__________________________________________________________ The U.S. Department of Energy Computer Incident Advisory Capability ___ __ __ _ ___ / | /_\ / \___ __|__ / \ \___ __________________________________________________________ INFORMATION BULLETIN Updated Kernel Packages for Red Hat Linux 4 Update 2 [Red Hat Security Advisory RHSA-2005:514-44] October 5, 2005 18:00 GMT Number Q-005 [REVISED 16 Dec 2005] [REVISED 16 Mar 2006} ______________________________________________________________________________ PROBLEM: Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the second regular update. PLATFORM: Red Hat Desktop (v. 3 & 4) Red Hat Enterprise Linux AS (v. 3 & 4) Red Hat Enterprise Linux ES (v. 3 & 4) Red Hat Enterprise Linux WS (v. 3 & 4) Debian GNU/Linux 3.1 alias sarge DAMAGE: Various security bugs were fixed in this update. SOLUTION: Apply the available security update. ______________________________________________________________________________ VULNERABILITY The risk is LOW. May allow a local user to cause a DoS or ASSESSMENT: potentially gain privileges and potential leaks of kernel data. ______________________________________________________________________________ LINKS: CIAC BULLETIN: http://www.ciac.org/ciac/bulletins/q-005.shtml ORIGINAL BULLETIN: https://rhn.redhat.com/errata/RHSA-2005-514.html ADDITIONAL LINKS: Debian Security Advisory DSA-922-1 http://www.debian.org/security/2005/dsa-922 Debian Security Advisory DSA-921-1 http://www.debian.org/security/2005/dsa-921 Red Hat RHSA-2006:0144-10 https://rhn.redhat.com/errata/RHSA-2006-0144.html CVE: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name= CAN-2005-0756 CAN-2005-1265 CAN-2005-1761 CAN-2005-1762 CAN-2005-1763 CAN-2005-2098 CAN-2005-2099 CAN-2005-2100 CAN-2005-2456 CAN-2005-2490 CAN-2005-2492 CAN-2005-2555 CAN-2005-2801 CAN-2005-2872 ______________________________________________________________________________ REVISION HISTORY: 12/16/2005 - added a link to Debian Security Advisories DSA-922-1 and DSA-921-1 for Debian GNU/Linux 3.1 alias sarge. 03/16/2006 - added a link to Red Hat RHSA-2006:0144-10 for Red Hat Desktop (v. 3), Enterprise Linux AS, ES, WS (v. 3). [***** Start Red Hat Security Advisory RHSA-2005:514-44 *****] Updated kernel packages available for Red Hat Enterprise Linux 4 Update 2 Advisory: RHSA-2005:514-44 Type: Security Advisory Issued on: 2005-10-05 Last updated on: 2005-10-05 Affected Products: Red Hat Desktop (v. 4) Red Hat Enterprise Linux AS (v. 4) Red Hat Enterprise Linux ES (v. 4) Red Hat Enterprise Linux WS (v. 4) CVEs (cve.mitre.org): CAN-2005-0756 CAN-2005-1265 CAN-2005-1761 CAN-2005-1762 CAN-2005-1763 CAN-2005-2098 CAN-2005-2099 CAN-2005-2100 CAN-2005-2456 CAN-2005-2490 CAN-2005-2492 CAN-2005-2555 CAN-2005-2801 CAN-2005-2872 Details Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the second regular update. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. This is the second regular kernel update to Red Hat Enterprise Linux 4. New features introduced in this update include: - Audit support - systemtap - kprobes, relayfs - Keyring support - ISCI - iscsi_sfnet 4:0.1.11-1 - Device mapper mirroring and multipath support - Intel dual core support - esb2 chipset support - Increased exec-shield coverage - Dirty page tracking for HA systems - Diskdump -- allow partial diskdumps and directing to swap There were several bug fixes in various parts of the kernel. The ongoing effort to resolve these problems has resulted in a marked improvement in the reliability and scalability of Red Hat Enterprise Linux 4. The following security bugs were fixed in this update, detailed below with corresponding CAN names available from the Common Vulnerabilities and Exposures project (cve.mitre.org): - flaws in ptrace() syscall handling on 64-bit systems that allowed a local user to cause a denial of service (crash) (CAN-2005-0756, CAN-2005-1761, CAN-2005-1762, CAN-2005-1763) - flaws in IPSEC network handling that allowed a local user to cause a denial of service or potentially gain privileges (CAN-2005-2456, CAN-2005-2555) - a flaw in sendmsg() syscall handling on 64-bit systems that allowed a local user to cause a denial of service or potentially gain privileges (CAN-2005-2490) - a flaw in sendmsg() syscall handling that allowed a local user to cause a denial of service by altering hardware state (CAN-2005-2492) - a flaw that prevented the topdown allocator from allocating mmap areas all the way down to address zero (CAN-2005-1265) - flaws dealing with keyrings that could cause a local denial of service (CAN-2005-2098, CAN-2005-2099) - a flaw in the 4GB split patch that could allow a local denial of service (CAN-2005-2100) - a xattr sharing bug in the ext2 and ext3 file systems that could cause default ACLs to disappear (CAN-2005-2801) - a flaw in the ipt_recent module on 64-bit architectures which could allow a remote denial of service (CAN-2005-2872) The following device drivers have been upgraded to new versions: qla2100 --------- 8.00.00b21-k to 8.01.00b5-rh2 qla2200 --------- 8.00.00b21-k to 8.01.00b5-rh2 qla2300 --------- 8.00.00b21-k to 8.01.00b5-rh2 qla2322 --------- 8.00.00b21-k to 8.01.00b5-rh2 qla2xxx --------- 8.00.00b21-k to 8.01.00b5-rh2 qla6312 --------- 8.00.00b21-k to 8.01.00b5-rh2 megaraid_mbox --- 2.20.4.5 to 2.20.4.6 megaraid_mm ----- 2.20.2.5 to 2.20.2.6 lpfc ------------ 0:8.0.16.6_x2 to 0:8.0.16.17 cciss ----------- 2.6.4 to 2.6.6 ipw2100 --------- 1.0.3 to 1.1.0 tg3 ------------- 3.22-rh to 3.27-rh e100 ------------ 3.3.6-k2-NAPI to 3.4.8-k2-NAPI e1000 ----------- 5.6.10.1-k2-NAPI to 6.0.54-k2-NAPI 3c59x ----------- LK1.1.19 mptbase --------- 3.01.16 to 3.02.18 ixgb ------------ 1.0.66 to 1.0.95-k2-NAPI libata ---------- 1.10 to 1.11 sata_via -------- 1.0 to 1.1 sata_ahci ------- 1.00 to 1.01 sata_qstor ------ 0.04 sata_sil -------- 0.8 to 0.9 sata_svw -------- 1.05 to 1.06 s390: crypto ---- 1.31 to 1.57 s390: zfcp ------ s390: CTC-MPC --- s390: dasd ------- s390: cio ------- s390: qeth ------ All Red Hat Enterprise Linux 4 users are advised to upgrade their kernels to the packages associated with their machine architectures and configurations as listed in this erratum. Solution Before applying this update, make sure that all previously-released errata relevant to your system have been applied. Use Red Hat Network to download and update your packages. To launch the Red Hat Update Agent, use the following command: up2date For information on how to install packages manually, refer to the following Web page for the System Administration or Customization guide specific to your system: http://www.redhat.com/docs/manuals/enterprise/ Updated packages Red Hat Desktop (v. 4) SRPMS: kernel-2.6.9-22.EL.src.rpm d7cf602d54f72e89550ab6212f63d64f IA-32: kernel-2.6.9-22.EL.i686.rpm a90d57e29a5a57bd0249f61f24ee21ac kernel-devel-2.6.9-22.EL.i686.rpm 6d81ff3a6ee57be6cf3f93066afac875 kernel-doc-2.6.9-22.EL.noarch.rpm dacf6c96256e842e031359e2a00914f6 kernel-hugemem-2.6.9-22.EL.i686.rpm 6591a9886ecda87f164042f015bc1920 kernel-hugemem-devel-2.6.9-22.EL.i686.rpm f39546e6d5a80353878b6087b64ef23b kernel-smp-2.6.9-22.EL.i686.rpm 73e68b49d3ed6b658e6ee716e45d4b2f kernel-smp-devel-2.6.9-22.EL.i686.rpm 0348f9239ec05111b2ef4cbdb9efebb8 x86_64: kernel-2.6.9-22.EL.x86_64.rpm c91230d67ed857a4726d8d810717b571 kernel-devel-2.6.9-22.EL.x86_64.rpm 00908911201abd482b8ff69e6ab91d4d kernel-smp-2.6.9-22.EL.x86_64.rpm e6a37366e53f94b361199c10b03f5f73 kernel-smp-devel-2.6.9-22.EL.x86_64.rpm a34cfbb4d3620d537dbdcb6ffca5ba20 Red Hat Enterprise Linux AS (v. 4) SRPMS: kernel-2.6.9-22.EL.src.rpm d7cf602d54f72e89550ab6212f63d64f IA-32: kernel-2.6.9-22.EL.i686.rpm a90d57e29a5a57bd0249f61f24ee21ac kernel-devel-2.6.9-22.EL.i686.rpm 6d81ff3a6ee57be6cf3f93066afac875 kernel-doc-2.6.9-22.EL.noarch.rpm dacf6c96256e842e031359e2a00914f6 kernel-hugemem-2.6.9-22.EL.i686.rpm 6591a9886ecda87f164042f015bc1920 kernel-hugemem-devel-2.6.9-22.EL.i686.rpm f39546e6d5a80353878b6087b64ef23b kernel-smp-2.6.9-22.EL.i686.rpm 73e68b49d3ed6b658e6ee716e45d4b2f kernel-smp-devel-2.6.9-22.EL.i686.rpm 0348f9239ec05111b2ef4cbdb9efebb8 IA-64: kernel-2.6.9-22.EL.ia64.rpm db70258b904e1f87b59226b77729c182 kernel-devel-2.6.9-22.EL.ia64.rpm 74dca9054b5cd29a265b0b2dbc06393d PPC: kernel-2.6.9-22.EL.ppc64.rpm 7ee94732c4cdab19a3684c08eafec929 kernel-2.6.9-22.EL.ppc64iseries.rpm ef79ea0618694258e1c607ef406e121e kernel-devel-2.6.9-22.EL.ppc64.rpm 3828e3ed47289360e0e310a69b920062 kernel-devel-2.6.9-22.EL.ppc64iseries.rpm 420ceaa39206ab620c8d994b358001a0 s390: kernel-2.6.9-22.EL.s390.rpm 63b72f836b261391e592f86613cccd29 kernel-devel-2.6.9-22.EL.s390.rpm bf0e19ae76243b7449b2d5d8317c8f01 s390x: kernel-2.6.9-22.EL.s390x.rpm 262170f75c72b397b7bf0cad781f5a0e kernel-devel-2.6.9-22.EL.s390x.rpm 6aceef8a0446aceecc7cebe09232bee3 x86_64: kernel-2.6.9-22.EL.x86_64.rpm c91230d67ed857a4726d8d810717b571 kernel-devel-2.6.9-22.EL.x86_64.rpm 00908911201abd482b8ff69e6ab91d4d kernel-smp-2.6.9-22.EL.x86_64.rpm e6a37366e53f94b361199c10b03f5f73 kernel-smp-devel-2.6.9-22.EL.x86_64.rpm a34cfbb4d3620d537dbdcb6ffca5ba20 Red Hat Enterprise Linux ES (v. 4) SRPMS: kernel-2.6.9-22.EL.src.rpm d7cf602d54f72e89550ab6212f63d64f IA-32: kernel-2.6.9-22.EL.i686.rpm a90d57e29a5a57bd0249f61f24ee21ac kernel-devel-2.6.9-22.EL.i686.rpm 6d81ff3a6ee57be6cf3f93066afac875 kernel-doc-2.6.9-22.EL.noarch.rpm dacf6c96256e842e031359e2a00914f6 kernel-hugemem-2.6.9-22.EL.i686.rpm 6591a9886ecda87f164042f015bc1920 kernel-hugemem-devel-2.6.9-22.EL.i686.rpm f39546e6d5a80353878b6087b64ef23b kernel-smp-2.6.9-22.EL.i686.rpm 73e68b49d3ed6b658e6ee716e45d4b2f kernel-smp-devel-2.6.9-22.EL.i686.rpm 0348f9239ec05111b2ef4cbdb9efebb8 IA-64: kernel-2.6.9-22.EL.ia64.rpm db70258b904e1f87b59226b77729c182 kernel-devel-2.6.9-22.EL.ia64.rpm 74dca9054b5cd29a265b0b2dbc06393d x86_64: kernel-2.6.9-22.EL.x86_64.rpm c91230d67ed857a4726d8d810717b571 kernel-devel-2.6.9-22.EL.x86_64.rpm 00908911201abd482b8ff69e6ab91d4d kernel-smp-2.6.9-22.EL.x86_64.rpm e6a37366e53f94b361199c10b03f5f73 kernel-smp-devel-2.6.9-22.EL.x86_64.rpm a34cfbb4d3620d537dbdcb6ffca5ba20 Red Hat Enterprise Linux WS (v. 4) SRPMS: kernel-2.6.9-22.EL.src.rpm d7cf602d54f72e89550ab6212f63d64f IA-32: kernel-2.6.9-22.EL.i686.rpm a90d57e29a5a57bd0249f61f24ee21ac kernel-devel-2.6.9-22.EL.i686.rpm 6d81ff3a6ee57be6cf3f93066afac875 kernel-doc-2.6.9-22.EL.noarch.rpm dacf6c96256e842e031359e2a00914f6 kernel-hugemem-2.6.9-22.EL.i686.rpm 6591a9886ecda87f164042f015bc1920 kernel-hugemem-devel-2.6.9-22.EL.i686.rpm f39546e6d5a80353878b6087b64ef23b kernel-smp-2.6.9-22.EL.i686.rpm 73e68b49d3ed6b658e6ee716e45d4b2f kernel-smp-devel-2.6.9-22.EL.i686.rpm 0348f9239ec05111b2ef4cbdb9efebb8 IA-64: kernel-2.6.9-22.EL.ia64.rpm db70258b904e1f87b59226b77729c182 kernel-devel-2.6.9-22.EL.ia64.rpm 74dca9054b5cd29a265b0b2dbc06393d x86_64: kernel-2.6.9-22.EL.x86_64.rpm c91230d67ed857a4726d8d810717b571 kernel-devel-2.6.9-22.EL.x86_64.rpm 00908911201abd482b8ff69e6ab91d4d kernel-smp-2.6.9-22.EL.x86_64.rpm e6a37366e53f94b361199c10b03f5f73 kernel-smp-devel-2.6.9-22.EL.x86_64.rpm a34cfbb4d3620d537dbdcb6ffca5ba20 (The unlinked packages above are only available from the Red Hat Network) Bugs fixed (see bugzilla for more information) 114578 - RHEL4 U1: File Delegation, at least read-only. 130914 - RHEL4: keyring support (OpenAFS enabler) 134790 - Inspiron 8500 practically hangs when configuring b44 NIC with 1.5G memory 135669 - tcsendbreak fails in compat mode 137343 - RH40-beta1, embedded IDE/PCI drivers not honoring Sub ID's/Class code 140002 - [PATCH] i2o_block timeout Adaptec 2400A raid card 141783 - domain validation fails on DVD-305 when CD in drive 142989 - Terminated threads' resource usage is hidden from procps 144668 - System doesn't reboot even if kernel.panic is > 0 on RHEL-4 Beta-2. 145575 - [RHEL4-U2][Diskdump] Partial dump 145648 - Socket option IP_FREEBIND has no effect on SCTP socket. 145659 - Socket option SO_BINDTODEVICE problems with SCTP listening socket. 145976 - Sub-second mtime changes without modifying file 146187 - [RHEL4RC1] chicony usb keyboard fails, with side effects 147233 - NFSv3 over Kerberos: gss_get_mic FAILED during xdm login attempt 147496 - Sense data errors are seen when trying to access a travan tape device 149478 - Bug / data corruption on error handling in Ext3 under I/O failure condition 149919 - highmem.c: fix bio error propagation 149979 - kernel panic when tar'ing data to IDE Tape device 150152 - nfsv4 callback authentication patch 151222 - smp_apic_timer_interrupt() executes on kernel thread stack 151315 - kernel BUG() at pageattr:107 with rmmod e1000 151323 - Kernel BUG at pageattr:107 151429 - Fusion MPT doesn't handle multiple PCI domains correctly 152162 - LVM snapshots over md raid1 cause corruption 152440 - ppc64 arches can crash when single setpping a debugger through syscall return code 152619 - openipmi drivers missing compat_ioctl's on x86_64 kernel 152982 - fail to mount nfs4 servers 154055 - RHEL4 U1 Oracle 10G 10.0.3 aio hang running tpc-c 154100 - assertion failrue in semaphore.h caused by perfmon 154347 - spin_lock already locked by xfrm4_output 154435 - kernel dm-emc: Fix spinlock reset 154442 - kernel dm-multipath: multiple pg_inits can be issued in parallel 154451 - CAN-2005-1762 x86_64 sysret exception leads to DoS 154733 - oops when catting /proc/net/ip_conntrack_expect 155278 - Debugger killed by kernel when looking at the lowest addressed vmalloc page 155354 - 20050313 SCSI tape security 155706 - CAN-2005-2801 xattr sharing bug 155932 - [RHEL4-U2][Diskdump] hangs when SCSI drive is busy 156010 - [RHEL4-U2] Diskdump - swap partition support 156705 - Serial console corrupt on boot 157239 - Systemtap patches to be ported to RHEL4 U2 kernel 157725 - sysctl -A returns an error 157900 - [not quite PATCH] tg3 driver crashes kernel with BCM5752 chip, newer driver is OK 158107 - Serial console turns into garbage after initialising 16550A 158293 - nfs server intermitently claims ENOENT on existing files or directories 158878 - CAN-2005-1265 Prevent NULL mmap in topdown model 158883 - Annoying i2o_config kernel module messages during raidutil run 158930 - 32-bit GETBLKSIZE ioctl overflows incorrectly on 64-bit hosts. 158974 - [Patch] modprobling a module signed with a key not known to the kernel can result in a panic. 159640 - proc and sysctl interface for lockd grace period do not work 159671 - CAN-2005-1761 local user can use ptrace to crash system 159739 - [Stratus RHEL4U2] csb5 functions are tagged with __init. This causes a crash in a hot-plug environment 159765 - RHEL4 Data corruption in spite of using O_SYNC 159918 - CAN-2005-0756 x86_64 crash (ptrace-check-segment) 159921 - CAN-2005-1763 x86_64 crash (x86_64-ptrace-overflow) 160028 - Kernel BUG at pageattr:107 160518 - audit: file system and user space filtering by auid 160522 - audit: teach OOM killer about auditd 160524 - audit: file system attribute change tracking 160526 - audit:PATH record mode flags are wrong sometimes 160528 - audit: file system watch on block device 160547 - when removing scsi hosts commands are not leaked 160548 - when removing scsi hosts commands are not leaked 160654 - audit: kernel audits auditd 160663 - cable link state ignored on ethernet card (b44). 160812 - fixes exec-shield to not randomize to between end-of-binary and start- of-brk 160882 - i2o RAID monitoring memory leak 161143 - Need export of generic_drop_inode for OCFS2 support 161156 - 'mt tell' fails - backported kernel bug likely 161314 - Bluetooth paring did not work anymore since update to 2.6.9-11.EL 161789 - GET_INDEX macro in aspm pci fixup code can overwrite end of the array 161995 - kernel panic when rm -rf directory structure on tmpfs filesystem 162108 - only the main thread is shown by top(1) 162257 - irq stacks not being used for hardirqs 162548 - interrupt handlers run on thread's kernel stack 162728 - JBD race during shutdown of a journal 163528 - /dev/tty won't open during blocking /dev/ttyS1 open 164094 - Placeholder for 2.6.x SATA update 20050724-1 164228 - Export sys_recvmesg for cluster snapshot 164338 - fix aio hang when reading beyond EOF 164449 - RHEL4 [NETFILTER]: Fix deadlock in ip6_queue. 164450 - [NETFILTER]: Fix potential memory corruption in NAT code (aka memory NAT) 164628 - pci_scan_device can cause master abort 164630 - panic while running fsstress to a filesystem on a mirror 164979 - CAN-2005-2098 Error during attempt to join key management session can leave semaphore pinned 164991 - CAN-2005-2099 Destruction of failed keyring oopses 165127 - acpi_processor_get_performance_states fails on empty table entries (_PSS) 165163 - audit - syscall performance 165242 - mirrors possibly reporting invalid blocks to the filesystem 165384 - cpufreq driver hangs when using SMP Powernow 165547 - CAN-2005-2100 4G/4G split bounds checking 165560 - CAN-2005-2456 IPSEC overflow 165717 - ext on top of mirror attempts to access beyond end of device: dm-5: rw=0, want=16304032720, limit=20971520 166131 - CAN-2005-2555 IPSEC lacks restrictions 166248 - CAN-2005-2490 sendmsg compat stack overflow 166830 - CAN-2005-2492 sendmsg DoS 167126 - bad elf check in module-verify.c 167412 - [RFC] [RHEL4 U2 patch] dual-core detection gap for i386 build 167668 - LTC17960-Kernel panic at key_put+0x4/0x19 [REGRESSION] 167703 - CAN-2005-2872 ipt_recent crash 167711 - LTC18014-powernow-k8 debug messages are enabled References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0756 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1265 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1761 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1762 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-1763 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2098 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2099 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2100 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2456 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2490 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2492 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2555 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2801 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2872 Keywords kernel, nahant, update These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from: https://www.redhat.com/security/team/key/#package The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/ [***** End Red Hat Security Advisory RHSA-2005:514-44 *****] _______________________________________________________________________________ CIAC wishes to acknowledge the contributions of Red Hat for the information contained in this bulletin. _______________________________________________________________________________ CIAC, the Computer Incident Advisory Capability, is the computer security incident response team for the U.S. Department of Energy (DOE) and the emergency backup response team for the National Institutes of Health (NIH). CIAC is located at the Lawrence Livermore National Laboratory in Livermore, California. CIAC is also a founding member of FIRST, the Forum of Incident Response and Security Teams, a global organization established to foster cooperation and coordination among computer security teams worldwide. CIAC services are available to DOE, DOE contractors, and the NIH. CIAC can be contacted at: Voice: +1 925-422-8193 (7x24) FAX: +1 925-423-8002 STU-III: +1 925-423-2604 E-mail: ciac@ciac.org Previous CIAC notices, anti-virus software, and other information are available from the CIAC Computer Security Archive. World Wide Web: http://www.ciac.org/ Anonymous FTP: ftp.ciac.org PLEASE NOTE: Many users outside of the DOE, ESnet, and NIH computing communities receive CIAC bulletins. If you are not part of these communities, please contact your agency's response team to report incidents. Your agency's team will coordinate with CIAC. The Forum of Incident Response and Security Teams (FIRST) is a world-wide organization. A list of FIRST member organizations and their constituencies can be obtained via WWW at http://www.first.org/. This document was prepared as an account of work sponsored by an agency of the United States Government. Neither the United States Government nor the University of California nor any of their employees, makes any warranty, express or implied, or assumes any legal liability or responsibility for the accuracy, completeness, or usefulness of any information, apparatus, product, or process disclosed, or represents that its use would not infringe privately owned rights. Reference herein to any specific commercial products, process, or service by trade name, trademark, manufacturer, or otherwise, does not necessarily constitute or imply its endorsement, recommendation or favoring by the United States Government or the University of California. The views and opinions of authors expressed herein do not necessarily state or reflect those of the United States Government or the University of California, and shall not be used for advertising or product endorsement purposes. LAST 10 CIAC BULLETINS ISSUED (Previous bulletins available from CIAC) P-315: Security Vulnerability in the Xsun(1) and Xprt(1) Commands P-316: TWiki INCLUE Function Allows Arbitrary Shell Command Execution P-317: Binutils Security Update P-318: Updated Kernel Packages Red Hat Enterprise Linux 3 Update 6 P-319: IBM Security Vulnerabilities in Getconfig Command P-320: MySQL & MySQL-dfsg Q-001: GNU 'mailutils' Format String Vulnerability Q-002: 'apachetop' Insecure Temporary File Q-003: Symantec AV Scan Engine Web Interface Vulnerability Q-004: 'arc' Insecure Temporary File Creation