kernel Kernel Update for SUSE Linux 10.1 Kernel Update für SUSE Linux 10.1 This kernel update fixes the following security problems: - CVE-2006-4145: A bug within the UDF filesystem that caused machine hangs when truncating files on the filesystem was fixed. [#186226] - - A potential crash when receiving IPX packets was fixed. This problem is thought not to be exploitable. [#197809] - CVE-2006-4623: A problem in DVB packet handling could be used to crash the machine when receiving DVB net packages is active. [#201429] - CVE-2006-3741: A struct file leak was fixed in the perfmon(2) system call on the Itanium architecture. [#202269] - CVE-2006-4538: A malformed ELF image can be used on the Itanium architecture to trigger a kernel crash (denial of service) when a local attacker can supply it to be started. [#203822] - CVE-2006-4997: A problem in the ATM protocol handling clip_mkip function could be used by remote attackers to potentially crash the machine. [#205383] CVE-2006-5757/ - CVE-2006-6060: A problem in the grow_buffers function could be used to crash or hang the machine using a corrupted filesystem. This affects filesystem types ISO9660 and NTFS. [#205384] - CVE-2006-5173: On the i386 architecture the ELFAGS content was not correctly saved, which could be used by local attackers to crash other programs using the AC and NT flag or to escalate privileges by waiting for iopl privileges to be leaked. [#209386] - CVE-2006-5174: On the S/390 architecture copy_from_user() could be used by local attackers to read kernel memory. [#209880] - CVE-2006-5619: A problem in IPv6 flowlabel handling can be used by local attackers to hang the machine. [#216590] - CVE-2006-5648: On the PowerPC architecture a syscall has been wired without the proper futex implementation that can be exploited by a local attacker to hang the machine. [#217295] - CVE-2006-5649: On the PowerPC architecture the proper futex implementation was missing a fix for alignment check which could be used by a local attacker to crash the machine. [#217295] - CVE-2006-5823: A problem in cramfs could be used to crash the machine during mounting a crafted cramfs image. This requires an attacker to supply such a crafted image and have a user mount it. [#218237] - CVE-2006-6053: A problem in the ext3 filesystem could be used by attackers able to supply a crafted ext3 image to cause a denial of service or further data corruption if a user mounts this image. [#220288] - CVE-2006-6056: Missing return code checking in the HFS could be used to crash machine when a user complicit attacker is able to supply a specially crafted HFS image. [#221230] - CVE-2006-4572: Multiple unspecified vulnerabilities in netfilter for IPv6 code allow remote attackers to bypass intended restrictions via fragmentation attack vectors, aka (1) "ip6_tables protocol bypass bug" and (2) "ip6_tables extension header bypass bug". [#221313] - CVE-2006-5751: An integer overflow in the networking bridge ioctl starting with Kernel 2.6.7 could be used by local attackers to overflow kernel memory buffers and potentially escalate privileges [#222656] Additionaly this kernel catches up to the SLE 10 state of the kernel, with massive additional fixes. Dieses Kernel Update behebt folgende Sicherheitsprobleme (aufgelistet in englischer Sprache): - CVE-2006-4145: A bug within the UDF filesystem that caused machine hangs when truncating files on the filesystem was fixed. [#186226] - - A potential crash when receiving IPX packets was fixed. This problem is thought not to be exploitable. [#197809] - CVE-2006-4623: A problem in DVB packet handling could be used to crash the machine when receiving DVB net packages is active. [#201429] - CVE-2006-3741: A struct file leak was fixed in the perfmon(2) system call on the Itanium architecture. [#202269] - CVE-2006-4538: A malformed ELF image can be used on the Itanium architecture to trigger a kernel crash (denial of service) when a local attacker can supply it to be started. [#203822] - CVE-2006-4997: A problem in the ATM protocol handling clip_mkip function could be used by remote attackers to potentially crash the machine. [#205383] CVE-2006-5757/ - CVE-2006-6060: A problem in the grow_buffers function could be used to crash or hang the machine using a corrupted filesystem. This affects filesystem types ISO9660 and NTFS. [#205384] - CVE-2006-5173: On the i386 architecture the ELFAGS content was not correctly saved, which could be used by local attackers to crash other programs using the AC and NT flag or to escalate privileges by waiting for iopl privileges to be leaked. [#209386] - CVE-2006-5174: On the S/390 architecture copy_from_user() could be used by local attackers to read kernel memory. [#209880] - CVE-2006-5619: A problem in IPv6 flowlabel handling can be used by local attackers to hang the machine. [#216590] - CVE-2006-5648: On the PowerPC architecture a syscall has been wired without the proper futex implementation that can be exploited by a local attacker to hang the machine. [#217295] - CVE-2006-5649: On the PowerPC architecture the proper futex implementation was missing a fix for alignment check which could be used by a local attacker to crash the machine. [#217295] - CVE-2006-5823: A problem in cramfs could be used to crash the machine during mounting a crafted cramfs image. This requires an attacker to supply such a crafted image and have a user mount it. [#218237] - CVE-2006-6053: A problem in the ext3 filesystem could be used by attackers able to supply a crafted ext3 image to cause a denial of service or further data corruption if a user mounts this image. [#220288] - CVE-2006-6056: Missing return code checking in the HFS could be used to crash machine when a user complicit attacker is able to supply a specially crafted HFS image. [#221230] - CVE-2006-4572: Multiple unspecified vulnerabilities in netfilter for IPv6 code allow remote attackers to bypass intended restrictions via fragmentation attack vectors, aka (1) "ip6_tables protocol bypass bug" and (2) "ip6_tables extension header bypass bug". [#221313] - CVE-2006-5751: An integer overflow in the networking bridge ioctl starting with Kernel 2.6.7 could be used by local attackers to overflow kernel memory buffers and potentially escalate privileges [#222656] Weiterhin enthält dieses Update alle Änderungen des SLE 10 Kernel. security This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. If you are in the course of performing a new installation, you should deselect this kernel update in order to avoid problems with the hardware detection during the installation. kernel-bigsmp i586 6d0619c57dd69ae844b653949941bf9e2e78c32d kernel-debug i586 d42bdbaae9e34ab7f954e134002d8d1d833341c0 kernel-debug x86_64 ce3b98d30dc19ef642af5a440220418c9703913d kernel-default i586 252b6eefaea33e6f30c7afc2c438eaae64a12a85 kernel-default ppc 6e2c09ad9f835be03cd87c8152cb4dcdffa4f867 kernel-default x86_64 54b68de9ba2911f0d3d3256b62618f2c282a8d08 kernel-iseries64 ppc 4cbcd61b97f13ee5d592550af344b97101e2f007 kernel-kdump i586 477735d18b5f15a5b550742df587dd5212581f74 kernel-kdump ppc b8fa41e55bbb027bb91d930592c1f5f5a528b251 kernel-kdump x86_64 529500aa61ec505ecb8064d42e203d5944780c20 kernel-ppc64 ppc a479cf25efa606c94bf7bd3e5117b415ae6023e3 kernel-smp i586 e68c8f4c4376cd359cfad724dbb114409e48f5d8 kernel-smp x86_64 1cb5077cae51a4a656c6a719394f7efb09db231d kernel-source i586 11639b1b2f5003778cdefb9e4fb99c7284a52fda kernel-source ppc 5209a92fd3b2df5c055d77653653e95dbae2f43a kernel-source x86_64 df04ef20047c02c1f4510799299243d6ba527c68 kernel-syms i586 fb7ace756ffe508e4ac47af7a3ca46df0ea7052b kernel-syms ppc a910ae668759764b45c5efc28996d445f1c29c51 kernel-syms x86_64 d9d4584d5a601c94576547b3f6d1c1f25ea5c222 kernel-um i586 c3e4824e5682fc879fbd8fa6016d16ea9e1faf0a kernel-xen i586 9722324e7962096fffc6db80c468f09b8163aad9 kernel-xen x86_64 cd5c8c157e412c9b817c82c763fe22920d12c5e8 kernel-xenpae i586 e0e79a68affc036553249f77927716c59d0b5fcc kexec-tools i586 e8ae275111b4e26e3eb5d44e8d29cdf54ac151f9 kexec-tools x86_64 d43eada96f440d2148c3d52ba21335ba37e87b48 mkinitrd i586 b18183264467ef7fab07effc997354cd6ee6293a mkinitrd ppc b17ecf8d626b7afa272471cba804cedc0fb65705 mkinitrd x86_64 1a5701ef272f84caaa51943c1f16ed66360550b5 multipath-tools i586 6d3a043468c88755452647202190ba9e98d1e6d1 multipath-tools ppc 5d9dc022abd4e37851cd21032032d8eb63e833c9 multipath-tools x86_64 d93c13504b88d7f820b2552b726f684e25c44964 open-iscsi i586 9c7a662317a85b6434570e20f59e3297eab5e8bd open-iscsi ppc eda017cef207330cb73077865273326d4498af4b open-iscsi x86_64 869e0fef715a096b97f4bb07565a98dff190a0a8 udev i586 62a1af4080e82812c2a1201dd31ba6c07d3e87d1 udev ppc 4e8419d44947d6a48647e01c6fad58394b31720f udev x86_64 ac117379e8ae05fa551a7f2a41798352151b203a kernel-2397-patch-message-2 If you are using the LILO bootloader, please execute /sbin/lilo after installing the update kernel and prior to rebooting