kernel Linux Kernel update Linux Kernel update This kernel update fixes the following security problems: ++ CVE-2007-5500: A buggy condition in the ptrace attach logic can be used by local attackers to hang the machine. ++ CVE-2007-5501: The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c allows remote attackers to cause a denial of service (crash) via crafted ACK responses that trigger a NULL pointer dereference. ++ CVE-2007-5904: Multiple buffer overflows in CIFS VFS allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function. This requires the attacker to set up a malicious Samba/CIFS server and getting the client to connect to it. and the following non security bugs: ++ Kernel update to 2.6.22.13 (includes the fixes for CVE-2007-5500 and CVE-2007-5501 described above) ++ patches.fixes/input-add-ms-vm-to-noloop.patch: add i8042.noloop quirk for Microsoft Virtual Machine [#297546] ++ patches.fixes/mac80211_fix_scan.diff: Make per-SSID scanning work [#299598] [#327684] ++ patches.drivers/kobil_sct_backport.patch: Fix segfault for Kobil USB Plus cardreaders [#327664] ++ patches.arch/acpi_thermal_passive_blacklist.patch: Avoid critical temp shutdowns on specific ThinkPad T4x(p) and R40 [#333043] ++ patches.fixes/microtek_hal.diff: Make the microtek driver work with HAL [#339743] ++ patches.fixes/pci-fix-unterminated-pci_device_id-lists: fix unterminated pci_device_id lists [#340527] ++ patches.fixes/nfsacl-retval.diff: knfsd: fix spurious EINVAL errors on first access of new filesystem [#340873] Dieses Kernel Update behebt folgende Sicherheitsprobleme (aufgelistet in englischer Sprache): ++ CVE-2007-5500: A buggy condition in the ptrace attach logic can be used by local attackers to hang the machine. ++ CVE-2007-5501: The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c allows remote attackers to cause a denial of service (crash) via crafted ACK responses that trigger a NULL pointer dereference. ++ CVE-2007-5904: Multiple buffer overflows in CIFS VFS allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SMB responses that trigger the overflows in the SendReceive function. This requires the attacker to set up a malicious Samba/CIFS server and getting the client to connect to it. Des weiteren wurden folgende Fehler behoben: ++ Kernel update to 2.6.22.13 (includes the fixes for CVE-2007-5500 and CVE-2007-5501 described above) ++ patches.fixes/input-add-ms-vm-to-noloop.patch: add i8042.noloop quirk for Microsoft Virtual Machine [#297546] ++ patches.fixes/mac80211_fix_scan.diff: Make per-SSID scanning work [#299598] [#327684] ++ patches.drivers/kobil_sct_backport.patch: Fix segfault for Kobil USB Plus cardreaders [#327664] ++ patches.arch/acpi_thermal_passive_blacklist.patch: Avoid critical temp shutdowns on specific ThinkPad T4x(p) and R40 [#333043] ++ patches.fixes/microtek_hal.diff: Make the microtek driver work with HAL [#339743] ++ patches.fixes/pci-fix-unterminated-pci_device_id-lists: fix unterminated pci_device_id lists [#340527] ++ patches.fixes/nfsacl-retval.diff: knfsd: fix spurious EINVAL errors on first access of new filesystem [#340873] security This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. kernel-bigsmp i586 18d7b5fe8787d4fe7bb6f1f80b5fa5c648385916 kernel-debug i586 d7dd025553c4fa6173035e93faaf2ebaac078600 kernel-debug x86_64 881ae9b3c089031fb4aa58043c75089fb2da2ddd kernel-default i586 547e63c267ab81bf409a8aee1b65e514961bb830 kernel-default ppc 17a7c055aa37ae0ec7b0e1a69d6ce0422a3798f1 kernel-default x86_64 1d19701c394c04082b8a74381c1fecb608f0c314 kernel-kdump ppc 49849ffdee9f4c6417415adbb6729a1f33d7f59e kernel-ppc64 ppc 310eb094fdceef486d2034b999da7e446d0323c4 kernel-rt i586 a058d57f012a5aded8ab318c6c5f45a240524a54 kernel-rt x86_64 16bdfb8b1c9f4d0c0e1f13261070055a6da278e1 kernel-rt_debug i586 a823ed77cba8a951048e49a1c03e1285ab3baacb kernel-rt_debug x86_64 f6f05af9baac23a5ede8885472fb92f4e9be8ed6 kernel-source i586 0b24b1d9d358ea3932555bc5757fd6f704860a76 kernel-source ppc 5f54fdebc49dc98406a145512ee2c1292d419407 kernel-source x86_64 e031b468050c7be4cc9005f2e0976c0e546b4438 kernel-syms i586 ffbd1f62784ccaa0abb27d5e6e5f7beab462ed96 kernel-syms ppc a6c4bae9f45b7346ac5c1c527ce7bdd61a9bc23f kernel-syms x86_64 6c1ac4ce223ad93053e3c89d60e510756c646604 kernel-xen i586 89a8948e381f94c45cad8b0e3b96588152d5758c kernel-xen x86_64 227d5f9938284fde3326bb347d9435ccb2acbd73 kernel-xenpae i586 4a273b0b9ade0335a29bfd566171c50478c58962