Red Hat Security Advisory

Synopsis:          Updated kernel packages fix security vulnerabilities
Advisory ID:       RHSA-2004:183-01
Issue date:        2004-04-22
Updated on:        2004-04-22
Product:           Red Hat Enterprise Linux
Keywords:          
Cross references:  
Obsoletes:         RHSA-2004:066
CVE Names:         CAN-2004-0109 CAN-2004-0424
- ---------------------------------------------------------------------

1. Topic:

Updated kernel packages that fix two privilege escalation vulnerabilities
are now available.

2. Relevant releases/architectures:

Red Hat Enterprise Linux AS version 3 - athlon, i386, i686, ia64, ppc64, ppc64iseries, ppc64pseries, s390, s390x, x86_64
Red Hat Enterprise Linux ES version 3 - athlon, i386, i686
Red Hat Enterprise Linux WS version 3 - athlon, i386, i686, ia64, x86_64

3. Problem description:

The Linux kernel handles the basic functions of the operating system.

iSEC Security Research discovered a flaw in the ip_setsockopt() function
code of the Linux kernel versions 2.4.22 to 2.4.25 inclusive.  This flaw 
also affects the 2.4.21 kernel in Red Hat Enterprise Linux 3 which
contained a backported version of the affected code.  A local user could
use this flaw to gain root privileges.  The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the name CAN-2004-0424 to
this issue.

iDefense reported a buffer overflow flaw in the ISO9660 filesystem code.
An attacker could create a malicious filesystem in such a way that root
privileges may be obtained if the filesystem is mounted. The Common
Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name
CAN-2004-0109 to this issue.

All Red Hat Enterprise Linux 3 users are advised to upgrade their kernels
to the packages associated with their machine architectures and
configurations as listed in this erratum.

4. Solution:

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade.  Only those
RPMs which are currently installed will be updated.  Those RPMs which are
not installed but included in the list will not be updated.  Note that you
can also use wildcards (*.rpm) if your current directory *only* contains the
desired RPMs.

Please note that this update is also available via Red Hat Network.  Many
people find this an easier way to apply updates.  To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

If up2date fails to connect to Red Hat Network due to SSL
Certificate Errors, you need to install a version of the
up2date client with an updated certificate.  The latest version of
up2date is available from the Red Hat FTP site and may also be
downloaded directly from the RHN website:

https://access.redhat.com

5. Bug IDs fixed  (  for more info):

120028 - CAN-2004-0109 kernel iso9660 buffer overflow
121314 - Linux kernel setsockopt MCAST_MSFILTER integer overflow

6. RPMs required:

Red Hat Enterprise Linux AS version 3:

SRPMS: 


athlon:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm

i386:
Available from Red Hat Network: kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.i386.rpm

i686:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm

ia64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm

ppc64:
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.ppc64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.ppc64.rpm

ppc64iseries:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ppc64iseries.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ppc64iseries.rpm

ppc64pseries:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ppc64pseries.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ppc64pseries.rpm

s390:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.s390.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.s390.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.s390.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.s390.rpm

s390x:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.s390x.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.s390x.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.s390x.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.s390x.rpm

x86_64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm

Red Hat Enterprise Linux ES version 3:

SRPMS: 


athlon:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm

i386:
Available from Red Hat Network: kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.i386.rpm

i686:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm

Red Hat Enterprise Linux WS version 3:

SRPMS: 


athlon:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm

i386:
Available from Red Hat Network: kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.i386.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.i386.rpm

i686:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm

ia64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.ia64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm

x86_64:
Available from Red Hat Network: kernel-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
Available from Red Hat Network: kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm



7. Verification:

MD5 sum                          Package Name
- --------------------------------------------------------------------------

75e184e496f05cd18eea12a94a45d992 3AS/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
747381f00d4483d2b680d81a79ee87d0 3AS/en/os/athlon/kernel-2.4.21-9.0.3.EL.athlon.rpm
4419e2bc38199f6e108c87c34c29c77f 3AS/en/os/athlon/kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
c40f0b228e80bd863eeba517a05909c8 3AS/en/os/athlon/kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
5fef3bbf1605baaea07bd77ff96fff79 3AS/en/os/athlon/kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
9d44d75032a22e1bafe070cbf83abea3 3AS/en/os/i386/kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
090afc63ecd3b2dd68e76c25c428c0c3 3AS/en/os/i386/kernel-doc-2.4.21-9.0.3.EL.i386.rpm
52678a51fc609431df2d2c7ec3d66396 3AS/en/os/i386/kernel-source-2.4.21-9.0.3.EL.i386.rpm
0f0d28e815672056c265bc5d95a26b04 3AS/en/os/i686/kernel-2.4.21-9.0.3.EL.i686.rpm
15edf9ad36ad8ab7655025be9c68149b 3AS/en/os/i686/kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
be46b5651aea10e71f8ce5cd403e5597 3AS/en/os/i686/kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
58ef6536346d05530dea4d6553f22403 3AS/en/os/i686/kernel-smp-2.4.21-9.0.3.EL.i686.rpm
8803be23264421aaa299d55b8e534e9e 3AS/en/os/i686/kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
d678cc5434f16bb05af6ca66cafdea05 3AS/en/os/i686/kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
cb457e3e0a0460153b3bfbe5c39ef260 3AS/en/os/ia64/kernel-2.4.21-9.0.3.EL.ia64.rpm
e5325b4988f0e75f185c1208749d1c62 3AS/en/os/ia64/kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
977e74c136ab7e8cb2de0af714478544 3AS/en/os/ia64/kernel-source-2.4.21-9.0.3.EL.ia64.rpm
b852fe340ebf22869bb1e02ce589aa0d 3AS/en/os/ia64/kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm
528032788bee51dae3dcd354d2f8b73a 3AS/en/os/ppc64/kernel-doc-2.4.21-9.0.3.EL.ppc64.rpm
7c2229ba9d9eafacb71bcc6e752f3a19 3AS/en/os/ppc64/kernel-source-2.4.21-9.0.3.EL.ppc64.rpm
97c5ecb52204e12156f7895edac7e064 3AS/en/os/ppc64iseries/kernel-2.4.21-9.0.3.EL.ppc64iseries.rpm
83307f0d8628593d4f82e2d73c0056fc 3AS/en/os/ppc64iseries/kernel-unsupported-2.4.21-9.0.3.EL.ppc64iseries.rpm
c823973a230c40ac9edd411897b7113d 3AS/en/os/ppc64pseries/kernel-2.4.21-9.0.3.EL.ppc64pseries.rpm
65c97716b999af8eab0e1f8e24b209d8 3AS/en/os/ppc64pseries/kernel-unsupported-2.4.21-9.0.3.EL.ppc64pseries.rpm
ae7e0719db784bb53d78caadb9a28f46 3AS/en/os/s390/kernel-2.4.21-9.0.3.EL.s390.rpm
1642932547b2719d36eca9b51d4825d6 3AS/en/os/s390/kernel-doc-2.4.21-9.0.3.EL.s390.rpm
ae2f9d3424d123c7b3e0ba43d0031d81 3AS/en/os/s390/kernel-source-2.4.21-9.0.3.EL.s390.rpm
d334ddf760fce749557602fb71b20fe7 3AS/en/os/s390/kernel-unsupported-2.4.21-9.0.3.EL.s390.rpm
2e08a2aa7c25dc023f31f7028daf1dbb 3AS/en/os/s390x/kernel-2.4.21-9.0.3.EL.s390x.rpm
f2d16837ef21af8e303a7694cfc50e73 3AS/en/os/s390x/kernel-doc-2.4.21-9.0.3.EL.s390x.rpm
7383745e47cdd0e97d21d203df9a953e 3AS/en/os/s390x/kernel-source-2.4.21-9.0.3.EL.s390x.rpm
abb43640b44870450af1f3b61a2d4b1e 3AS/en/os/s390x/kernel-unsupported-2.4.21-9.0.3.EL.s390x.rpm
4153e7472cbc9e57331d8bd6ab963374 3AS/en/os/x86_64/kernel-2.4.21-9.0.3.EL.x86_64.rpm
b069533b3d6f1fc3aeba858a28dcfa1f 3AS/en/os/x86_64/kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
970369d2dfd7c9ea04d8073b7a8c9f3b 3AS/en/os/x86_64/kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
07628c9fe1be29deeabd2192dfeffcfb 3AS/en/os/x86_64/kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
dc4d55f0619c476d947f39a6760dca10 3AS/en/os/x86_64/kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
b8d738cb4bc5240bb089b59622da1ff4 3AS/en/os/x86_64/kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
75e184e496f05cd18eea12a94a45d992 3ES/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
747381f00d4483d2b680d81a79ee87d0 3ES/en/os/athlon/kernel-2.4.21-9.0.3.EL.athlon.rpm
4419e2bc38199f6e108c87c34c29c77f 3ES/en/os/athlon/kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
c40f0b228e80bd863eeba517a05909c8 3ES/en/os/athlon/kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
5fef3bbf1605baaea07bd77ff96fff79 3ES/en/os/athlon/kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
9d44d75032a22e1bafe070cbf83abea3 3ES/en/os/i386/kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
090afc63ecd3b2dd68e76c25c428c0c3 3ES/en/os/i386/kernel-doc-2.4.21-9.0.3.EL.i386.rpm
52678a51fc609431df2d2c7ec3d66396 3ES/en/os/i386/kernel-source-2.4.21-9.0.3.EL.i386.rpm
0f0d28e815672056c265bc5d95a26b04 3ES/en/os/i686/kernel-2.4.21-9.0.3.EL.i686.rpm
15edf9ad36ad8ab7655025be9c68149b 3ES/en/os/i686/kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
be46b5651aea10e71f8ce5cd403e5597 3ES/en/os/i686/kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
58ef6536346d05530dea4d6553f22403 3ES/en/os/i686/kernel-smp-2.4.21-9.0.3.EL.i686.rpm
8803be23264421aaa299d55b8e534e9e 3ES/en/os/i686/kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
d678cc5434f16bb05af6ca66cafdea05 3ES/en/os/i686/kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
75e184e496f05cd18eea12a94a45d992 3WS/en/os/SRPMS/kernel-2.4.21-9.0.3.EL.src.rpm
747381f00d4483d2b680d81a79ee87d0 3WS/en/os/athlon/kernel-2.4.21-9.0.3.EL.athlon.rpm
4419e2bc38199f6e108c87c34c29c77f 3WS/en/os/athlon/kernel-smp-2.4.21-9.0.3.EL.athlon.rpm
c40f0b228e80bd863eeba517a05909c8 3WS/en/os/athlon/kernel-smp-unsupported-2.4.21-9.0.3.EL.athlon.rpm
5fef3bbf1605baaea07bd77ff96fff79 3WS/en/os/athlon/kernel-unsupported-2.4.21-9.0.3.EL.athlon.rpm
9d44d75032a22e1bafe070cbf83abea3 3WS/en/os/i386/kernel-BOOT-2.4.21-9.0.3.EL.i386.rpm
090afc63ecd3b2dd68e76c25c428c0c3 3WS/en/os/i386/kernel-doc-2.4.21-9.0.3.EL.i386.rpm
52678a51fc609431df2d2c7ec3d66396 3WS/en/os/i386/kernel-source-2.4.21-9.0.3.EL.i386.rpm
0f0d28e815672056c265bc5d95a26b04 3WS/en/os/i686/kernel-2.4.21-9.0.3.EL.i686.rpm
15edf9ad36ad8ab7655025be9c68149b 3WS/en/os/i686/kernel-hugemem-2.4.21-9.0.3.EL.i686.rpm
be46b5651aea10e71f8ce5cd403e5597 3WS/en/os/i686/kernel-hugemem-unsupported-2.4.21-9.0.3.EL.i686.rpm
58ef6536346d05530dea4d6553f22403 3WS/en/os/i686/kernel-smp-2.4.21-9.0.3.EL.i686.rpm
8803be23264421aaa299d55b8e534e9e 3WS/en/os/i686/kernel-smp-unsupported-2.4.21-9.0.3.EL.i686.rpm
d678cc5434f16bb05af6ca66cafdea05 3WS/en/os/i686/kernel-unsupported-2.4.21-9.0.3.EL.i686.rpm
cb457e3e0a0460153b3bfbe5c39ef260 3WS/en/os/ia64/kernel-2.4.21-9.0.3.EL.ia64.rpm
e5325b4988f0e75f185c1208749d1c62 3WS/en/os/ia64/kernel-doc-2.4.21-9.0.3.EL.ia64.rpm
977e74c136ab7e8cb2de0af714478544 3WS/en/os/ia64/kernel-source-2.4.21-9.0.3.EL.ia64.rpm
b852fe340ebf22869bb1e02ce589aa0d 3WS/en/os/ia64/kernel-unsupported-2.4.21-9.0.3.EL.ia64.rpm
4153e7472cbc9e57331d8bd6ab963374 3WS/en/os/x86_64/kernel-2.4.21-9.0.3.EL.x86_64.rpm
b069533b3d6f1fc3aeba858a28dcfa1f 3WS/en/os/x86_64/kernel-doc-2.4.21-9.0.3.EL.x86_64.rpm
970369d2dfd7c9ea04d8073b7a8c9f3b 3WS/en/os/x86_64/kernel-smp-2.4.21-9.0.3.EL.x86_64.rpm
07628c9fe1be29deeabd2192dfeffcfb 3WS/en/os/x86_64/kernel-smp-unsupported-2.4.21-9.0.3.EL.x86_64.rpm
dc4d55f0619c476d947f39a6760dca10 3WS/en/os/x86_64/kernel-source-2.4.21-9.0.3.EL.x86_64.rpm
b8d738cb4bc5240bb089b59622da1ff4 3WS/en/os/x86_64/kernel-unsupported-2.4.21-9.0.3.EL.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key is
available from  

You can verify each package with the following command:
    
    rpm --checksig -v 

If you only wish to verify that each package has not been corrupted or
tampered with, examine only the md5sum with the following command:
    
    md5sum 


8. References:
 
isec 
 
CVE -CVE-2004-0109 
CVE -CVE-2004-0424

9. Contact:

The Red Hat security contact is <secalert@redhat.com>.  More contact
details at  

Copyright 2004 Red Hat, Inc.