Red Hat Security Advisory: kernel-rt security and bug fix update
Updated kernel-rt packages that fix two security issues and various bugs are now available for Red Hat Enterprise MRG 2.1. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-4086US | medium4.9 | — | ||
The journal_unmap_buffer function in fs/jbd2/transaction.c in the Linux kernel before 3.3.1 does not properly handle the _Delay and _Unwritten buffer head states, which allows loca… | ||||
| CVE-2012-2123US | high7.2 | — | ||
The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a… | ||||
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2012:0670self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 749143external
- 806722external
- 818220external
- Canonical URLself
remediations (32)
- Fixedkernel-rt-0:3.0.30-rt50.62.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-0:3.0.30-rt50.62.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-debug-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-debug-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-debug-debuginfo-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-debug-debuginfo-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-debug-devel-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-debug-devel-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-debuginfo-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-debuginfo-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-debuginfo-common-x86_64-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-debuginfo-common-x86_64-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-devel-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-devel-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-doc-0:3.0.30-rt50.62.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-doc-0:3.0.30-rt50.62.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-firmware-0:3.0.30-rt50.62.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-firmware-0:3.0.30-rt50.62.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-trace-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-trace-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-trace-debuginfo-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-trace-debuginfo-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-trace-devel-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-trace-devel-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-vanilla-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-vanilla-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-vanilla-debuginfo-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-vanilla-debuginfo-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-vanilla-devel-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670 - Fixedkernel-rt-vanilla-devel-0:3.0.30-rt50.62.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
https://access.redhat.com/errata/RHSA-2012:0670
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan