sledp3-kernelSecurity update for the Linux kernel (x86_64)
This SUSE Linux Enterprise 10 SP3 kernel update fixes a severe regression
introduced by previous bugfix updates that would corrupt NFSv4 mounted
data.
The update also fixes several other bugs and following security issue:
*
CVE-2009-4537: drivers/net/r8169.c in the r8169 driver of Linux
kernel 2.6.32.3 and earlier does not properly check the size of an
Ethernet frame that exceeds the maximum transmission unit (MTU),
which allows remote attackers to
1. cause a denial of service (temporary network outage) via a
packet with a crafted size, in conjunction with certain packets
containing A characters and certain packets containing E
characters; or
2. cause a denial of service (system crash) via a packet with a
crafted size, in conjunction with certain packets containing
'0' characters, related to the value of the status register and
erroneous behavior associated with the RxMaxSize register.
*
CVE-2008-0598: An information leak in 32bit emulation on x86_64
machines could disclose sensitive information to local attackers.
security
This update can be used to install a new kernel.
If you decide to use the kernel update, we recommend that you reboot
your system upon completion of the YaST Online Update, as additional
kernel modules may be needed which can only be loaded after the system
is rebooted.
If you are in the course of performing a new installation, the installer
will reboot the machine after installing the patch. If you do not want
to reboot, deselect this patch.
kernel-defaultx86_64d69ccd970023a016ed50924c2c1bd1175d4fa9b1kernel-smpx86_64dd828d9f1784d0aa2d93cc28df419cc373c970e3kernel-sourcex86_64300656e09c7eca46dffe15a1521b691d3f209e30kernel-symsx86_645b7a327a407df1c6289245591fee4b69cecccb49kernel-xenx86_6480c70be1f7bb7fd16a30c8769a0673439d6ddea1