kernel-2.6.18-128.10AXS3
エラータID: AXSA:2009-396:11
リリース日:
2009/09/30 Wednesday - 13:53
題名:
kernel-2.6.18-128.10AXS3
影響のあるチャネル:
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity:
High
Description:
以下項目について対処しました。
[Security Fix]
- 64bit環境においてdo_sigaltstack関数はstack_t構造体のパディング領域をクリアせずにユーザ空間へコピーしていました。これにより権限のないローカルユーザがsigaltstackシステムコールを使ってカーネルスタックから機密情報を入手可能でしたが、これを修正しました。 (CVE-2009-2847)
- execve関数はcurrent->clear_child_tidポインタを適切にクリアしていませんでした。これにより権限のないローカルユーザにcloneシステムコールを使ってサービス拒否 (メモリ破壊) または権限のエスカレーションを引き起こされる可能性がありましたが、これを修正しました。(CVE-2009-2848)
一部CVEの翻訳文はJVNからの引用になります。
http://jvndb.jvn.jp/
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2009-2847
The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.
The do_sigaltstack function in kernel/signal.c in Linux kernel 2.4 through 2.4.37 and 2.6 before 2.6.31-rc5, when running on 64-bit systems, does not clear certain padding bytes from a structure, which allows local users to obtain sensitive information from the kernel stack via the sigaltstack function.
CVE-2009-2848
The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.
The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial of service (memory corruption) or possibly gain privileges via a clone system call with CLONE_CHILD_SETTID or CLONE_CHILD_CLEARTID enabled, which is not properly handled during thread creation and exit.
追加情報:
N/A
ダウンロード:
SRPMS
- kernel-2.6.18-128.10AXS3.src.rpm
MD5: 042429de1f4300a150b41b2a2b2248aa
SHA-256: b0a2c0e5b471ac1d4d2632a679f1bcc333f68137d6b9befd99320d870b1ac93a
Size: 66.32 MB
Asianux Server 3 for x86
- kernel-2.6.18-128.10AXS3.i686.rpm
MD5: 35c00a0878f0ff4353b55ff1d217b321
SHA-256: ae4cec29123ea3fcf46f9b8f5fa027578cf231f4c97e35aeafd0184e88f82033
Size: 15.28 MB - kernel-devel-2.6.18-128.10AXS3.i686.rpm
MD5: aea704e1ddb14e9891cc06a2b150d5a2
SHA-256: e58a165b0505f37b5de14207c2e71ccabee16760cbe45a61c200841dc365d96b
Size: 5.10 MB - kernel-PAE-2.6.18-128.10AXS3.i686.rpm
MD5: d00e04dd4cdd782fc49b1822f1a6e1ce
SHA-256: c089fc40f20c81244e2a6a388b063a8e16034b935cc2dca8e56676fcd44a197d
Size: 15.30 MB - kernel-PAE-devel-2.6.18-128.10AXS3.i686.rpm
MD5: 5c82dcf549229e8e423878339c8547a0
SHA-256: 0b3c429a09a8ab894879ad74dc7d8fd241bb5148d11e666c4a4eecb7d9dbf87a
Size: 5.11 MB - kernel-xen-2.6.18-128.10AXS3.i686.rpm
MD5: 1c2e2c7ab69a93166ea6eb190cdeff42
SHA-256: ee727e0992fd93523e1f64568a876c9e0524d02a70537d96c9b3f2a6ee2069d2
Size: 16.26 MB - kernel-xen-devel-2.6.18-128.10AXS3.i686.rpm
MD5: 454d208ef54c44e60d7ce0bc60d03114
SHA-256: ba379cf841ea2dcbd1e9f8e0116f2644c92555daa533f8f20b6f8586706e943a
Size: 5.11 MB - kernel-doc-2.6.18-128.10AXS3.noarch.rpm
MD5: 6f5bf34528c2ea1eb8341236f23bd8b8
SHA-256: 3015c97c5c11a8587bf78196e28b57008e38b8cc7bddcd8e863a2baceae47fb8
Size: 2.92 MB - kernel-headers-2.6.18-128.10AXS3.i386.rpm
MD5: ff53c8089a39b3da9dad1c585b921cbb
SHA-256: 30fbb4ab11394d2eb13e2553fdd5820d11a858f40f30ce9b1bb5d5b68e1b6a52
Size: 942.70 kB
Asianux Server 3 for x86_64
- kernel-2.6.18-128.10AXS3.x86_64.rpm
MD5: 40ab808a4520ae9131a9f9af78e3c850
SHA-256: d879468c885cd216b1996cafcbf55d4a7fd91689666875639f2fd66918d35713
Size: 16.84 MB - kernel-devel-2.6.18-128.10AXS3.x86_64.rpm
MD5: 2a3d678cb5f7f76792fbc7e8562e24be
SHA-256: 296b7986ef70e39430aab793298b7dc621e9360276988ab5560e717a35ddaaa1
Size: 5.29 MB - kernel-headers-2.6.18-128.10AXS3.x86_64.rpm
MD5: 98f4d7b7fe0d99f7b30207799bcd4200
SHA-256: c6478a62efb6db917579a478f4d5f7554411099843cfc3b6c158afb3d304e222
Size: 0.96 MB - kernel-xen-2.6.18-128.10AXS3.x86_64.rpm
MD5: 4b88923a393c1905fe4912ed9fc20e74
SHA-256: e4e60ef46391aa9c400eda015f116e497c48c2a761f07454934446f448cbbcf2
Size: 17.50 MB - kernel-xen-devel-2.6.18-128.10AXS3.x86_64.rpm
MD5: cefb00aaaadeac30c585758f19639c81
SHA-256: a07396184cddc611170aa05cca7a5cf39cc2596c8039dd59b158bc3564afcec3
Size: 5.29 MB - kernel-doc-2.6.18-128.10AXS3.noarch.rpm
MD5: b3aca8b1df930d7a234dd7542a3166ed
SHA-256: f1fd8d42c110831d2526225debbc836b3008db2f0a65418bf60375fced64b456
Size: 2.92 MB