sdkp2-kernel

Security update for Linux kernel

This kernel update fixes the following security problems: CVE-2008-2136: tunneled ipv6 packets (SIT) could trigger a memory leak in the kernel. Remote attackers could exploit that to crash machines. Additionally the following bugfixes have been included for all platforms: - patches.xfs/xfs-kern_31033a_Fix-fsync-b0rkage.patch: Fix XFS fsync breakage (bnc#388798). - patches.fixes/sit-add-missing-kfree_skb: sit - Add missing kfree_skb() on pskb_may_pull() failure. (bnc#389152) - patches.xfs/xfs-kern_30701a_Ensure-a-btree-insert-returns-a- valid-cursor.patch: Ensure a btree insert returns a valid cursor. ( bnc#388806). - patches.fixes/369802_d_path_fix.patch: fix d_path for pseudo filesystems (bnc#369802). - patches.fixes/ignore_lost_ticks: fixed do_vgettimeofday() and other issues with this patch (bnc#267050) - patches.drivers/pci-express-aer-aerdriver-off.patch: PCI - add possibility to turn AER off (bnc#382033) - patches.drivers/pci-express-aer-documentation: PCI - add AER documentation (bnc#382033) This kernel update fixes the following security problems: CVE-2008-2136: tunneled ipv6 packets (SIT) could trigger a memory leak in the kernel. Remote attackers could exploit that to crash machines. Additionally the following bugfixes have been included for all platforms: - patches.xfs/xfs-kern_31033a_Fix-fsync-b0rkage.patch: Fix XFS fsync breakage (bnc#388798). - patches.fixes/sit-add-missing-kfree_skb: sit - Add missing kfree_skb() on pskb_may_pull() failure. (bnc#389152) - patches.xfs/xfs-kern_30701a_Ensure-a-btree-insert-returns-a- valid-cursor.patch: Ensure a btree insert returns a valid cursor. ( bnc#388806). - patches.fixes/369802_d_path_fix.patch: fix d_path for pseudo filesystems (bnc#369802). - patches.fixes/ignore_lost_ticks: fixed do_vgettimeofday() and other issues with this patch (bnc#267050) - patches.drivers/pci-express-aer-aerdriver-off.patch: PCI - add possibility to turn AER off (bnc#382033) - patches.drivers/pci-express-aer-documentation: PCI - add AER documentation (bnc#382033)

security

This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. If you are in the course of performing a new installation, the installer will reboot the machine after installing the patch. If you do not want to reboot, deselect this patch.

kernel-debug i586 cb489335a14fa821ad6b00203ca5e3317b9f229f kernel-kdump i586 a0e5492dfeb1eebafbd30f32d01ad5d32655d27b kernel-xen i586 dc91e186f7efd674dcc9c431495a1a1525c92f21 kernel-xenpae i586 a44863d558fe210985220f30f140017f4f3fe523