kernel Linux Kernel security update. Linux Kernel security update. This kernel update fixes the following security problems: - CVE-2006-5751: An integer overflow in the networking bridge ioctl starting with Kernel 2.6.7 could be used by local attackers to overflow kernel memory buffers and potentially escalate privileges [#222656] - CVE-2006-6106: Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel allowed remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field. [#227603] - CVE-2006-5749: The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux kernel does not call the init_timer function for the ISDN PPP CCP reset state timer, which has unknown attack vectors and results in a system crash. [#229619] - CVE-2006-5753: Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service (data corruption) and possibly gain privileges. [#230270] - CVE-2007-0006: The key serial number collision avoidance code in the key_alloc_serial function allows local users to cause a denial of service (crash) via vectors that trigger a null dereference. [#243003] - CVE-2007-0772: A remote denial of service problem on NFSv2 mounts with ACL enabled was fixed. [#244909] Furthermore, it catches up to the mainline kernel, version 2.6.18.8, and contains a large number of additional fixes for non security bugs. Dieses Kernel Update behebt folgende Sicherheitsprobleme (aufgelistet in englischer Sprache): - CVE-2006-5751: An integer overflow in the networking bridge ioctl starting with Kernel 2.6.7 could be used by local attackers to overflow kernel memory buffers and potentially escalate privileges [#222656] - CVE-2006-6106: Multiple buffer overflows in the cmtp_recv_interopmsg function in the Bluetooth driver (net/bluetooth/cmtp/capi.c) in the Linux kernel allowed remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via CAPI messages with a large value for the length of the (1) manu (manufacturer) or (2) serial (serial number) field. [#227603] - CVE-2006-5749: The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/isdn_ppp.c in the Linux kernel does not call the init_timer function for the ISDN PPP CCP reset state timer, which has unknown attack vectors and results in a system crash. [#229619] - CVE-2006-5753: Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial of service (data corruption) and possibly gain privileges. [#230270] - CVE-2007-0006: The key serial number collision avoidance code in the key_alloc_serial function allows local users to cause a denial of service (crash) via vectors that trigger a null dereference. [#243003] - CVE-2007-0772: A remote denial of service problem on NFSv2 mounts with ACL enabled was fixed. [#244909] Weiterhin schließt es auf zum Mainline Kernel 2.6.18.8 und behebt eine Anzahl sonstige, nicht die Sicherheit betreffende Fehler. security This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. If you are in the course of performing a new installation, you should deselect this kernel update in order to avoid problems with the hardware detection during the installation. kernel-bigsmp i586 1477f31527dff36a56abee25b5888478e4199710 kernel-default i586 34ebaa1ee8076c8283efbb4c4082bab98f0b1371 kernel-default ppc 76156362c20f94461d22d1c61097f79af31e0125 kernel-default x86_64 821b8c11cf486ec8b13476d62b00ae66489896c4 kernel-iseries64 ppc f3e96f432b840b374edb1529bc6f9a082bbc95ed kernel-ppc64 ppc 863ee71253eab2b8fafe63ce30fdfd1231aab03d kernel-source i586 617e995e1767a99a5a809a34f95c7fd8d01560c2 kernel-source ppc a2655f3a75ddfffef6c5bf34b7a8f024e2f2aef3 kernel-source x86_64 5c78dd2be691dd1ad3ccfbaecf22ac9626c935c3 kernel-syms i586 aeeefecc18363355deeae9380bc92ab427cdad91 kernel-syms ppc f1a77a28c0e958ef29d7f04c7ddb84a033a9f5e0 kernel-syms x86_64 a2116e1b78197560066d654551dbc5596facf80a kernel-xen i586 3aff572a7395f84e7a9616ac3c9c880aed82793f kernel-xen x86_64 5098e749e45e26e8c967c705ec4fb22fa24aa83b kernel-xenpae i586 bcff664d220993b23793dbf4b8c95b85413bf3de kernel-2705-patch-message-2 If you are using the LILO bootloader, please execute /sbin/lilo after installing the update kernel and prior to rebooting