aa810733be070a3a0e1ff93ec55da17d6f
procps-ng-devel-3.3.10-16.el7_4.1.i686.rpm SHA-256: 0831ac7b2682ccf833de3a087bffbc3a1a1e0fc36049bf2c82d3be16aedfe4cf
procps-ng-devel-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: a76a8f398e60804070b84b9337782689ddba12d6d6ed92addd9d9969e01c5bff
procps-ng-i18n-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: 4111a1f506e81735248649eb4582403318c7b4db921089dbf5593d1e712293d1

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4

SRPM
procps-ng-3.3.10-16.el7_4.1.src.rpm SHA-256: 811ba10e64427404b9ee8a247c510f8a18de59bba1591da956b39984ecf45347
s390x
procps-ng-3.3.10-16.el7_4.1.s390.rpm SHA-256: 081c61f225d0d83805825ba2437651b707682d1d9ecfd1bdf59aa37b19f29af6
procps-ng-3.3.10-16.el7_4.1.s390x.rpm SHA-256: 7e417744f020b4327f43ef90c2671be2f9f3159d205ff96290511fe117904be6
procps-ng-debuginfo-3.3.10-16.el7_4.1.s390.rpm SHA-256: b520fb93cda2fc66e23ab1ce12a4cf0dbb20541f684903ca828d218149cfb583
procps-ng-debuginfo-3.3.10-16.el7_4.1.s390.rpm SHA-256: b520fb93cda2fc66e23ab1ce12a4cf0dbb20541f684903ca828d218149cfb583
procps-ng-debuginfo-3.3.10-16.el7_4.1.s390x.rpm SHA-256: d4e99d9220aedfeff7b13ff95a7cbe7472edbcd2c31435b8bf6972c781384c68
procps-ng-debuginfo-3.3.10-16.el7_4.1.s390x.rpm SHA-256: d4e99d9220aedfeff7b13ff95a7cbe7472edbcd2c31435b8bf6972c781384c68
procps-ng-devel-3.3.10-16.el7_4.1.s390.rpm SHA-256: dce4b6e1f7df8e556214b1321e0303ed51cd2032318bf8f2a6b9560f6fe96d07
procps-ng-devel-3.3.10-16.el7_4.1.s390x.rpm SHA-256: 7c7944e1489f4c5e00731929602f6ea47be23ce29a10b98ca8618cc8f7a4a710
procps-ng-i18n-3.3.10-16.el7_4.1.s390x.rpm SHA-256: 11c4ab82acd585e7f38a5c5c3f05eca4b8dae3afa4bc816d9377ed50c9bd0feb

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4

SRPM
procps-ng-3.3.10-16.el7_4.1.src.rpm SHA-256: 811ba10e64427404b9ee8a247c510f8a18de59bba1591da956b39984ecf45347
ppc64
procps-ng-3.3.10-16.el7_4.1.ppc.rpm SHA-256: e8d7ec9b98d005eefefcdf08510656325969503f84dd2bb7cd7f56e70f9a7213
procps-ng-3.3.10-16.el7_4.1.ppc64.rpm SHA-256: 3e0e46cf03f8aa1df79c4a132a68ef9659ac5635bcb7109c97ca56700a131639
procps-ng-debuginfo-3.3.10-16.el7_4.1.ppc.rpm SHA-256: 91e71af1e8f06c0d5040aff1ebff2cfdca53ff2ce61d352911e1a76a8888cd76
procps-ng-debuginfo-3.3.10-16.el7_4.1.ppc.rpm SHA-256: 91e71af1e8f06c0d5040aff1ebff2cfdca53ff2ce61d352911e1a76a8888cd76
procps-ng-debuginfo-3.3.10-16.el7_4.1.ppc64.rpm SHA-256: 2b88116f3a6203b3b18e60607d17c34fef3dc6c26a09dfc9b0d212b013becd8c
procps-ng-debuginfo-3.3.10-16.el7_4.1.ppc64.rpm SHA-256: 2b88116f3a6203b3b18e60607d17c34fef3dc6c26a09dfc9b0d212b013becd8c
procps-ng-devel-3.3.10-16.el7_4.1.ppc.rpm SHA-256: 72cf9c4e6a10af532ca80d1c51bc9c72d3c5381a250eb36e3efac7f348c9a1b8
procps-ng-devel-3.3.10-16.el7_4.1.ppc64.rpm SHA-256: 7d6cfb8495431d4bbe5143db00bf2be04ee0f374f19e245bccd94c66cb168495
procps-ng-i18n-3.3.10-16.el7_4.1.ppc64.rpm SHA-256: 368be201dc47da3d15356f510a9311fc169d9c959ff65c9881376af61a58a359

Red Hat Enterprise Linux EUS Compute Node 7.4

SRPM
procps-ng-3.3.10-16.el7_4.1.src.rpm SHA-256: 811ba10e64427404b9ee8a247c510f8a18de59bba1591da956b39984ecf45347
x86_64
procps-ng-3.3.10-16.el7_4.1.i686.rpm SHA-256: 9430d2f4243284132d40c3f1cf48ed505f74e9ce5f0379e2d452132e73442651
procps-ng-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: df2bb803c2bcc156e046e53c55bcc7f156c215f902bf22f96868b0965e807cc3
procps-ng-debuginfo-3.3.10-16.el7_4.1.i686.rpm SHA-256: b826eac0cd942c3232abd36112a605d0d4f1171c81afd671acc9d0d57d643a4e
procps-ng-debuginfo-3.3.10-16.el7_4.1.i686.rpm SHA-256: b826eac0cd942c3232abd36112a605d0d4f1171c81afd671acc9d0d57d643a4e
procps-ng-debuginfo-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: c4c1a511746f49c86a6219c1a25c09aa810733be070a3a0e1ff93ec55da17d6f
procps-ng-debuginfo-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: c4c1a511746f49c86a6219c1a25c09aa810733be070a3a0e1ff93ec55da17d6f
procps-ng-devel-3.3.10-16.el7_4.1.i686.rpm SHA-256: 0831ac7b2682ccf833de3a087bffbc3a1a1e0fc36049bf2c82d3be16aedfe4cf
procps-ng-devel-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: a76a8f398e60804070b84b9337782689ddba12d6d6ed92addd9d9969e01c5bff
procps-ng-i18n-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: 4111a1f506e81735248649eb4582403318c7b4db921089dbf5593d1e712293d1

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4

SRPM
procps-ng-3.3.10-16.el7_4.1.src.rpm SHA-256: 811ba10e64427404b9ee8a247c510f8a18de59bba1591da956b39984ecf45347
ppc64le
procps-ng-3.3.10-16.el7_4.1.ppc64le.rpm SHA-256: d55d9eef110bdaf51fdee3dc6d9759118600d35bbaaaea56bcf17b99cc21aeeb
procps-ng-debuginfo-3.3.10-16.el7_4.1.ppc64le.rpm SHA-256: 7474c548830b77629ca60a599a549f8323c395f29f03311ccf05e2d0b0ce1b20
procps-ng-debuginfo-3.3.10-16.el7_4.1.ppc64le.rpm SHA-256: 7474c548830b77629ca60a599a549f8323c395f29f03311ccf05e2d0b0ce1b20
procps-ng-devel-3.3.10-16.el7_4.1.ppc64le.rpm SHA-256: 8a0db7d107c4ecc41e59971509d8b786e7928065f901779b9a7fcdbcfc6375be
procps-ng-i18n-3.3.10-16.el7_4.1.ppc64le.rpm SHA-256: bd9c729239501804c6f9a9bf6278cb6a2b59f653a9ffad245f57c56b89e27c6c

Red Hat Enterprise Linux Server - TUS 7.4

SRPM
procps-ng-3.3.10-16.el7_4.1.src.rpm SHA-256: 811ba10e64427404b9ee8a247c510f8a18de59bba1591da956b39984ecf45347
x86_64
procps-ng-3.3.10-16.el7_4.1.i686.rpm SHA-256: 9430d2f4243284132d40c3f1cf48ed505f74e9ce5f0379e2d452132e73442651
procps-ng-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: df2bb803c2bcc156e046e53c55bcc7f156c215f902bf22f96868b0965e807cc3
procps-ng-debuginfo-3.3.10-16.el7_4.1.i686.rpm SHA-256: b826eac0cd942c3232abd36112a605d0d4f1171c81afd671acc9d0d57d643a4e
procps-ng-debuginfo-3.3.10-16.el7_4.1.i686.rpm SHA-256: b826eac0cd942c3232abd36112a605d0d4f1171c81afd671acc9d0d57d643a4e
procps-ng-debuginfo-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: c4c1a511746f49c86a6219c1a25c09aa810733be070a3a0e1ff93ec55da17d6f
procps-ng-debuginfo-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: c4c1a511746f49c86a6219c1a25c09aa810733be070a3a0e1ff93ec55da17d6f
procps-ng-devel-3.3.10-16.el7_4.1.i686.rpm SHA-256: 0831ac7b2682ccf833de3a087bffbc3a1a1e0fc36049bf2c82d3be16aedfe4cf
procps-ng-devel-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: a76a8f398e60804070b84b9337782689ddba12d6d6ed92addd9d9969e01c5bff
procps-ng-i18n-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: 4111a1f506e81735248649eb4582403318c7b4db921089dbf5593d1e712293d1

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.4

SRPM
procps-ng-3.3.10-16.el7_4.1.src.rpm SHA-256: 811ba10e64427404b9ee8a247c510f8a18de59bba1591da956b39984ecf45347
ppc64le
procps-ng-3.3.10-16.el7_4.1.ppc64le.rpm SHA-256: d55d9eef110bdaf51fdee3dc6d9759118600d35bbaaaea56bcf17b99cc21aeeb
procps-ng-debuginfo-3.3.10-16.el7_4.1.ppc64le.rpm SHA-256: 7474c548830b77629ca60a599a549f8323c395f29f03311ccf05e2d0b0ce1b20
procps-ng-debuginfo-3.3.10-16.el7_4.1.ppc64le.rpm SHA-256: 7474c548830b77629ca60a599a549f8323c395f29f03311ccf05e2d0b0ce1b20
procps-ng-devel-3.3.10-16.el7_4.1.ppc64le.rpm SHA-256: 8a0db7d107c4ecc41e59971509d8b786e7928065f901779b9a7fcdbcfc6375be
procps-ng-i18n-3.3.10-16.el7_4.1.ppc64le.rpm SHA-256: bd9c729239501804c6f9a9bf6278cb6a2b59f653a9ffad245f57c56b89e27c6c

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4

SRPM
procps-ng-3.3.10-16.el7_4.1.src.rpm SHA-256: 811ba10e64427404b9ee8a247c510f8a18de59bba1591da956b39984ecf45347
x86_64
procps-ng-3.3.10-16.el7_4.1.i686.rpm SHA-256: 9430d2f4243284132d40c3f1cf48ed505f74e9ce5f0379e2d452132e73442651
procps-ng-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: df2bb803c2bcc156e046e53c55bcc7f156c215f902bf22f96868b0965e807cc3
procps-ng-debuginfo-3.3.10-16.el7_4.1.i686.rpm SHA-256: b826eac0cd942c3232abd36112a605d0d4f1171c81afd671acc9d0d57d643a4e
procps-ng-debuginfo-3.3.10-16.el7_4.1.i686.rpm SHA-256: b826eac0cd942c3232abd36112a605d0d4f1171c81afd671acc9d0d57d643a4e
procps-ng-debuginfo-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: c4c1a511746f49c86a6219c1a25c09aa810733be070a3a0e1ff93ec55da17d6f
procps-ng-debuginfo-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: c4c1a511746f49c86a6219c1a25c09aa810733be070a3a0e1ff93ec55da17d6f
procps-ng-devel-3.3.10-16.el7_4.1.i686.rpm SHA-256: 0831ac7b2682ccf833de3a087bffbc3a1a1e0fc36049bf2c82d3be16aedfe4cf
procps-ng-devel-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: a76a8f398e60804070b84b9337782689ddba12d6d6ed92addd9d9969e01c5bff
procps-ng-i18n-3.3.10-16.el7_4.1.x86_64.rpm SHA-256: 4111a1f506e81735248649eb4582403318c7b4db921089dbf5593d1e712293d1

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.