kernel Linux Kernel security update. Linux Kernel security update. This kernel update fixes the following security problems: CVE-2008-1615: On x86_64 a denial of service attack could be used by local attackers to immediately panic / crash the machine. CVE-2008-2358: A security problem in DCCP was fixed, which could be used by remote attackers to crash the machine. CVE-2007-6206: An information leakage during coredumping of root processes was fixed. CVE-2007-6712: A integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired. CVE-2008-2136: A problem in SIT IPv6 tunnel handling could be used by remote attackers to immediately crash the machine. CVE-2008-1669: Fixed a SMP ordering problem in fcntl_setlk could potentially allow local attackers to execute code by timing file locking. CVE-2008-1367: Clear the "direction" flag before calling signal handlers. For specific not yet identified programs under specific timing conditions this could potentially have caused memory corruption or code execution. CVE-2008-1375: Fixed a dnotify race condition, which could be used by local attackers to potentially execute code. CVE-2007-6282: A remote attacker could crash the IPSec/IPv6 stack by sending a bad ESP packet. This requires the host to be able to receive such packets (default filtered by the firewall). CVE-2007-5500: A ptrace bug could be used by local attackers to hang their own processes indefinitely. CVE-2007-5904: A remote buffer overflow in CIFS was fixed which could be used by remote attackers to crash the machine or potentially execute code. And the following bugs (numbers are https://bugzilla.novell.com/ references): - patches.arch/x86-nosmp-implies-noapic.patch: When booting with nosmp or maxcpus=0 on i386 or x86-64, we must disable the I/O APIC, otherwise the system won't boot in most cases (bnc#308540). - patches.arch/i386-at-sysinfo-ehdr: i386: make AT_SYSINFO_EHDR consistent with AT_SYSINFO (bnc#289641). - patches.suse/bonding-workqueue: Update to fix a hang when closing a bonding device (342994). - patches.fixes/mptspi-dv-renegotiate-oops: mptlinux crashes on kernel 2.6.22 (bnc#271749). Dieses Kernel Update behebt folgende Sicherheitsprobleme (aufgelistet in englischer Sprache): CVE-2008-1615: On x86_64 a denial of service attack could be used by local attackers to immediately panic / crash the machine. CVE-2008-2358: A security problem in DCCP was fixed, which could be used by remote attackers to crash the machine. CVE-2007-6206: An information leakage during coredumping of root processes was fixed. CVE-2007-6712: A integer overflow in the hrtimer_forward function (hrtimer.c) in Linux kernel, when running on 64-bit systems, allows local users to cause a denial of service (infinite loop) via a timer with a large expiry value, which causes the timer to always be expired. CVE-2008-2136: A problem in SIT IPv6 tunnel handling could be used by remote attackers to immediately crash the machine. CVE-2008-1669: Fixed a SMP ordering problem in fcntl_setlk could potentially allow local attackers to execute code by timing file locking. CVE-2008-1367: Clear the "direction" flag before calling signal handlers. For specific not yet identified programs under specific timing conditions this could potentially have caused memory corruption or code execution. CVE-2008-1375: Fixed a dnotify race condition, which could be used by local attackers to potentially execute code. CVE-2007-6282: A remote attacker could crash the IPSec/IPv6 stack by sending a bad ESP packet. This requires the host to be able to receive such packets (default filtered by the firewall). CVE-2007-5500: A ptrace bug could be used by local attackers to hang their own processes indefinitely. CVE-2007-5904: A remote buffer overflow in CIFS was fixed which could be used by remote attackers to crash the machine or potentially execute code. Des weiteren wurden folgende Fehler behoben: - patches.arch/x86-nosmp-implies-noapic.patch: When booting with nosmp or maxcpus=0 on i386 or x86-64, we must disable the I/O APIC, otherwise the system won't boot in most cases (bnc#308540). - patches.arch/i386-at-sysinfo-ehdr: i386: make AT_SYSINFO_EHDR consistent with AT_SYSINFO (bnc#289641). - patches.suse/bonding-workqueue: Update to fix a hang when closing a bonding device (342994). - patches.fixes/mptspi-dv-renegotiate-oops: mptlinux crashes on kernel 2.6.22 (bnc#271749). security This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. kernel-bigsmp i586 7601cc2dc9af8789a60921b3795be4e34ce0a3b6 kernel-default i586 6aaea8dc1d28481448136980ae45356180fba671 kernel-default ppc 1252052ff71d10a10d01b4cdc11417b6a2c13ab1 kernel-default x86_64 8c8b31e469a5c8cc1c743203a34ca3d5378135ca kernel-iseries64 ppc 5dffc89e8d57eb7ea3d66939b8cdd0e1bfbde0a8 kernel-kdump i586 a9683724e213adb3a8f8fd24058745794758e57e kernel-kdump ppc d8483dcd762d32e77f7dd313727c28a92903518a kernel-kdump x86_64 8bd2df94cef1d8fd26dcd15dd38488a1c3df8c5e kernel-ppc64 ppc 4475246dcf13a51c62f3146f069dde39d6455470 kernel-source i586 ddbe43cde3f85bc48331dfc69f1a400842a38319 kernel-source ppc b48f8c87956b337dea478a4ae41145826bc93c1f kernel-source x86_64 b4ee5ae2f36193858559523f24641c6210f4efe3 kernel-syms i586 3f5a7354d2a429e5a37dc0b300a3141d4575d055 kernel-syms ppc 571591d3d4e797bc7477990998637fe29aa5c508 kernel-syms x86_64 d249ea0a6b621aabb5be951c025254802983d9b9 kernel-xen i586 68238c9ae2c1be93193461df0b5bb87829b4af4a kernel-xen x86_64 e148b9df7eb719b12f247aeb511b3df1516c6912 kernel-xenpae i586 31ad3b725f234f65f85856393e0b41034cd71da2