Skip to navigation

Security Advisory Important: kernel security and bug fix update

Advisory: RHSA-2010:0893-1
Type: Security Advisory
Severity: Important
Issued on: 2010-11-16
Last updated on: 2010-11-16
Affected Products: Red Hat Enterprise Linux EUS (v. 5.3.z server)
Red Hat Enterprise Linux Long Life (v. 5.3 server)
CVEs (cve.mitre.org): CVE-2010-2521

Details

Updated kernel packages that fix one security issue and three bugs are now
available for Red Hat Enterprise Linux 5.3 Extended Update Support.

The Red Hat Security Response Team has rated this update as having
important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issue:

* Buffer overflow flaws were found in the Linux kernel's implementation of
the server-side External Data Representation (XDR) for the Network File
System (NFS) version 4. An attacker on the local network could send a
specially-crafted large compound request to the NFSv4 server, which could
possibly result in a kernel panic (denial of service) or, potentially, code
execution. (CVE-2010-2521, Important)

This update also fixes the following bugs:

* A race condition existed when generating new process IDs with the result
that the wrong process could have been signaled or killed accidentally,
leading to various application faults. This update detects and disallows
the reuse of PID numbers. (BZ#638864)

* When multiple JBD-based (Journaling Block Device) file systems were
mounted concurrently, and no other JBD-based file systems were already
mounted, a race could occur between JBD slab cache creation and deletion.
(BZ#645653)

* A missing memory barrier caused a race condition in the AIO subsystem
between the read_events() and aio_complete() functions. This may have
caused a thread in read_events() to sleep indefinitely, possibly causing an
application hang. (BZ#638868)

Users should upgrade to these updated packages, which contain backported
patches to correct these issues. The system must be rebooted for this
update to take effect.


Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

To install kernel packages manually, use "rpm -ivh [package]". Do not
use "rpm -Uvh" as that will remove the running kernel binaries from
your system. You may use "rpm -e" to remove old kernels after
determining that the new kernel functions properly on your system.

Updated packages

Red Hat Enterprise Linux EUS (v. 5.3.z server)

SRPMS:
kernel-2.6.18-128.26.1.el5.src.rpm
File outdated by:  RHBA-2012:1356
    MD5: 5cdf56a09c023e8190cf5ad9d8bb8949
SHA-256: ebb76c33c511a5a1412ec6808ac6a9fd8cfe6984777bf5ccad7efc7f52f7e93d
 
IA-32:
kernel-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2010:0996
    MD5: 7bfa7500a8da7333d45ea234fd24bc1b
SHA-256: be9bcdb2b74ed3392c59b8cc46ed6e151e3ddd5959e3b81ad7ba979959316e3e
kernel-PAE-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2010:0996
    MD5: e55cc99caf75e5ad56cba18e4ec4e33d
SHA-256: 8eecda98fa738ba323f02cf31bacdd4b2e066d48a8a12be8a8a998d426d6d8de
kernel-PAE-devel-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2010:0996
    MD5: 4cba6aa7225f9c8cca0e7acc51736b30
SHA-256: 43200d4633c9378dad6b745fb40639d75cccb547285b526e6ed7d3c08ca06dcb
kernel-debug-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2010:0996
    MD5: c9cfa6a72b5817b73cf0b43a426fd61c
SHA-256: 3571288cac8f897d7857909428e95d8f91b33b1995afb74634d194edaaf2afb6
kernel-debug-devel-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2010:0996
    MD5: 9d4bba58a6bf7975dd4a1428b1877224
SHA-256: 5bb41f9c2716d4611401f246f45cf05d627a65daf9e10db03a69090d46592b82
kernel-devel-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2010:0996
    MD5: 9de3384b24a098acb56c15b2cacbe9be
SHA-256: 02846b57e3808b9da50375b8586eab7c690b26180f09030bbc421c212db10681
kernel-doc-2.6.18-128.26.1.el5.noarch.rpm
File outdated by:  RHBA-2010:0996
    MD5: d80a05657eebe149782990449d6d8b46
SHA-256: 7e8f3383a16f15c73b813123aa7f6869be72b87352e83faf1805f9ca03996f86
kernel-headers-2.6.18-128.26.1.el5.i386.rpm
File outdated by:  RHBA-2010:0996
    MD5: 5c46e1c64b72015f1091fe686d52c08c
SHA-256: dc5dffec7d61393b4d10c971d7293c623103c4233d3f88c1733bf08942aa1c6e
kernel-xen-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2010:0996
    MD5: bbd35f24db5502af66734662b53c08de
SHA-256: 56ea3e56e9ae577a82f530289867d58102cd920ab7f9e943a7a5786be05df091
kernel-xen-devel-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2010:0996
    MD5: d2e76875c6270012d8efc56784b61778
SHA-256: e2f2c4630c2c7128c60c98889c36d64be7f03c7b2e2ced1cbc0736a7b913100c
 
IA-64:
kernel-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 3ef5f4fcc4d96d8b77012a4aec55bfee
SHA-256: 4dd92097f65068ee4bc58b03da1e4442e5922c0d3f3a7708fed7c447c62b31aa
kernel-debug-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 402e30c7f4dcfbc9e4402b8e5f4284c6
SHA-256: 188acca5f052ec4c614833fcf5e4cced80bcdd057e93efb1ae231101ba0f38fa
kernel-debug-devel-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 94e29569b3814c18a2b5d74b95ee74e0
SHA-256: 190b985ad72c8238f41a9721302b0f2ae3d55f49e2a45a3c338b3173ce5cea2a
kernel-devel-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2010:0996
    MD5: dc6a027ca56c288a9fa02553e353a711
SHA-256: f90252b47ad97522b2f10e3cfb211bfa5138521193c3137676682bee3f2a72a8
kernel-doc-2.6.18-128.26.1.el5.noarch.rpm
File outdated by:  RHBA-2010:0996
    MD5: d80a05657eebe149782990449d6d8b46
SHA-256: 7e8f3383a16f15c73b813123aa7f6869be72b87352e83faf1805f9ca03996f86
kernel-headers-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2010:0996
    MD5: ed8cb9dc999fcc143feb89eb076b34f5
SHA-256: 892d8957be2dd1dcb4a6353e18fc79e5b14d28ca61cc398c667b0a2a6f531664
kernel-xen-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 3ef8b5c0f320a9a3aa5d7e618a1a7ae1
SHA-256: ce452bec682d5b50a1f077e81ff05559d1e2588276a87de9ba06b977e8099ccd
kernel-xen-devel-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 3caa012cd8a198b74a09c87b7f961d9b
SHA-256: 829289cb7d05c71226c4ada7a9c439731cbaddbf54a61b37232f1f8add73775f
 
PPC:
kernel-2.6.18-128.26.1.el5.ppc64.rpm
File outdated by:  RHBA-2010:0996
    MD5: e2014287f3b16cc3fd32c60b9f283fae
SHA-256: a73b7685ad44a8b134c655ff26fb09fdae70c84a982e601c18938b9f8da074ac
kernel-debug-2.6.18-128.26.1.el5.ppc64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 391606702f4247c27209f4ef3457272a
SHA-256: 3fa86eb0db7affaaef9c61c91305bb7f8b89e1bd91087b5531d196ca5e9ef25e
kernel-debug-devel-2.6.18-128.26.1.el5.ppc64.rpm
File outdated by:  RHBA-2010:0996
    MD5: b30f378aa33d7ecca318e619d6e896d7
SHA-256: 7efdad0e11ee767f9bb34f12fc3992c867d82daa451ac621e680b6aa9eb377a6
kernel-devel-2.6.18-128.26.1.el5.ppc64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 180eb8c4748843ac4c06bf36e957664e
SHA-256: 86c8470cdecd59908d959efa40f96a361f164995857d388890a194333bb2a659
kernel-doc-2.6.18-128.26.1.el5.noarch.rpm
File outdated by:  RHBA-2010:0996
    MD5: d80a05657eebe149782990449d6d8b46
SHA-256: 7e8f3383a16f15c73b813123aa7f6869be72b87352e83faf1805f9ca03996f86
kernel-headers-2.6.18-128.26.1.el5.ppc.rpm
File outdated by:  RHBA-2010:0996
    MD5: a39c388a1201303c6cbb7056118d46a1
SHA-256: a71d9835feb7ea5fa1442680a14a9abe583d2ae1d84feca944c23020a27be0f3
kernel-headers-2.6.18-128.26.1.el5.ppc64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 19bae1c5edf076e9041bca735ec68e10
SHA-256: fdf026872a6e54dd10c7aa4ddd889de0b63059a201b21ee4947b6a376e1347e0
kernel-kdump-2.6.18-128.26.1.el5.ppc64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 5a6a623ad83f81d83f8fe975bb8c5117
SHA-256: 5ca5a4206bb29e8bb8f8fb34b46fadc2c7f7e9d107c86f4fd90d6fbc0b8983d4
kernel-kdump-devel-2.6.18-128.26.1.el5.ppc64.rpm
File outdated by:  RHBA-2010:0996
    MD5: be4120b615b738ba7146ea1d6a5cc49f
SHA-256: e4f242afeb314e19b709b56d8343f54d157c006892f095adcd6cf87e5a1c8d57
 
s390x:
kernel-2.6.18-128.26.1.el5.s390x.rpm
File outdated by:  RHBA-2010:0996
    MD5: 150d54f2b5f3f9d5f5fab701a434442a
SHA-256: beb37dc4502444ac6f5cf395242f989752d6219aedc37c7147dc325e54dfb3fa
kernel-debug-2.6.18-128.26.1.el5.s390x.rpm
File outdated by:  RHBA-2010:0996
    MD5: f20f0c8c81282c609739a432c62cc3b9
SHA-256: daceb87707fff9d5b19bc8e30eb5ea3f441afc4f6c11e448d841228362924c56
kernel-debug-devel-2.6.18-128.26.1.el5.s390x.rpm
File outdated by:  RHBA-2010:0996
    MD5: ad7ef7d7a68d59d5413303e3f8cc50d0
SHA-256: 48494ecf95cd7e8740ab1b1d8ad5539e31272365da5e3f3030fbee70fea310bf
kernel-devel-2.6.18-128.26.1.el5.s390x.rpm
File outdated by:  RHBA-2010:0996
    MD5: 97d09fbdd68023b6a5105d713b5ade66
SHA-256: e644ccd0537984285aea247e0c161fda70a011f778af2c0675b238c825193a5d
kernel-doc-2.6.18-128.26.1.el5.noarch.rpm
File outdated by:  RHBA-2010:0996
    MD5: d80a05657eebe149782990449d6d8b46
SHA-256: 7e8f3383a16f15c73b813123aa7f6869be72b87352e83faf1805f9ca03996f86
kernel-headers-2.6.18-128.26.1.el5.s390x.rpm
File outdated by:  RHBA-2010:0996
    MD5: bc7d0c16636c2937be5a02a4851a8925
SHA-256: f84025aed79e6e51a227697249fa3985284fec8e75a17896055ffeb2291f0ceb
kernel-kdump-2.6.18-128.26.1.el5.s390x.rpm
File outdated by:  RHBA-2010:0996
    MD5: 5b907c9ffd5942cfab5b2151bbf34417
SHA-256: e9745258a48524bff045ae1b8d7ee93d526a770b79e27ebca2ca979aace65261
kernel-kdump-devel-2.6.18-128.26.1.el5.s390x.rpm
File outdated by:  RHBA-2010:0996
    MD5: 84df5d95c3b9d0de983c3a0e235e530c
SHA-256: 8bc92f0e9da9656781a08e174f28ca235a914d0ee1e792280b79a84864122a85
 
x86_64:
kernel-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2010:0996
    MD5: a1b391973bd1058f051c66dbe2161b86
SHA-256: 48ed2d34baf4b206aa80d28b6915e44534ae96b2fbfb0267ab86991e44888611
kernel-debug-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 78cb27315f18b641e2f3e6407b281370
SHA-256: b32f6f250e8ec7aaa91d0978010bf2e01f581b6cdd01ddfe87875343479576e5
kernel-debug-devel-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 9d75478d111bdf5edcb11ed2b7f71bd7
SHA-256: 976398d80200c0c950beec70a30eeeba51873a76f23ad6815c724113a9aecbf6
kernel-devel-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 340864ffd5ee4f3d6e70126bee4f4721
SHA-256: 25684a6b04056c5463789a511104aafd84dccd2ffa72ca8f7f1560a996841cb3
kernel-doc-2.6.18-128.26.1.el5.noarch.rpm
File outdated by:  RHBA-2010:0996
    MD5: d80a05657eebe149782990449d6d8b46
SHA-256: 7e8f3383a16f15c73b813123aa7f6869be72b87352e83faf1805f9ca03996f86
kernel-headers-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2010:0996
    MD5: ade4afb5f80d820e016066fc1eb08bd2
SHA-256: 6b62ec23ad3bbd30e33c7ef6c700353c39cdf7638694d1558db40d6f17f64e96
kernel-xen-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2010:0996
    MD5: de98430c6acc153ca3b6cf276e1d5a8a
SHA-256: 34d0d739919e75a4a2615d77fbdeabfa35520df948b675321f66f89cc71deddb
kernel-xen-devel-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2010:0996
    MD5: 4dc0038cc164ce0d12a2a9f13baaa462
SHA-256: 508dd6054c94f6dd1094b831489929a1fece4592593ca723fa89f9eb6ba5290c
 
Red Hat Enterprise Linux Long Life (v. 5.3 server)

SRPMS:
kernel-2.6.18-128.26.1.el5.src.rpm
File outdated by:  RHBA-2012:1356
    MD5: 5cdf56a09c023e8190cf5ad9d8bb8949
SHA-256: ebb76c33c511a5a1412ec6808ac6a9fd8cfe6984777bf5ccad7efc7f52f7e93d
 
IA-32:
kernel-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2012:1356
    MD5: 7bfa7500a8da7333d45ea234fd24bc1b
SHA-256: be9bcdb2b74ed3392c59b8cc46ed6e151e3ddd5959e3b81ad7ba979959316e3e
kernel-PAE-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2012:1356
    MD5: e55cc99caf75e5ad56cba18e4ec4e33d
SHA-256: 8eecda98fa738ba323f02cf31bacdd4b2e066d48a8a12be8a8a998d426d6d8de
kernel-PAE-devel-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2012:1356
    MD5: 4cba6aa7225f9c8cca0e7acc51736b30
SHA-256: 43200d4633c9378dad6b745fb40639d75cccb547285b526e6ed7d3c08ca06dcb
kernel-debug-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2012:1356
    MD5: c9cfa6a72b5817b73cf0b43a426fd61c
SHA-256: 3571288cac8f897d7857909428e95d8f91b33b1995afb74634d194edaaf2afb6
kernel-debug-devel-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2012:1356
    MD5: 9d4bba58a6bf7975dd4a1428b1877224
SHA-256: 5bb41f9c2716d4611401f246f45cf05d627a65daf9e10db03a69090d46592b82
kernel-devel-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2012:1356
    MD5: 9de3384b24a098acb56c15b2cacbe9be
SHA-256: 02846b57e3808b9da50375b8586eab7c690b26180f09030bbc421c212db10681
kernel-doc-2.6.18-128.26.1.el5.noarch.rpm
File outdated by:  RHBA-2012:1356
    MD5: d80a05657eebe149782990449d6d8b46
SHA-256: 7e8f3383a16f15c73b813123aa7f6869be72b87352e83faf1805f9ca03996f86
kernel-headers-2.6.18-128.26.1.el5.i386.rpm
File outdated by:  RHBA-2012:1356
    MD5: 5c46e1c64b72015f1091fe686d52c08c
SHA-256: dc5dffec7d61393b4d10c971d7293c623103c4233d3f88c1733bf08942aa1c6e
kernel-xen-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2012:1356
    MD5: bbd35f24db5502af66734662b53c08de
SHA-256: 56ea3e56e9ae577a82f530289867d58102cd920ab7f9e943a7a5786be05df091
kernel-xen-devel-2.6.18-128.26.1.el5.i686.rpm
File outdated by:  RHBA-2012:1356
    MD5: d2e76875c6270012d8efc56784b61778
SHA-256: e2f2c4630c2c7128c60c98889c36d64be7f03c7b2e2ced1cbc0736a7b913100c
 
IA-64:
kernel-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2012:1356
    MD5: 3ef5f4fcc4d96d8b77012a4aec55bfee
SHA-256: 4dd92097f65068ee4bc58b03da1e4442e5922c0d3f3a7708fed7c447c62b31aa
kernel-debug-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2012:1356
    MD5: 402e30c7f4dcfbc9e4402b8e5f4284c6
SHA-256: 188acca5f052ec4c614833fcf5e4cced80bcdd057e93efb1ae231101ba0f38fa
kernel-debug-devel-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2012:1356
    MD5: 94e29569b3814c18a2b5d74b95ee74e0
SHA-256: 190b985ad72c8238f41a9721302b0f2ae3d55f49e2a45a3c338b3173ce5cea2a
kernel-devel-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2012:1356
    MD5: dc6a027ca56c288a9fa02553e353a711
SHA-256: f90252b47ad97522b2f10e3cfb211bfa5138521193c3137676682bee3f2a72a8
kernel-doc-2.6.18-128.26.1.el5.noarch.rpm
File outdated by:  RHBA-2012:1356
    MD5: d80a05657eebe149782990449d6d8b46
SHA-256: 7e8f3383a16f15c73b813123aa7f6869be72b87352e83faf1805f9ca03996f86
kernel-headers-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2012:1356
    MD5: ed8cb9dc999fcc143feb89eb076b34f5
SHA-256: 892d8957be2dd1dcb4a6353e18fc79e5b14d28ca61cc398c667b0a2a6f531664
kernel-xen-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2012:1356
    MD5: 3ef8b5c0f320a9a3aa5d7e618a1a7ae1
SHA-256: ce452bec682d5b50a1f077e81ff05559d1e2588276a87de9ba06b977e8099ccd
kernel-xen-devel-2.6.18-128.26.1.el5.ia64.rpm
File outdated by:  RHBA-2012:1356
    MD5: 3caa012cd8a198b74a09c87b7f961d9b
SHA-256: 829289cb7d05c71226c4ada7a9c439731cbaddbf54a61b37232f1f8add73775f
 
x86_64:
kernel-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2012:1356
    MD5: a1b391973bd1058f051c66dbe2161b86
SHA-256: 48ed2d34baf4b206aa80d28b6915e44534ae96b2fbfb0267ab86991e44888611
kernel-debug-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2012:1356
    MD5: 78cb27315f18b641e2f3e6407b281370
SHA-256: b32f6f250e8ec7aaa91d0978010bf2e01f581b6cdd01ddfe87875343479576e5
kernel-debug-devel-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2012:1356
    MD5: 9d75478d111bdf5edcb11ed2b7f71bd7
SHA-256: 976398d80200c0c950beec70a30eeeba51873a76f23ad6815c724113a9aecbf6
kernel-devel-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2012:1356
    MD5: 340864ffd5ee4f3d6e70126bee4f4721
SHA-256: 25684a6b04056c5463789a511104aafd84dccd2ffa72ca8f7f1560a996841cb3
kernel-doc-2.6.18-128.26.1.el5.noarch.rpm
File outdated by:  RHBA-2012:1356
    MD5: d80a05657eebe149782990449d6d8b46
SHA-256: 7e8f3383a16f15c73b813123aa7f6869be72b87352e83faf1805f9ca03996f86
kernel-headers-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2012:1356
    MD5: ade4afb5f80d820e016066fc1eb08bd2
SHA-256: 6b62ec23ad3bbd30e33c7ef6c700353c39cdf7638694d1558db40d6f17f64e96
kernel-xen-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2012:1356
    MD5: de98430c6acc153ca3b6cf276e1d5a8a
SHA-256: 34d0d739919e75a4a2615d77fbdeabfa35520df948b675321f66f89cc71deddb
kernel-xen-devel-2.6.18-128.26.1.el5.x86_64.rpm
File outdated by:  RHBA-2012:1356
    MD5: 4dc0038cc164ce0d12a2a9f13baaa462
SHA-256: 508dd6054c94f6dd1094b831489929a1fece4592593ca723fa89f9eb6ba5290c
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

612028 - CVE-2010-2521 kernel: nfsd4: bug in read_buf
638864 - [5.5] a race in pid generation that causes pids to be reused immediately. [rhel-5.3.z]
638868 - race in aio_complete() leads to process hang [rhel-5.3.z]
645653 - [Patch] jbd slab cache creation/deletion is racey [rhel-5.3.z]


References



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/