kernel Kernel Update for SUSE Linux 10.1 Kernel Update für SUSE Linux 10.1 This kernel update fixes the following security problems: ++ CVE-2007-3104: The sysfs_readdir function in the Linux kernel 2.6 allows local users to cause a denial of service (kernel OOPS) by dereferencing a null pointer to an inode in a dentry. ++ CVE-2007-4997: A 2 byte buffer underflow in the ieee80211 stack was fixed, which might be used by attackers in the local WLAN reach to crash the machine. ++ CVE-2007-3740: The CIFS filesystem, when Unix extension support is enabled, did not honor the umask of a process, which allowed local users to gain privileges. ++ CVE-2007-4573: It was possible for local user to become root by exploiting a bug in the IA32 system call emulation. This problem affects the x86_64 platform only, on all distributions. This problem was fixed for regular kernels, but had not been fixed for the XEN kernels. This update fixes the problem also for the XEN kernels. ++ CVE-2007-4308: The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid did not check permissions for ioctls, which might have allowed local users to cause a denial of service or gain privileges. ++ CVE-2007-3843: The Linux kernel checked the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request. ++ CVE-2007-5904: Multiple buffer overflows in CIFS VFS in the Linux kernel allowed remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function. This requires the attacker to mis-present / replace a CIFS server the client machine is connected to. ++ CVE-2007-6063: Buffer overflow in the isdn_net_setcfg function in isdn_net.c in the Linux kernel allowed local users to have an unknown impact via a crafted argument to the isdn_ioctl function. Furthermore, this kernel catches up to the SLE 10 state of the kernel, with numerous additional fixes. Dieses Kernel Update behebt folgende Sicherheitsprobleme (aufgelistet in englischer Sprache): ++ CVE-2007-3104: The sysfs_readdir function in the Linux kernel 2.6 allows local users to cause a denial of service (kernel OOPS) by dereferencing a null pointer to an inode in a dentry. ++ CVE-2007-4997: A 2 byte buffer underflow in the ieee80211 stack was fixed, which might be used by attackers in the local WLAN reach to crash the machine. ++ CVE-2007-3740: The CIFS filesystem, when Unix extension support is enabled, did not honor the umask of a process, which allowed local users to gain privileges. ++ CVE-2007-4573: It was possible for local user to become root by exploiting a bug in the IA32 system call emulation. This problem affects the x86_64 platform only, on all distributions. This problem was fixed for regular kernels, but had not been fixed for the XEN kernels. This update fixes the problem also for the XEN kernels. ++ CVE-2007-4308: The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid did not check permissions for ioctls, which might have allowed local users to cause a denial of service or gain privileges. ++ CVE-2007-3843: The Linux kernel checked the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request. ++ CVE-2007-5904: Multiple buffer overflows in CIFS VFS in the Linux kernel allowed remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function. This requires the attacker to mis-present / replace a CIFS server the client machine is connected to. ++ CVE-2007-6063: Buffer overflow in the isdn_net_setcfg function in isdn_net.c in the Linux kernel allowed local users to have an unknown impact via a crafted argument to the isdn_ioctl function. Weiterhin enthält dieses Update alle Änderungen des SLE 10 Kernel. security This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. If you are in the course of performing a new installation, the installer will reboot the machine after installing the patch. If you do not want to reboot, deselect this patch. kernel-bigsmp i586 0b6cea23226d9bd77462d724f42be9b401ca79c2 kernel-debug i586 abb8787bb59a76e04158ed0ea29ac1ce8bb59e18 kernel-debug x86_64 19649292da8e301b4c73f64ac0816dfe386f4706 kernel-default i586 530f842736ab54a4bafa77dd9abde06f5490aa2b kernel-default ppc 13246c1d69a609356ba84ef5b2df83133f914823 kernel-default x86_64 f2694edd78f9e8f2df5fe78a0194f3682d5530b2 kernel-iseries64 ppc 4fcb0de46ac176a9f74389efc5dae7108c873222 kernel-kdump i586 00565ffb9a8f0c2a46dd49a61a4aa3bab311388a kernel-kdump ppc cbae913b488a1a323d2425cca278635e269b5493 kernel-kdump x86_64 c803d3316e05548338a9906add606ef96ec94118 kernel-ppc64 ppc 41bf84ed7d62672a7328f6cff30d019bdfb34a12 kernel-smp i586 a076b9b1e404bcfb455ca3fd119a5f736d051314 kernel-smp x86_64 6ed565b22c121007833fb09456675a4ee40ec4cb kernel-source i586 83da40f0169a7cdd0b195e12903ab90e0fb91f73 kernel-source ppc 474ff60d72bcd6061f6618571c46656bfc084242 kernel-source x86_64 f502e6baa617abf702de61295e04c7eaa195e814 kernel-syms i586 f56b58ef1092c8947677f9f1e21420dc1384e578 kernel-syms ppc 271dc49ae848971fac2e45a36927a8903f5ca7b2 kernel-syms x86_64 9a0e9241414281e249ab3287852ae42023b7fe83 kernel-um i586 3df0035e9cc51e1ea47f43926fab33617c65b801 kernel-xen i586 b9c1f0ecdecc82fbfab42bb0e55e76ff3bb45a21 kernel-xen x86_64 68477b44fef5eba18b1586d89ca680180fa5d255 kernel-xenpae i586 651baebb54eb2b095fac5fa012674549b4f166cd