====================================================================                   Red Hat Security Advisory

Synopsis:          Moderate: GFS security and bug fix update
Advisory ID:       RHSA-2010:0330-01
Product:           Red Hat Global File System
Advisory URL:      https://access.redhat.com/errata/RHSA-2010:0330.html
Issue date:        2010-03-30
CVE Names:         CVE-2010-0727 
====================================================================
1. Summary:

Updated GFS packages that fix one security issue are now available for Red
Hat Enterprise Linux 3.9, kernel release 2.4.21-63.EL.

The Red Hat Security Response Team has rated this update as having moderate
security impact. A Common Vulnerability Scoring System (CVSS) base score,
which gives a detailed severity rating, is available from the CVE link in
the References section.

2. Relevant releases/architectures:

Red Hat Global File System 3AS - i386, ia64, x86_64
Red Hat Global File System 3ES - i386, ia64, x86_64
Red Hat Global File System 3WS - i386, ia64, x86_64

3. Description:

The Red Hat Global File System (GFS) allows a cluster of Linux servers to
share data in a common pool of storage.

A flaw was found in the gfs_lock() implementation. The GFS locking code
could skip the lock operation for files that have the S_ISGID bit
(set-group-ID on execution) in their mode set. A local, unprivileged user
on a system that has a GFS file system mounted could use this flaw to cause
a kernel panic. (CVE-2010-0727)

As well, these updated GFS packages are in sync with the latest kernel
(2.4.21-63.EL). The modules in earlier GFS packages fail to load because
they do not match the running kernel. It is possible to force-load the
modules; however, with this update, force-loading the modules is not
required. (BZ#525198)

Users are advised to upgrade to these latest GFS packages, which resolve
this issue and are updated for use with the 2.4.21-63.EL kernel.

4. Solution:

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at

5. Bugs fixed (http://bugzilla.redhat.com/):

525198 - Need rebuild for 2.4.21-63.EL kernel
570863 - CVE-2010-0727 bug in GFS/GFS2 locking code leads to dos

6. Package List:

Red Hat Global File System 3AS:

Source:

i386:
GFS-6.0.2.36-13.i386.rpm
GFS-6.0.2.36-13.i686.rpm
GFS-debuginfo-6.0.2.36-13.i386.rpm
GFS-debuginfo-6.0.2.36-13.i686.rpm
GFS-devel-6.0.2.36-13.i386.rpm
GFS-devel-6.0.2.36-13.i686.rpm
GFS-modules-6.0.2.36-13.i386.rpm
GFS-modules-6.0.2.36-13.i686.rpm
GFS-modules-hugemem-6.0.2.36-13.i686.rpm
GFS-modules-smp-6.0.2.36-13.i686.rpm

ia64:
GFS-6.0.2.36-13.ia64.rpm
GFS-debuginfo-6.0.2.36-13.ia64.rpm
GFS-devel-6.0.2.36-13.ia64.rpm
GFS-modules-6.0.2.36-13.ia64.rpm

x86_64:
GFS-6.0.2.36-13.ia32e.rpm
GFS-6.0.2.36-13.x86_64.rpm
GFS-debuginfo-6.0.2.36-13.ia32e.rpm
GFS-debuginfo-6.0.2.36-13.x86_64.rpm
GFS-devel-6.0.2.36-13.ia32e.rpm
GFS-devel-6.0.2.36-13.x86_64.rpm
GFS-modules-6.0.2.36-13.ia32e.rpm
GFS-modules-6.0.2.36-13.x86_64.rpm
GFS-modules-smp-6.0.2.36-13.x86_64.rpm

Red Hat Global File System 3ES:

Source:

i386:
GFS-6.0.2.36-13.i386.rpm
GFS-6.0.2.36-13.i686.rpm
GFS-debuginfo-6.0.2.36-13.i386.rpm
GFS-debuginfo-6.0.2.36-13.i686.rpm
GFS-devel-6.0.2.36-13.i386.rpm
GFS-devel-6.0.2.36-13.i686.rpm
GFS-modules-6.0.2.36-13.i386.rpm
GFS-modules-6.0.2.36-13.i686.rpm
GFS-modules-hugemem-6.0.2.36-13.i686.rpm
GFS-modules-smp-6.0.2.36-13.i686.rpm

ia64:
GFS-6.0.2.36-13.ia64.rpm
GFS-debuginfo-6.0.2.36-13.ia64.rpm
GFS-devel-6.0.2.36-13.ia64.rpm
GFS-modules-6.0.2.36-13.ia64.rpm

x86_64:
GFS-6.0.2.36-13.ia32e.rpm
GFS-6.0.2.36-13.x86_64.rpm
GFS-debuginfo-6.0.2.36-13.ia32e.rpm
GFS-debuginfo-6.0.2.36-13.x86_64.rpm
GFS-devel-6.0.2.36-13.ia32e.rpm
GFS-devel-6.0.2.36-13.x86_64.rpm
GFS-modules-6.0.2.36-13.ia32e.rpm
GFS-modules-6.0.2.36-13.x86_64.rpm
GFS-modules-smp-6.0.2.36-13.x86_64.rpm

Red Hat Global File System 3WS:

Source:

i386:
GFS-6.0.2.36-13.i386.rpm
GFS-6.0.2.36-13.i686.rpm
GFS-debuginfo-6.0.2.36-13.i386.rpm
GFS-debuginfo-6.0.2.36-13.i686.rpm
GFS-devel-6.0.2.36-13.i386.rpm
GFS-devel-6.0.2.36-13.i686.rpm
GFS-modules-6.0.2.36-13.i386.rpm
GFS-modules-6.0.2.36-13.i686.rpm
GFS-modules-hugemem-6.0.2.36-13.i686.rpm
GFS-modules-smp-6.0.2.36-13.i686.rpm

ia64:
GFS-6.0.2.36-13.ia64.rpm
GFS-debuginfo-6.0.2.36-13.ia64.rpm
GFS-devel-6.0.2.36-13.ia64.rpm
GFS-modules-6.0.2.36-13.ia64.rpm

x86_64:
GFS-6.0.2.36-13.ia32e.rpm
GFS-6.0.2.36-13.x86_64.rpm
GFS-debuginfo-6.0.2.36-13.ia32e.rpm
GFS-debuginfo-6.0.2.36-13.x86_64.rpm
GFS-devel-6.0.2.36-13.ia32e.rpm
GFS-devel-6.0.2.36-13.x86_64.rpm
GFS-modules-6.0.2.36-13.ia32e.rpm
GFS-modules-6.0.2.36-13.x86_64.rpm
GFS-modules-smp-6.0.2.36-13.x86_64.rpm

These packages are GPG signed by Red Hat for security.  Our key and 
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package

7. References:

https://www.redhat.com/security/data/cve/CVE-2010-0727.html
http://www.redhat.com/security/updates/classification/#moderate

8. Contact:

The Red Hat security contact is .  More contact
details at https://www.redhat.com/security/team/contact/

Copyright 2010 Red Hat, Inc.

Red Hat: 2010:0330-01: GFS: Moderate Advisory

Updated GFS packages that fix one security issue are now available for Red Hat Enterprise Linux 3.9, kernel release 2.4.21-63.EL

Summary

The Red Hat Global File System (GFS) allows a cluster of Linux servers to share data in a common pool of storage.
A flaw was found in the gfs_lock() implementation. The GFS locking code could skip the lock operation for files that have the S_ISGID bit (set-group-ID on execution) in their mode set. A local, unprivileged user on a system that has a GFS file system mounted could use this flaw to cause a kernel panic. (CVE-2010-0727)
As well, these updated GFS packages are in sync with the latest kernel (2.4.21-63.EL). The modules in earlier GFS packages fail to load because they do not match the running kernel. It is possible to force-load the modules; however, with this update, force-loading the modules is not required. (BZ#525198)
Users are advised to upgrade to these latest GFS packages, which resolve this issue and are updated for use with the 2.4.21-63.EL kernel.



Summary


Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at

References

https://www.redhat.com/security/data/cve/CVE-2010-0727.html http://www.redhat.com/security/updates/classification/#moderate

Package List

Red Hat Global File System 3AS:
Source:
i386: GFS-6.0.2.36-13.i386.rpm GFS-6.0.2.36-13.i686.rpm GFS-debuginfo-6.0.2.36-13.i386.rpm GFS-debuginfo-6.0.2.36-13.i686.rpm GFS-devel-6.0.2.36-13.i386.rpm GFS-devel-6.0.2.36-13.i686.rpm GFS-modules-6.0.2.36-13.i386.rpm GFS-modules-6.0.2.36-13.i686.rpm GFS-modules-hugemem-6.0.2.36-13.i686.rpm GFS-modules-smp-6.0.2.36-13.i686.rpm
ia64: GFS-6.0.2.36-13.ia64.rpm GFS-debuginfo-6.0.2.36-13.ia64.rpm GFS-devel-6.0.2.36-13.ia64.rpm GFS-modules-6.0.2.36-13.ia64.rpm
x86_64: GFS-6.0.2.36-13.ia32e.rpm GFS-6.0.2.36-13.x86_64.rpm GFS-debuginfo-6.0.2.36-13.ia32e.rpm GFS-debuginfo-6.0.2.36-13.x86_64.rpm GFS-devel-6.0.2.36-13.ia32e.rpm GFS-devel-6.0.2.36-13.x86_64.rpm GFS-modules-6.0.2.36-13.ia32e.rpm GFS-modules-6.0.2.36-13.x86_64.rpm GFS-modules-smp-6.0.2.36-13.x86_64.rpm
Red Hat Global File System 3ES:
Source:
i386: GFS-6.0.2.36-13.i386.rpm GFS-6.0.2.36-13.i686.rpm GFS-debuginfo-6.0.2.36-13.i386.rpm GFS-debuginfo-6.0.2.36-13.i686.rpm GFS-devel-6.0.2.36-13.i386.rpm GFS-devel-6.0.2.36-13.i686.rpm GFS-modules-6.0.2.36-13.i386.rpm GFS-modules-6.0.2.36-13.i686.rpm GFS-modules-hugemem-6.0.2.36-13.i686.rpm GFS-modules-smp-6.0.2.36-13.i686.rpm
ia64: GFS-6.0.2.36-13.ia64.rpm GFS-debuginfo-6.0.2.36-13.ia64.rpm GFS-devel-6.0.2.36-13.ia64.rpm GFS-modules-6.0.2.36-13.ia64.rpm
x86_64: GFS-6.0.2.36-13.ia32e.rpm GFS-6.0.2.36-13.x86_64.rpm GFS-debuginfo-6.0.2.36-13.ia32e.rpm GFS-debuginfo-6.0.2.36-13.x86_64.rpm GFS-devel-6.0.2.36-13.ia32e.rpm GFS-devel-6.0.2.36-13.x86_64.rpm GFS-modules-6.0.2.36-13.ia32e.rpm GFS-modules-6.0.2.36-13.x86_64.rpm GFS-modules-smp-6.0.2.36-13.x86_64.rpm
Red Hat Global File System 3WS:
Source:
i386: GFS-6.0.2.36-13.i386.rpm GFS-6.0.2.36-13.i686.rpm GFS-debuginfo-6.0.2.36-13.i386.rpm GFS-debuginfo-6.0.2.36-13.i686.rpm GFS-devel-6.0.2.36-13.i386.rpm GFS-devel-6.0.2.36-13.i686.rpm GFS-modules-6.0.2.36-13.i386.rpm GFS-modules-6.0.2.36-13.i686.rpm GFS-modules-hugemem-6.0.2.36-13.i686.rpm GFS-modules-smp-6.0.2.36-13.i686.rpm
ia64: GFS-6.0.2.36-13.ia64.rpm GFS-debuginfo-6.0.2.36-13.ia64.rpm GFS-devel-6.0.2.36-13.ia64.rpm GFS-modules-6.0.2.36-13.ia64.rpm
x86_64: GFS-6.0.2.36-13.ia32e.rpm GFS-6.0.2.36-13.x86_64.rpm GFS-debuginfo-6.0.2.36-13.ia32e.rpm GFS-debuginfo-6.0.2.36-13.x86_64.rpm GFS-devel-6.0.2.36-13.ia32e.rpm GFS-devel-6.0.2.36-13.x86_64.rpm GFS-modules-6.0.2.36-13.ia32e.rpm GFS-modules-6.0.2.36-13.x86_64.rpm GFS-modules-smp-6.0.2.36-13.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://www.redhat.com/security/team/key/#package


Severity
Advisory ID: RHSA-2010:0330-01
Product: Red Hat Global File System
Advisory URL: https://access.redhat.com/errata/RHSA-2010:0330.html
Issued Date: : 2010-03-30
CVE Names: CVE-2010-0727

Topic

Updated GFS packages that fix one security issue are now available for RedHat Enterprise Linux 3.9, kernel release 2.4.21-63.EL.The Red Hat Security Response Team has rated this update as having moderatesecurity impact. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available from the CVE link inthe References section.


Topic


 

Relevant Releases Architectures

Red Hat Global File System 3AS - i386, ia64, x86_64

Red Hat Global File System 3ES - i386, ia64, x86_64

Red Hat Global File System 3WS - i386, ia64, x86_64


Bugs Fixed

525198 - Need rebuild for 2.4.21-63.EL kernel

570863 - CVE-2010-0727 bug in GFS/GFS2 locking code leads to dos


Related News

5.ShakingHands Esm H320
2 - 3 min read
At The Linux Foundation's Open Source Summit North America , Linus Torvalds, the creator of Linux, discussed various topics related to Linux
30.Lock Globe Motherboard Esm H320
1 - 2 min read
The SPDX 3.0 release marks a significant milestone in software management, particularly for Linux admins, infosec professionals, internet security
11.Locks IsometricPattern Esm H320
2 - 3 min read
Open Source maintainers and developers have been warned about the continued wave of attacks aimed at project maintainers similar to those recently
28.Lock Globe Esm H320
1 - 2 min read
A resurgence of cyberattacks targeting Linux systems in Asian campaigns through the utilization of the Pupy Remote Access Trojan (RAT) has been
27.Tablet Connections Blocks Lock Esm H320
2 - 4 min read
Canonical has recently announced the Beta release of Ubuntu Linux 24.04 LTS , codenamed "Noble Numbat." This release aims to continue Ubuntu's
21.Globe RadiatingCode Esm H320
2 - 3 min read
The open-source movement has come a long way, from its origins in the 1960s and 1970s to becoming an integral part of organizations worldwide.
13.Lock StylizedMotherboard Esm H320
2 - 3 min read
The Rust-based Edera project demonstrates a unique approach to container security that addresses cloud-native computing challenges. Let's examine
8.Locks HexConnections CodeGlobe Esm H320
2 - 3 min read
Canonical has launched Ubuntu Pro for Devices , a comprehensive offering emphasizing security and compliance for IoT device deployments. This
Sign Up

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved