kernel Kernel Update for SUSE Linux 10.1 Kernel Update für SUSE Linux 10.1 This kernel update fixes the following security problems: - CVE-2006-3745: A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. [#199441] - CVE-2006-4093: Local attackers were able to crash PowerPC systems with PPC970 processor using a not correctly disabled privileged instruction ("attn"). [#197810] - CVE-2006-3468: Remote attackers able to access an NFS of a ext2 or ext3 filesystem can cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error and causes an exported directory to be remounted read-only. [#192988] Additionaly this kernel catches up to the SLE 10 state of the kernel, with massive additional fixes. Dieses Kernel Update behebt folgende Sicherheitsprobleme (aufgelistet in englischer Sprache): - CVE-2006-3745: A double userspace copy in a SCTP ioctl allows local attackers to overflow a buffer in the kernel, potentially allowing code execution and privilege escalation. [#199441] - CVE-2006-4093: Local attackers were able to crash PowerPC systems with PPC970 processor using a not correctly disabled privileged instruction ("attn"). [#197810] - CVE-2006-3468: Remote attackers able to access an NFS of a ext2 or ext3 filesystem can cause a denial of service (file system panic) via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle (inode number), which triggers an error and causes an exported directory to be remounted read-only. [#192988] Weiterhin enthält dieses Update alle Änderungen des SLE 10 Kernel. security This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. If you are in the course of performing a new installation, you should deselect this kernel update in order to avoid problems with the hardware detection during the installation. kernel-bigsmp i586 65718be7ec3d61112e03c40c5c70e6c505518c24 kernel-debug i586 066da9823d0db4e81bd376106944bd3d61ff9432 kernel-debug x86_64 678bda8b92c98700d3a0fa8609ba61cbfe8e2a4e kernel-default i586 c6cb86e2b73beeed9c874faee7a7c3eef94dd9a4 kernel-default ppc 645469c3bf62db6d1ebfb1c674e01c2fea1e1755 kernel-default x86_64 f575a360b64c8749c8ab323f4ee9886f48352ab9 kernel-iseries64 ppc 241ab76d844507a9de57815178725f204e470ee3 kernel-kdump i586 5932e0caf527fac4ff08488790eee65019b8149d kernel-kdump ppc fa4ab3e7d6309d44f3d2127b8356a828a6ab0cf6 kernel-kdump x86_64 531ded43c3d07fe7408152d16d92e847304e9448 kernel-ppc64 ppc 625fece491558e890035a4951a62ad750a97a5c6 kernel-smp i586 ad352730c60fd9159d39cfcd2c453b3143b4a0d8 kernel-smp x86_64 c670813ec736918a23261ff93ce6659ed5f10099 kernel-source i586 a9316a5fe4677d7ff4ac2b29a02369dfb0dab6a3 kernel-source ppc 066951939da0c40fd44f6243ce4b5211a26064d1 kernel-source x86_64 17b90b9ed7753b72ff0d0e0a062a9141875211e7 kernel-syms i586 5b2c904b0422e4a780d10c0a8a97a9b61416a721 kernel-syms ppc e0c159b877d50d5a391d6e384acef9f882e0a60f kernel-syms x86_64 a1248b8eda8ab7d93497c9ae7d63fa09993dd59e kernel-um i586 2b4c75ebf62fa750a64433a741c52599f59b801a kernel-xen i586 4c76981d01be239eccef2e057bbf9652ea6b65b1 kernel-xen x86_64 8cb73d6f2978f04ec92494b3035faaed56f85c9a kernel-xenpae i586 24da82636736aab69eae1ae334caa7b00e89eb3a kexec-tools i586 08815496faa27a07a78990ca5b28f39f9366559c kexec-tools x86_64 637d1f42ced1bef7f3d79fa042644d473515fdfa mkinitrd i586 c20e5e7ad3c59d32ae3824b9098d5c7281fe38ec mkinitrd ppc 95a67db2c546d3c56c8563548ddd1123638725c9 mkinitrd x86_64 e3e014e0795a8ee874a575afaf4ec49a3c321b1e multipath-tools i586 3466a49b1263dbeb42eb7fef281a6d5d768a8446 multipath-tools ppc 210d17b54938779727d53e6512b13b1e55610c0e multipath-tools x86_64 978470567c211a953502bc8a9296e72d0379a7cd open-iscsi i586 f691e95a3bdd16bd36d7cc1fe2751297f0621a7c open-iscsi ppc 39166c525d0685f51add7fe62e07256a51a38ec8 open-iscsi x86_64 ce2f43e521b3afc18d5c119855f080f63e8495d3 udev i586 9298f5fadb9c79ca172f3145ed503322b7f86527 udev ppc ea0b8474a4c068ffa5bf6f12f50e5a8009047c2c udev x86_64 3032f46edc06058a450fd3de64453826ed1a0c3b kernel-2099-patch-message-2 If you are using the LILO bootloader, please execute /sbin/lilo after installing the update kernel and prior to rebooting