Skip to navigation

Security Advisory Important: kernel security and bug fix update

Advisory: RHSA-2009:1550-1
Type: Security Advisory
Severity: Important
Issued on: 2009-11-03
Last updated on: 2009-11-03
Affected Products: Red Hat Desktop (v. 3)
Red Hat Enterprise Linux AS (v. 3)
Red Hat Enterprise Linux ES (v. 3)
Red Hat Enterprise Linux WS (v. 3)
CVEs (cve.mitre.org): CVE-2008-5029
CVE-2008-5300
CVE-2009-1337
CVE-2009-1385
CVE-2009-1895
CVE-2009-2848
CVE-2009-3002
CVE-2009-3547

Details

Updated kernel packages that fix several security issues and multiple bugs
are now available for Red Hat Enterprise Linux 3.

This update has been rated as having important security impact by the Red
Hat Security Response Team.

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

Security fixes:

* when fput() was called to close a socket, the __scm_destroy() function in
the Linux kernel could make indirect recursive calls to itself. This could,
potentially, lead to a denial of service issue. (CVE-2008-5029, Important)

* the sendmsg() function in the Linux kernel did not block during UNIX
socket garbage collection. This could, potentially, lead to a local denial
of service. (CVE-2008-5300, Important)

* the exit_notify() function in the Linux kernel did not properly reset the
exit signal if a process executed a set user ID (setuid) application before
exiting. This could allow a local, unprivileged user to elevate their
privileges. (CVE-2009-1337, Important)

* a flaw was found in the Intel PRO/1000 network driver in the Linux
kernel. Frames with sizes near the MTU of an interface may be split across
multiple hardware receive descriptors. Receipt of such a frame could leak
through a validation check, leading to a corruption of the length check. A
remote attacker could use this flaw to send a specially-crafted packet that
would cause a denial of service or code execution. (CVE-2009-1385,
Important)

* the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags were not cleared when a
setuid or setgid program was executed. A local, unprivileged user could use
this flaw to bypass the mmap_min_addr protection mechanism and perform a
NULL pointer dereference attack, or bypass the Address Space Layout
Randomization (ASLR) security feature. (CVE-2009-1895, Important)

* it was discovered that, when executing a new process, the clear_child_tid
pointer in the Linux kernel is not cleared. If this pointer points to a
writable portion of the memory of the new program, the kernel could corrupt
four bytes of memory, possibly leading to a local denial of service or
privilege escalation. (CVE-2009-2848, Important)

* missing initialization flaws were found in getname() implementations in
the IrDA sockets, AppleTalk DDP protocol, NET/ROM protocol, and ROSE
protocol implementations in the Linux kernel. Certain data structures in
these getname() implementations were not initialized properly before being
copied to user-space. These flaws could lead to an information leak.
(CVE-2009-3002, Important)

* a NULL pointer dereference flaw was found in each of the following
functions in the Linux kernel: pipe_read_open(), pipe_write_open(), and
pipe_rdwr_open(). When the mutex lock is not held, the i_pipe pointer could
be released by other processes before it is used to update the pipe's
reader and writer counters. This could lead to a local denial of service or
privilege escalation. (CVE-2009-3547, Important)

Bug fixes:

* this update adds the mmap_min_addr tunable and restriction checks to help
prevent unprivileged users from creating new memory mappings below the
minimum address. This can help prevent the exploitation of NULL pointer
dereference bugs. Note that mmap_min_addr is set to zero (disabled) by
default for backwards compatibility. (BZ#512642)

* a bridge reference count problem in IPv6 has been fixed. (BZ#457010)

* enforce null-termination of user-supplied arguments to setsockopt().
(BZ#505514)

* the gcc flag "-fno-delete-null-pointer-checks" was added to the kernel
build options. This prevents gcc from optimizing out NULL pointer checks
after the first use of a pointer. NULL pointer bugs are often exploited by
attackers. Keeping these checks is a safety measure. (BZ#511185)

* a check has been added to the IPv4 code to make sure that rt is not NULL,
to help prevent future bugs in functions that call ip_append_data() from
being exploitable. (BZ#520300)

Users should upgrade to these updated packages, which contain backported
patches to correct these issues. The system must be rebooted for this
update to take effect.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Updated packages

Red Hat Desktop (v. 3)

SRPMS:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/SRPMS/kernel-2.4.21-63.EL.src.rpm
Missing file
    MD5: c46c6841b8b1e88da168a3d2b3f1c569
 
IA-32:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/athlon/kernel-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 32b4de48919cc75bdb7f58dac9a2ec14
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/i686/kernel-2.4.21-63.EL.i686.rpm
Missing file
    MD5: a039f3e24df1c2a35d62a599ef852265
ftp://updates.redhat.com/rhn/public/NULL/kernel-BOOT/2.4.21-63.EL/i386/kernel-BOOT-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 29cdd343f7b14048a53b2a17216a38a9
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/i386/kernel-doc-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 77973a253f0931411890346fe20a0311
ftp://updates.redhat.com/rhn/public/NULL/kernel-hugemem/2.4.21-63.EL/i686/kernel-hugemem-2.4.21-63.EL.i686.rpm
Missing file
    MD5: be5cefe411ac070c834d69870ae854ef
ftp://updates.redhat.com/rhn/public/NULL/kernel-hugemem-unsupported/2.4.21-63.EL/i686/kernel-hugemem-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 76ceb41965f08ca26cd9e973b7fec124
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/athlon/kernel-smp-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 12ed25c2770bd1d14b4801dac446dd00
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/i686/kernel-smp-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 63faea21cf23e64141d85cc1393f70d2
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/athlon/kernel-smp-unsupported-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 835b2dd3cfa6c54dfc05365236b97d99
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/i686/kernel-smp-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 5f9d418e5f7fd0762a08056ea2ff34b1
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/i386/kernel-source-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 8a747f53fd968d45931723dec0fc4380
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/athlon/kernel-unsupported-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: ff1ba82929fd18c11fe7c42b025b1e87
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/i686/kernel-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: edc27fc0f9fda691895bc28f99215c78
 
x86_64:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/ia32e/kernel-2.4.21-63.EL.ia32e.rpm
Missing file
    MD5: 5053e110086d9e9c7313d1869f30427e
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/x86_64/kernel-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 9dd0e27f84d359e1ce526b63284eabc9
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/x86_64/kernel-doc-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 45f6f3186fcfe08f4b83e41ae4d7239f
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/x86_64/kernel-smp-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 5f7e91df28628540a4fb617844da827d
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/x86_64/kernel-smp-unsupported-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 59173f7f63c7473f10f4fe8c08f46916
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/x86_64/kernel-source-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 8a5fc2df09e15c50f12267ef6ecb8d99
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/ia32e/kernel-unsupported-2.4.21-63.EL.ia32e.rpm
Missing file
    MD5: 2f8e8a2792de7985c27bbd6abae88c01
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/x86_64/kernel-unsupported-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: c365948d0b71903ae13aba100cf26caf
 
Red Hat Enterprise Linux AS (v. 3)

SRPMS:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/SRPMS/kernel-2.4.21-63.EL.src.rpm
Missing file
    MD5: c46c6841b8b1e88da168a3d2b3f1c569
 
IA-32:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/athlon/kernel-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 32b4de48919cc75bdb7f58dac9a2ec14
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/i686/kernel-2.4.21-63.EL.i686.rpm
Missing file
    MD5: a039f3e24df1c2a35d62a599ef852265
ftp://updates.redhat.com/rhn/public/NULL/kernel-BOOT/2.4.21-63.EL/i386/kernel-BOOT-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 29cdd343f7b14048a53b2a17216a38a9
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/i386/kernel-doc-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 77973a253f0931411890346fe20a0311
ftp://updates.redhat.com/rhn/public/NULL/kernel-hugemem/2.4.21-63.EL/i686/kernel-hugemem-2.4.21-63.EL.i686.rpm
Missing file
    MD5: be5cefe411ac070c834d69870ae854ef
ftp://updates.redhat.com/rhn/public/NULL/kernel-hugemem-unsupported/2.4.21-63.EL/i686/kernel-hugemem-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 76ceb41965f08ca26cd9e973b7fec124
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/athlon/kernel-smp-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 12ed25c2770bd1d14b4801dac446dd00
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/i686/kernel-smp-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 63faea21cf23e64141d85cc1393f70d2
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/athlon/kernel-smp-unsupported-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 835b2dd3cfa6c54dfc05365236b97d99
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/i686/kernel-smp-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 5f9d418e5f7fd0762a08056ea2ff34b1
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/i386/kernel-source-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 8a747f53fd968d45931723dec0fc4380
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/athlon/kernel-unsupported-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: ff1ba82929fd18c11fe7c42b025b1e87
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/i686/kernel-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: edc27fc0f9fda691895bc28f99215c78
 
IA-64:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/ia64/kernel-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: bc84eec7c88a30eb598d10967fa67158
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/ia64/kernel-doc-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: beb6038a7d863bc87cf386d3d06f1112
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/ia64/kernel-source-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: 432fbd1506fb5cd28e5f640371f29bcf
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/ia64/kernel-unsupported-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: c09747f9d63a245328b5fef1273165f8
 
PPC:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/ppc64iseries/kernel-2.4.21-63.EL.ppc64iseries.rpm
Missing file
    MD5: aaaec279b92e8b86a989a11e6f1919f4
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/ppc64pseries/kernel-2.4.21-63.EL.ppc64pseries.rpm
Missing file
    MD5: fd9156db0a7654d9c56e807dd70a5cfd
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/ppc64/kernel-doc-2.4.21-63.EL.ppc64.rpm
Missing file
    MD5: 82864f2f6ed2afc34a5514396492ee02
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/ppc64/kernel-source-2.4.21-63.EL.ppc64.rpm
Missing file
    MD5: 7908d77565a6ba65bd0d31c800189538
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/ppc64iseries/kernel-unsupported-2.4.21-63.EL.ppc64iseries.rpm
Missing file
    MD5: c7ab71ae90b44c327de46ee2680cedc0
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/ppc64pseries/kernel-unsupported-2.4.21-63.EL.ppc64pseries.rpm
Missing file
    MD5: 233c05c0d5519f68eb7f768006efe972
 
s390:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/s390/kernel-2.4.21-63.EL.s390.rpm
Missing file
    MD5: ae0440656b053c857e9e3d0a92cce16d
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/s390/kernel-doc-2.4.21-63.EL.s390.rpm
Missing file
    MD5: 6f00394f707d262e9398a8b8154dab54
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/s390/kernel-source-2.4.21-63.EL.s390.rpm
Missing file
    MD5: c1c6974f7d10db8afd0a23895a96bdf8
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/s390/kernel-unsupported-2.4.21-63.EL.s390.rpm
Missing file
    MD5: b5e3a30f8a7616839205a0c9286d6341
 
s390x:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/s390x/kernel-2.4.21-63.EL.s390x.rpm
Missing file
    MD5: f9fc79de377f287f230520d385eb402d
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/s390x/kernel-doc-2.4.21-63.EL.s390x.rpm
Missing file
    MD5: 404f06ada034b3bbf3d938f6032d0252
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/s390x/kernel-source-2.4.21-63.EL.s390x.rpm
Missing file
    MD5: 8b12baad1e683ff22e567775315b9ff3
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/s390x/kernel-unsupported-2.4.21-63.EL.s390x.rpm
Missing file
    MD5: b44990b7f16e4cee3a18f3db5c1e7d25
 
x86_64:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/ia32e/kernel-2.4.21-63.EL.ia32e.rpm
Missing file
    MD5: 5053e110086d9e9c7313d1869f30427e
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/x86_64/kernel-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 9dd0e27f84d359e1ce526b63284eabc9
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/x86_64/kernel-doc-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 45f6f3186fcfe08f4b83e41ae4d7239f
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/x86_64/kernel-smp-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 5f7e91df28628540a4fb617844da827d
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/x86_64/kernel-smp-unsupported-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 59173f7f63c7473f10f4fe8c08f46916
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/x86_64/kernel-source-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 8a5fc2df09e15c50f12267ef6ecb8d99
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/ia32e/kernel-unsupported-2.4.21-63.EL.ia32e.rpm
Missing file
    MD5: 2f8e8a2792de7985c27bbd6abae88c01
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/x86_64/kernel-unsupported-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: c365948d0b71903ae13aba100cf26caf
 
Red Hat Enterprise Linux ES (v. 3)

SRPMS:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/SRPMS/kernel-2.4.21-63.EL.src.rpm
Missing file
    MD5: c46c6841b8b1e88da168a3d2b3f1c569
 
IA-32:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/athlon/kernel-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 32b4de48919cc75bdb7f58dac9a2ec14
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/i686/kernel-2.4.21-63.EL.i686.rpm
Missing file
    MD5: a039f3e24df1c2a35d62a599ef852265
ftp://updates.redhat.com/rhn/public/NULL/kernel-BOOT/2.4.21-63.EL/i386/kernel-BOOT-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 29cdd343f7b14048a53b2a17216a38a9
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/i386/kernel-doc-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 77973a253f0931411890346fe20a0311
ftp://updates.redhat.com/rhn/public/NULL/kernel-hugemem/2.4.21-63.EL/i686/kernel-hugemem-2.4.21-63.EL.i686.rpm
Missing file
    MD5: be5cefe411ac070c834d69870ae854ef
ftp://updates.redhat.com/rhn/public/NULL/kernel-hugemem-unsupported/2.4.21-63.EL/i686/kernel-hugemem-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 76ceb41965f08ca26cd9e973b7fec124
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/athlon/kernel-smp-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 12ed25c2770bd1d14b4801dac446dd00
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/i686/kernel-smp-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 63faea21cf23e64141d85cc1393f70d2
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/athlon/kernel-smp-unsupported-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 835b2dd3cfa6c54dfc05365236b97d99
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/i686/kernel-smp-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 5f9d418e5f7fd0762a08056ea2ff34b1
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/i386/kernel-source-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 8a747f53fd968d45931723dec0fc4380
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/athlon/kernel-unsupported-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: ff1ba82929fd18c11fe7c42b025b1e87
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/i686/kernel-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: edc27fc0f9fda691895bc28f99215c78
 
IA-64:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/ia64/kernel-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: bc84eec7c88a30eb598d10967fa67158
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/ia64/kernel-doc-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: beb6038a7d863bc87cf386d3d06f1112
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/ia64/kernel-source-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: 432fbd1506fb5cd28e5f640371f29bcf
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/ia64/kernel-unsupported-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: c09747f9d63a245328b5fef1273165f8
 
x86_64:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/ia32e/kernel-2.4.21-63.EL.ia32e.rpm
Missing file
    MD5: 5053e110086d9e9c7313d1869f30427e
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/x86_64/kernel-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 9dd0e27f84d359e1ce526b63284eabc9
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/x86_64/kernel-doc-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 45f6f3186fcfe08f4b83e41ae4d7239f
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/x86_64/kernel-smp-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 5f7e91df28628540a4fb617844da827d
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/x86_64/kernel-smp-unsupported-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 59173f7f63c7473f10f4fe8c08f46916
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/x86_64/kernel-source-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 8a5fc2df09e15c50f12267ef6ecb8d99
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/ia32e/kernel-unsupported-2.4.21-63.EL.ia32e.rpm
Missing file
    MD5: 2f8e8a2792de7985c27bbd6abae88c01
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/x86_64/kernel-unsupported-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: c365948d0b71903ae13aba100cf26caf
 
Red Hat Enterprise Linux WS (v. 3)

SRPMS:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/SRPMS/kernel-2.4.21-63.EL.src.rpm
Missing file
    MD5: c46c6841b8b1e88da168a3d2b3f1c569
 
IA-32:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/athlon/kernel-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 32b4de48919cc75bdb7f58dac9a2ec14
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/i686/kernel-2.4.21-63.EL.i686.rpm
Missing file
    MD5: a039f3e24df1c2a35d62a599ef852265
ftp://updates.redhat.com/rhn/public/NULL/kernel-BOOT/2.4.21-63.EL/i386/kernel-BOOT-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 29cdd343f7b14048a53b2a17216a38a9
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/i386/kernel-doc-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 77973a253f0931411890346fe20a0311
ftp://updates.redhat.com/rhn/public/NULL/kernel-hugemem/2.4.21-63.EL/i686/kernel-hugemem-2.4.21-63.EL.i686.rpm
Missing file
    MD5: be5cefe411ac070c834d69870ae854ef
ftp://updates.redhat.com/rhn/public/NULL/kernel-hugemem-unsupported/2.4.21-63.EL/i686/kernel-hugemem-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 76ceb41965f08ca26cd9e973b7fec124
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/athlon/kernel-smp-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 12ed25c2770bd1d14b4801dac446dd00
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/i686/kernel-smp-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 63faea21cf23e64141d85cc1393f70d2
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/athlon/kernel-smp-unsupported-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: 835b2dd3cfa6c54dfc05365236b97d99
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/i686/kernel-smp-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: 5f9d418e5f7fd0762a08056ea2ff34b1
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/i386/kernel-source-2.4.21-63.EL.i386.rpm
Missing file
    MD5: 8a747f53fd968d45931723dec0fc4380
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/athlon/kernel-unsupported-2.4.21-63.EL.athlon.rpm
Missing file
    MD5: ff1ba82929fd18c11fe7c42b025b1e87
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/i686/kernel-unsupported-2.4.21-63.EL.i686.rpm
Missing file
    MD5: edc27fc0f9fda691895bc28f99215c78
 
IA-64:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/ia64/kernel-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: bc84eec7c88a30eb598d10967fa67158
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/ia64/kernel-doc-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: beb6038a7d863bc87cf386d3d06f1112
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/ia64/kernel-source-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: 432fbd1506fb5cd28e5f640371f29bcf
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/ia64/kernel-unsupported-2.4.21-63.EL.ia64.rpm
Missing file
    MD5: c09747f9d63a245328b5fef1273165f8
 
x86_64:
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/ia32e/kernel-2.4.21-63.EL.ia32e.rpm
Missing file
    MD5: 5053e110086d9e9c7313d1869f30427e
ftp://updates.redhat.com/rhn/public/NULL/kernel/2.4.21-63.EL/x86_64/kernel-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 9dd0e27f84d359e1ce526b63284eabc9
ftp://updates.redhat.com/rhn/public/NULL/kernel-doc/2.4.21-63.EL/x86_64/kernel-doc-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 45f6f3186fcfe08f4b83e41ae4d7239f
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp/2.4.21-63.EL/x86_64/kernel-smp-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 5f7e91df28628540a4fb617844da827d
ftp://updates.redhat.com/rhn/public/NULL/kernel-smp-unsupported/2.4.21-63.EL/x86_64/kernel-smp-unsupported-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 59173f7f63c7473f10f4fe8c08f46916
ftp://updates.redhat.com/rhn/public/NULL/kernel-source/2.4.21-63.EL/x86_64/kernel-source-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: 8a5fc2df09e15c50f12267ef6ecb8d99
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/ia32e/kernel-unsupported-2.4.21-63.EL.ia32e.rpm
Missing file
    MD5: 2f8e8a2792de7985c27bbd6abae88c01
ftp://updates.redhat.com/rhn/public/NULL/kernel-unsupported/2.4.21-63.EL/x86_64/kernel-unsupported-2.4.21-63.EL.x86_64.rpm
Missing file
    MD5: c365948d0b71903ae13aba100cf26caf
 

Bugs fixed (see bugzilla for more information)

457010 - ipv6: use timer pending to fix bridge reference count problem [rhel-3.9]
470201 - CVE-2008-5029 kernel: Unix sockets kernel panic
473259 - CVE-2008-5300 kernel: fix soft lockups/OOM issues with unix socket garbage collector
493771 - CVE-2009-1337 kernel: exit_notify: kill the wrong capable(CAP_KILL) check
502981 - CVE-2009-1385 kernel: e1000_clean_rx_irq() denial of service
505514 - kernel: ensure devname passed to SO_BINDTODEVICE is NULL-terminated [rhel-3]
511171 - CVE-2009-1895 kernel: personality: fix PER_CLEAR_ON_SETID
511185 - kernel: build with -fno-delete-null-pointer-checks [rhel-3]
512642 - kernel: security: implement mmap_min_addr infrastructure [rhel-3]
515423 - CVE-2009-2848 kernel: execve: must clear current->clear_child_tid
519305 - CVE-2009-3001, CVE-2009-3002 kernel: numerous getname() infoleaks
520300 - kernel: ipv4: make ip_append_data() handle NULL routing table [rhel-3]
530490 - CVE-2009-3547 kernel: fs: pipe.c null pointer dereference


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/