kernel Kernel Update for SUSE Linux 10.1 Kernel Update für SUSE Linux 10.1 This kernel update fixes the following security problems: - CVE-2006-2936: The ftdi_sio driver allowed local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, which only happens if such a device is plugged in. [#191836] - CVE-2006-4814: A deadlock in mincore that could be caused by local attackers was fixed. [#207667] - CVE-2006-6106: Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel allowed remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field. [#227603] - CVE-2006-5749: The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux kernel does not call the init_timer function for the ISDN PPP CCP reset state timer, which has unknown attack vectors and results in a system crash. [#229619] - CVE-2006-5753: Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service (data corruption) and possibly gain privileges. [#230270] - A remote denial of service problem on NFSv3 mounts with ACL enabled was fixed. [#244909] Furthermore, this kernel catches up to the SLE 10 state of the kernel, with massive additional fixes. Dieses Kernel Update behebt folgende Sicherheitsprobleme (aufgelistet in englischer Sprache): - CVE-2006-2936: The ftdi_sio driver allowed local users to cause a denial of service (memory consumption) by writing more data to the serial port than the hardware can handle, which causes the data to be queued. This requires this driver to be loaded, which only happens if such a device is plugged in. [#191836] - CVE-2006-4814: A deadlock in mincore that could be caused by local attackers was fixed. [#207667] - CVE-2006-6106: Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel allowed remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field. [#227603] - CVE-2006-5749: The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux kernel does not call the init_timer function for the ISDN PPP CCP reset state timer, which has unknown attack vectors and results in a system crash. [#229619] - CVE-2006-5753: Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service (data corruption) and possibly gain privileges. [#230270] - A remote denial of service problem on NFSv3 mounts with ACL enabled was fixed. [#244909] Weiterhin enthält dieses Update alle Änderungen des SLE 10 Kernel. security This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. If you are in the course of performing a new installation, you should deselect this kernel update in order to avoid problems with the hardware detection during the installation. kernel-bigsmp i586 d3bf9ecb0bdb7d678f46b985a637e25502353061 kernel-debug i586 fb5189e8fd333f4cea196f3a9eaaebf512f171ae kernel-debug x86_64 cc741d9ca4991a22fa74de5e4d79c4d1ea4e16c3 kernel-default i586 565333c6080bd1d15393f91a019428ae1ed9aacc kernel-default ppc c30a59b9afad459ed6e47871ec0d166a76e2b321 kernel-default x86_64 b03b7e26e02167e919847dbd7f03b2a972f972a4 kernel-iseries64 ppc 14eaf244a47e32589069c9f58b0fac046aff02e9 kernel-kdump i586 1c2e1554c8ab751cb2ba783ea64ce5c8e61efde8 kernel-kdump ppc 07cd228191d0705c96f24a7853a5db9dcfea871f kernel-kdump x86_64 22abc5165d2cb535c725a0efe95fbdc4cd427a80 kernel-ppc64 ppc c1549c3160ed1d354d3f5033deb7d49ee0d03df3 kernel-smp i586 c55576cec37236a3b4b86c1d50a5cfc841bc3802 kernel-smp x86_64 38d1a1f9764f48d426723e8560a5457937ec73ff kernel-source i586 28c609d4aaed2490a74cf4f3eed3fe2796838cda kernel-source ppc 888344259796a5eda94a035c1f25add4b06234f4 kernel-source x86_64 9b73dc04eebab65428d1e66d5c5a75b78583f464 kernel-syms i586 30b91efda807e2156d9a949b5a60365fdbd6661a kernel-syms ppc f3421dc5672c3eefbfa4d65444095c92987be16f kernel-syms x86_64 2e940c8cd868eb4df2f98050f243bc6de2f1aa62 kernel-um i586 006cb145f1cb43e2449cde8ddf8dd85b742da737 kernel-xen i586 11a56908b73d25ecba5ca0162ddefac8e1b68304 kernel-xen x86_64 be0ac7f6b267533691482594f470fa2540e9f9ad kernel-xenpae i586 a450b0bbaecd6ade99f6c5077654f3451b4653ca kexec-tools i586 3c30939aaf835c1facc9b490d475dcc4649cc6ca kexec-tools x86_64 43dc69f1a00b32fd5e24b9327a1bd0ac4b0da4cc mkinitrd i586 6a0c6c28a211571c255469a462a9793a8e19cc95 mkinitrd ppc 65067603f2f8c3d2129f493922295dc0e5e6cd71 mkinitrd x86_64 7d6dde133791f37c35985ef4de8ad98e2781da97 multipath-tools i586 83acdf8f1ae5e286d30d0e158fda913bc7d4092a multipath-tools ppc 5a876b06e489368558a2eddf4a403972b8c401c8 multipath-tools x86_64 35e9aad0013d334e153989a94fbdcc87d304eb8f open-iscsi i586 9aa4d9f3e4642bca9154151f685cf00a16d0cf5c open-iscsi ppc 2168b57362673733f620cd3f5073d14bfdd9618f open-iscsi x86_64 41db934e3d166bdafc2ef4dc19d5fc0dc759189c udev i586 7e230d71774c00c9f8483c29ba12abc099fa1122 udev ppc 2ade4fd60b6a5af6e8aa07dd7e334d8044344272 udev x86_64 598d6531e38c810ab50b06f706e5f56d1b0fb317