Issued:
2019-08-06
Updated:
2019-08-06

RHSA-2019:2162 - Security Advisory

Synopsis

Low: blktrace security update

Type/Severity

Security Advisory: Low

Topic

An update for blktrace is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The blktrace packages contain a number of utilities to record the I/O trace information for the kernel to user space, and utilities to analyze and view the trace information.

Security Fix(es):

  • blktrace: buffer overflow in the dev_map_read function in btt/devmap.c (CVE-2018-10689)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.7 Release Notes linked from the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le

Fixes

  • BZ - 1575119 - CVE-2018-10689 blktrace: buffer overflow in the dev_map_read function in btt/devmap.c

CVEs

References

Red Hat Enterprise Linux Server 7

SRPM
blktrace-1.0.5-9.el7.src.rpm SHA-256: f91ca9c108b7e07dad8289909024d6fe828579eaaf0afc995b3324b7d93dd236
x86_64
blktrace-1.0.5-9.el7.x86_64.rpm SHA-256: 2e725765793b2f83faaec043d050f138b0c9e6c24d1fb7fe455e3743135d3c60
blktrace-debuginfo-1.0.5-9.el7.x86_64.rpm SHA-256: fbc79d5a8858bbf6f59e8fd5209d9ae4380b1980f8c12a9c2c352aeef5c29214

Red Hat Enterprise Linux Workstation 7

SRPM
blktrace-1.0.5-9.el7.src.rpm SHA-256: f91ca9c108b7e07dad8289909024d6fe828579eaaf0afc995b3324b7d93dd236
x86_64
blktrace-1.0.5-9.el7.x86_64.rpm SHA-256: 2e725765793b2f83faaec043d050f138b0c9e6c24d1fb7fe455e3743135d3c60
blktrace-debuginfo-1.0.5-9.el7.x86_64.rpm SHA-256: fbc79d5a8858bbf6f59e8fd5209d9ae4380b1980f8c12a9c2c352aeef5c29214

Red Hat Enterprise Linux Desktop 7

SRPM
blktrace-1.0.5-9.el7.src.rpm SHA-256: f91ca9c108b7e07dad8289909024d6fe828579eaaf0afc995b3324b7d93dd236
x86_64
blktrace-1.0.5-9.el7.x86_64.rpm SHA-256: 2e725765793b2f83faaec043d050f138b0c9e6c24d1fb7fe455e3743135d3c60
blktrace-debuginfo-1.0.5-9.el7.x86_64.rpm SHA-256: fbc79d5a8858bbf6f59e8fd5209d9ae4380b1980f8c12a9c2c352aeef5c29214

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
blktrace-1.0.5-9.el7.src.rpm SHA-256: f91ca9c108b7e07dad8289909024d6fe828579eaaf0afc995b3324b7d93dd236
s390x
blktrace-1.0.5-9.el7.s390x.rpm SHA-256: efc7137371834af86ef62d6f25312a1ea6a6812f88c98799ecfdc7af85f76db0
blktrace-debuginfo-1.0.5-9.el7.s390x.rpm SHA-256: afb527ee2c4603a1a17a443bb1e84c64f04c4ae55b33346e7940f95443643f66

Red Hat Enterprise Linux for Power, big endian 7

SRPM
blktrace-1.0.5-9.el7.src.rpm SHA-256: f91ca9c108b7e07dad8289909024d6fe828579eaaf0afc995b3324b7d93dd236
ppc64
blktrace-1.0.5-9.el7.ppc64.rpm SHA-256: 19cb8049438e3535c28908895f9a51864048cb1d5b0ddf8e60c9a991701af0c0
blktrace-debuginfo-1.0.5-9.el7.ppc64.rpm SHA-256: 5bfd668f2e57f73dc87a7c53f3d633b2be2fb848d6329f2d1b74b5872ed1ae51

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
blktrace-1.0.5-9.el7.src.rpm SHA-256: f91ca9c108b7e07dad8289909024d6fe828579eaaf0afc995b3324b7d93dd236
x86_64
blktrace-1.0.5-9.el7.x86_64.rpm SHA-256: 2e725765793b2f83faaec043d050f138b0c9e6c24d1fb7fe455e3743135d3c60
blktrace-debuginfo-1.0.5-9.el7.x86_64.rpm SHA-256: fbc79d5a8858bbf6f59e8fd5209d9ae4380b1980f8c12a9c2c352aeef5c29214

Red Hat Enterprise Linux for Power, little endian 7

SRPM
blktrace-1.0.5-9.el7.src.rpm SHA-256: f91ca9c108b7e07dad8289909024d6fe828579eaaf0afc995b3324b7d93dd236
ppc64le
blktrace-1.0.5-9.el7.ppc64le.rpm SHA-256: 79b118fa827597af76188c8a4fc0eac7b356daadbd9bd40836afe3bf96c4ad01
blktrace-debuginfo-1.0.5-9.el7.ppc64le.rpm SHA-256: 628f087aeb85669c06d81c294277493b7dd2d6fc94a3bd68fe27ea8afc968b57

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.