New kernel fixes local security issues
| Advisory: | RHSA-2002:206-13 |
|---|---|
| Type: | Security Advisory |
| Severity: | N/A |
| Issued on: | 2003-05-14 |
| Last updated on: | 2003-05-14 |
| Affected Products: | Red Hat Linux 7.3 Red Hat Linux 8.0 |
| CVEs (cve.mitre.org): |
CVE-2002-1572 CVE-2002-1573 CVE-2002-1574 |
Details
Updated kernel fixes local security issues and provides several updated
drivers to support newer hardware and fix bugs under Red Hat Linux 7.3.
[Update 8 May 2003]
Added missing modutils-devel packages for Red Hat Linux 7.3
The Linux kernel handles the basic functions of the operating system. A
security code audit of the 2.4 kernel found a number of possible local
security vulnerabilities which could allow a local user to obtain elevated
(root) privileges. The vulnerabilities were found in the ixj telephony card
driver, the pcilynx firewire driver, and the bttv video capture card driver.
In addition, several drivers (e100, e1000, tg3n and IDE) have been updated
to support newer hardware for Red Hat Linux 7.3, and a number of bugs have
been fixed in IDE tapestreamer driver.
All Red Hat Linux 7.3 and 8.0 users should upgrade to this errata kernel
which is not vulnerable to these security issues.
NOTE: As with the 8.0 release, IDE DMA on CD-ROM drives is disabled by
default. If you are sure that your CD-ROM drive is capable of IDE
DMA, place the following line in the /etc/modules.conf file:
options ide-cd dma=1
Thanks to Silvio Cesare for finding the local security issues.
Solution
relevant to your system have been applied.
The procedure for upgrading the kernel manually is documented at:
http://www.redhat.com/support/docs/howto/kernel-upgrade/
Please read the directions for your architecture carefully before
proceeding with the kernel upgrade.
Please note that this update is also available via Red Hat Network. Many
people find this to be an easier way to apply updates. To use Red Hat
Network, launch the Red Hat Update Agent with the following command:
up2date
This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system. Note that you need to select the kernel
explicitly on default configurations of up2date.
Updated packages
| Red Hat Linux 7.3 | |
| SRPMS: | |
| ftp://updates.redhat.com/rhn/repository/NULL/hwdata/0.14.1-1/SRPMS/hwdata-0.14.1-1.src.rpm Missing file |
MD5: 5c742d695efa74cce26a070a018561b6 |
| kernel-2.4.18-17.7.x.src.rpm File outdated by: RHSA-2003:417 |
MD5: d0cf8ef64412c78c9d32da9d0cb9850d |
| ftp://updates.redhat.com/rhn/repository/NULL/modutils/2.4.18-3.7x/SRPMS/modutils-2.4.18-3.7x.src.rpm Missing file |
MD5: 0414620fa83d72ffd9f128be2e4bf430 |
| IA-32: | |
| ftp://updates.redhat.com/rhn/repository/NULL/hwdata/0.14.1-1/noarch/hwdata-0.14.1-1.noarch.rpm Missing file |
MD5: 100b8e47ecde440cca8122a08fb59b81 |
| kernel-2.4.18-17.7.x.athlon.rpm File outdated by: RHSA-2003:417 |
MD5: 082114a540f7bd692476584e38c6cd5c |
| kernel-2.4.18-17.7.x.i386.rpm File outdated by: RHSA-2003:417 |
MD5: cfdef58820f5d7701f4221c80a7c821b |
| kernel-2.4.18-17.7.x.i586.rpm File outdated by: RHSA-2003:417 |
MD5: 576ceca80b035a10b942e6feb217c055 |
| kernel-2.4.18-17.7.x.i686.rpm File outdated by: RHSA-2003:417 |
MD5: 3a3afd67620fc36de17876629398dceb |
| kernel-BOOT-2.4.18-17.7.x.i386.rpm File outdated by: RHSA-2003:417 |
MD5: 145d063537e3a34723d50e611cbd37a8 |
| kernel-bigmem-2.4.18-17.7.x.i686.rpm File outdated by: RHSA-2003:417 |
MD5: fe9a658e1e22defc3cf5e2134646a6eb |
| kernel-debug-2.4.18-17.7.x.i686.rpm File outdated by: RHSA-2003:098 |
MD5: 158c941a9b430581a7bcd23ec1398052 |
| kernel-doc-2.4.18-17.7.x.i386.rpm File outdated by: RHSA-2003:417 |
MD5: 8d9a20e2f4d82cc262cab928910377fa |
| kernel-smp-2.4.18-17.7.x.athlon.rpm File outdated by: RHSA-2003:417 |
MD5: bd2fa5b6b721caf12dcea357304c008b |
| kernel-smp-2.4.18-17.7.x.i586.rpm File outdated by: RHSA-2003:417 |
MD5: d9d2b3fa23ee4733b35fd730e9553625 |
| kernel-smp-2.4.18-17.7.x.i686.rpm File outdated by: RHSA-2003:417 |
MD5: f9e11d26c2ca35ef403656be882fb592 |
| kernel-source-2.4.18-17.7.x.i386.rpm File outdated by: RHSA-2003:417 |
MD5: 0344cc1d42651916fb91ed7a700f3f90 |
| ftp://updates.redhat.com/rhn/repository/NULL/modutils/2.4.18-3.7x/i386/modutils-2.4.18-3.7x.i386.rpm Missing file |
MD5: cddd8196a38dbff1a8e34429415670fb |
| ftp://updates.redhat.com/rhn/repository/NULL/modutils-devel/2.4.18-3.7x/i386/modutils-devel-2.4.18-3.7x.i386.rpm Missing file |
MD5: 8c663b5015ba81b2ebef80307a37885f |
| Red Hat Linux 8.0 | |
| SRPMS: | |
| ftp://updates.redhat.com/rhn/repository/NULL/hwdata/0.48-1/SRPMS/hwdata-0.48-1.src.rpm Missing file |
MD5: eb9d565f55332264a15afadfc2e2b1a6 |
| kernel-2.4.18-17.8.0.src.rpm File outdated by: RHSA-2003:417 |
MD5: 11c9a0e4224f20712b24805fd4e5f0be |
| IA-32: | |
| ftp://updates.redhat.com/rhn/repository/NULL/hwdata/0.48-1/noarch/hwdata-0.48-1.noarch.rpm Missing file |
MD5: d160a0e0aa78e76b5c9a7c229d516eb8 |
| kernel-2.4.18-17.8.0.athlon.rpm File outdated by: RHSA-2003:417 |
MD5: 0ccc7295596f093121f4e2ae9767ebd1 |
| kernel-2.4.18-17.8.0.i386.rpm File outdated by: RHSA-2003:417 |
MD5: 47870d4e2b646a59c8ade167f38575e6 |
| kernel-2.4.18-17.8.0.i586.rpm File outdated by: RHSA-2003:417 |
MD5: 49a2d9c5add3431c395574c7456f5596 |
| kernel-2.4.18-17.8.0.i686.rpm File outdated by: RHSA-2003:417 |
MD5: f05ebe7ff48fea54ed013018f1133b5e |
| kernel-BOOT-2.4.18-17.8.0.i386.rpm File outdated by: RHSA-2003:417 |
MD5: 9e38f1aeebbc862dcf050b936dcc781e |
| kernel-bigmem-2.4.18-17.8.0.i686.rpm File outdated by: RHSA-2003:417 |
MD5: 9b9a868c08b100dbd5c1f7458fd5331d |
| kernel-debug-2.4.18-17.8.0.i686.rpm File outdated by: RHSA-2003:098 |
MD5: c8e06fe44752510d49ad227ab01f323c |
| kernel-doc-2.4.18-17.8.0.i386.rpm File outdated by: RHSA-2003:417 |
MD5: 78734f41ea1ba399f0a7d60f7d46bb8f |
| kernel-smp-2.4.18-17.8.0.athlon.rpm File outdated by: RHSA-2003:417 |
MD5: e0e77e845a0b2e491150cf4e892d6c24 |
| kernel-smp-2.4.18-17.8.0.i586.rpm File outdated by: RHSA-2003:417 |
MD5: 69ece85c6df4002f7e071c4b210c204f |
| kernel-smp-2.4.18-17.8.0.i686.rpm File outdated by: RHSA-2003:417 |
MD5: f5efa4f4d8db58a413a41bc66c13c3da |
| kernel-source-2.4.18-17.8.0.i386.rpm File outdated by: RHSA-2003:417 |
MD5: c869e31fdd68ae7b1beae942282717b4 |
Bugs fixed (see bugzilla for more information)
71622 - cs4232 module is not auto-loaded on use
73339 - apm locks up Asus A7N266VM (nForce chipset)
74589 - speedstep doesn't work on IBM ThinkPad T30 (pentium 4)
74879 - aha152x driver broken
75107 - boot time in /proc/stat is incorrect
75113 - /proc/uptime shows wrong uptime (slightly) and idle time (totally)
References
https://www.redhat.com/security/data/cve/CVE-2002-1573.html
https://www.redhat.com/security/data/cve/CVE-2002-1574.html
http://www.kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.18
These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package
The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/