kernel Linux Kernel security update. Linux Kernel security update. This kernel update fixes the following security problems: - CVE-2007-3105: Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wake-up threshold to a value greater than the output pool size, which triggers writing random numbers to the stack by the pool transfer function involving "bound check ordering". Since this value can only be changed by a root user, exploitability is low. - CVE-2007-2525: A memory leak in the PPPoE driver can be abused by local users to cause a denial-of-service condition. - CVE-2007-3851: On machines with a Intel i965 based graphics card local users with access to the direct rendering devicenode could overwrite memory on the machine and so gain root privileges. - CVE-2007-4573: It was possible for local user to become root by exploitable a bug in the IA32 system call emulation. This affects x86_64 platforms with kernel 2.4.x and 2.6.x before 2.6.22.7 only. - CVE-2007-4571: An information disclosure vulnerability in the ALSA driver can be exploited by local users to read sensitive data from the kernel memory. and the following non security bugs: - - patches.arch/x86-fam10-mtrr: mtrr: fix size_or_mask and size_and_mask [#237736] - - patches.fixes/usb_nokia6233_fix1.patch: usb: rndis_host: fix crash while probing a Nokia S60 mobile [#244459] - - patches.fixes/usb_nokia6233_fix2.patch: usbnet: init fault (oops) cleanup, whitespace fixes [#244459] - - patches.fixes/usb_nokia6233_fix2.patch: usb: unusual_devs.h entry for Nokia 6233 [#244459] - - patches.fixes/bt_broadcom_reset.diff: quirky Broadcom device [#257303] - - patches.arch/i386-compat-vdso: i386: allow debuggers to access the vsyscall page with compat vDSO [#258433] - - patches.fixes/anycast6-unbalanced-inet6_dev-refcnt.patch: Fix netdevice reference leak when reading from /proc/net/anycast6 [#285336] - - patches.drivers/scsi-throttle-SG_DXFER_TO_FROM_DEV-warning-b etter: SCSI: throttle SG_DXFER_TO_FROM_DEV warning message better [#290117] - - patches.fixes/nf_conntrack_h323-out-of-bounds-index.diff: nf_conntrack_h323: add checking of out-of-range on choices' index values [#290611] - - patches.fixes/ppc-fpu-corruption-fix.diff: ppc: fix corruption of fpu [#290622] - - patches.fixes/ppp-fix-osize-too-small-errors-when-decoding-m ppe.diff: ppp: Fix osize too small errors when decoding mppe [#291102] - - patches.fixes/hugetlbfs-stack-grows-fix.patch: Don't allow the stack to grow into hugetlb reserved regions [#294021] - - patches.fixes/pwc_dos.patch: fix a disconnect method waiting for user space to close a file. A malicious user can stall khubd indefinitely long [#302063] [#302194] - - patches.suse/kdb.add-unwind-info-to-kdb_call: Add unwind info to kdb_call() to fix build of KDB kernel on i386 [#305209] - - Updated config files: enable KDB for kernel-debug on i386. [#305209] Dieses Kernel Update behebt folgende Sicherheitsprobleme (aufgelistet in englischer Sprache): - CVE-2007-3105: Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wake-up threshold to a value greater than the output pool size, which triggers writing random numbers to the stack by the pool transfer function involving "bound check ordering". Since this value can only be changed by a root user, exploitability is low. This was already fix for SLES10. - CVE-2007-2525: A memory leak in the PPPoE driver can be abused by local users to cause a denial-of-service condition. This bug was already fixed for SLES10. - CVE-2007-3851: On machines with a Intel i965 based graphics card local users with access to the direct rendering devicenode could overwrite memory on the machine and so gain root privileges. - CVE-2007-4573: It was possible for local user to become root by exploitable a bug in the IA32 system call emulation. This affects x86_64 platforms with kernel 2.4.x and 2.6.x before 2.6.22.7 only. - CVE-2007-4571: An information disclosure vulnerability in the ALSA driver can be exploited by local users to read sensitive data from the kernel memory. Des weiteren wurden folgende Fehler behoben: - - patches.arch/x86-fam10-mtrr: mtrr: fix size_or_mask and size_and_mask [#237736] - - patches.fixes/usb_nokia6233_fix1.patch: usb: rndis_host: fix crash while probing a Nokia S60 mobile [#244459] - - patches.fixes/usb_nokia6233_fix2.patch: usbnet: init fault (oops) cleanup, whitespace fixes [#244459] - - patches.fixes/usb_nokia6233_fix2.patch: usb: unusual_devs.h entry for Nokia 6233 [#244459] - - patches.fixes/bt_broadcom_reset.diff: quirky Broadcom device [#257303] - - patches.arch/i386-compat-vdso: i386: allow debuggers to access the vsyscall page with compat vDSO [#258433] - - patches.fixes/anycast6-unbalanced-inet6_dev-refcnt.patch: Fix netdevice reference leak when reading from /proc/net/anycast6 [#285336] - - patches.drivers/scsi-throttle-SG_DXFER_TO_FROM_DEV-warning-b etter: SCSI: throttle SG_DXFER_TO_FROM_DEV warning message better [#290117] - - patches.fixes/nf_conntrack_h323-out-of-bounds-index.diff: nf_conntrack_h323: add checking of out-of-range on choices' index values [#290611] - - patches.fixes/ppc-fpu-corruption-fix.diff: ppc: fix corruption of fpu [#290622] - - patches.fixes/ppp-fix-osize-too-small-errors-when-decoding-m ppe.diff: ppp: Fix osize too small errors when decoding mppe [#291102] - - patches.fixes/hugetlbfs-stack-grows-fix.patch: Don't allow the stack to grow into hugetlb reserved regions [#294021] - - patches.fixes/pwc_dos.patch: fix a disconnect method waiting for user space to close a file. A malicious user can stall khubd indefinitely long [#302063] [#302194] - - patches.suse/kdb.add-unwind-info-to-kdb_call: Add unwind info to kdb_call() to fix build of KDB kernel on i386 [#305209] - - Updated config files: enable KDB for kernel-debug on i386. [#305209] security This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. kernel-bigsmp i586 f9b5dc340403ae6f9b83f3d859df7e0d640e706f kernel-default i586 56c06d84e690d66589615c3fa0e405aa21c51a31 kernel-default ppc dde7dced9ca143674d63e6c0f09e8feed043f6b4 kernel-default x86_64 5d46183551d3557c5e3104f6c5dff4b0abfc32fa kernel-iseries64 ppc 4685a95b2d2d1c632438260f0ab4e0051e02711d kernel-kdump i586 f2096a2e43900bcc56aca858b474f72224a0af46 kernel-kdump ppc de724a663f9d45ad30d7b364c028709289c480a7 kernel-kdump x86_64 1b70dc324e69002e9ebf9acf103ad2d76479df54 kernel-ppc64 ppc 72082822b2d7d43a78a4e0cd9f5793c6d6dff553 kernel-source i586 3e1b98e03819fd4b265f51cd5b1b856562477bc7 kernel-source ppc 6447734b2afc354b18b77b22ac67f7797a21c357 kernel-source x86_64 51db4d9e1c7bdb5412d8f2e3690d9d5cbc52fc06 kernel-syms i586 26072b0c5263fca5c02d143e7405120d8f2504b6 kernel-syms ppc d16f18e6a77bee50ca2a8b2c09fc46461dc424af kernel-syms x86_64 21478b85e079bfcd7c33f375d64855ba1e694458 kernel-xen i586 55ce83f03ae0d940946978be65480515ef66f20b kernel-xen x86_64 84963dec22d7a25b05241e409a71d49b673d5985 kernel-xenpae i586 826431b61d0d89f6947fbdbd44a7ed7cade2ad04