kernel Linux Kernel update Linux Kernel update This kernel update is a respin of a previous one that broke CPUFREQ support (bug 357598). Previous changes: This kernel update fixes the following security problems: CVE-2008-0007: Insufficient range checks in certain fault handlers could be used by local attackers to potentially read or write kernel memory. CVE-2008-0001: Incorrect access mode checks could be used by local attackers to corrupt directory contents and so cause denial of service attacks or potentially execute code. CVE-2007-5966: Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value. NOTE: some of these details are obtained from third party information. CVE-2007-3843: The Linux kernel checked the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request. CVE-2007-6417: The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances, which might allow local users to read sensitive kernel data or cause a denial of service (crash). And the following bugs (numbers are https://bugzilla.novell.com/ references): - patches.fixes/input-add-amilo-pro-v-to-nomux.patch: Add Fujitsu-Siemens Amilo Pro 2010 to nomux list (345699). - patches.arch/acpica-psd.patch: Changed resolution of named references in packages (https://bugzilla.novell.com/show_bug.cgi?id=346831). - patches.fixes/acpica_sizeof.patch: SizeOf operator ACPI interpreter fix (http://bugzilla.kernel.org/show_bug.cgi?id=9558). - patches.drivers/libata-sata_sis-fix-scr-access: sata_sis: fix SCR access (331610). - patches.drivers/libata-tape-fix: libata: backport tape support fixes (345438). - patches.arch/powernowk8_family_freq_from_fiddid.patch: To find the frequency given the fid and did is family dependant. (#332722). - patches.drivers/libata-force-cable-type: libata: implement libata.force_cbl parameter (337610). - patches.drivers/libata-sata_nv-disable-ADMA: sata_nv: disable ADMA by default (346508). - patches.fixes/via-velocity-dont-oops-on-mtu-change-1: [VIA_VELOCITY]: Don't oops on MTU change. (341537). - patches.fixes/via-velocity-dont-oops-on-mtu-change-2: via-velocity: don't oops on MTU change while down (341537). - patches.fixes/sony-laptop-call-sonypi_compat_init-earlier: s ony-laptop: call sonypi_compat_init earlier (343483). - Updated kABI symbols for 2.6.22.15 changes, and Xen x86_64 changes. - series.conf file cleanup: group together latency tracing patches. - Fix a memory leak and a panic in drivers/block/cciss.c patches.drivers/cciss-panic-in-blk_rq_map_sg: Panic in blk_rq_map_sg() from CCISS driver. - patches.drivers/cciss-fix_memory_leak: - Address missed-interrupt issues discovered upstream. - Update to 2.6.22.15 - fixes CVE-2007-5966 - lots of libata fixes, which cause the following to be removed: - patches.drivers/libata-add-NCQ-spurious-completion-horkages - patches.drivers/libata-add-ST9120822AS-to-NCQ-blacklist - patches.drivers/libata-disable-NCQ-for-ST9160821AS-3.ALD - removed patches already in this release: - patches.fixes/i4l-avoid-copying-an-overly-long-string.patch: - patches.fixes/ramdisk-2.6.23-corruption_fix.diff - patches.fixes/microtek_hal.diff: Delete. - fixed previous poweroff regression from 2.6.22.10 - lots of other fixes and some new pci ids. - Thousands of changes in patches.rt/ for the kernel-rt* kernels. - patches.fixes/usb_336850.diff: fix missing quirk leading to a device disconnecting under load (336850). - patches.fixes/nfs-unmount-leak.patch: NFSv2/v3: Fix a memory leak when using -onolock (336253). - add xenfb-module-param patch to make Xen virtual frame buffer configurable in the guest domains, instead of a fixed resolution of 800x600. - patches.xen/xen3-aux-at_vector_size.patch: Also include x86-64 (310037). - patches.xen/xen3-patch-2.6.18: Fix system lockup (335121). - patches.fixes/acpi_autoload_baydock.patch: autloading of dock module (302482). Fixed a general bug with linux specific hids there. - patches.xen/xen3-patch-2.6.22.11-12: Linux 2.6.22.12. - patches.xen/xen3-fixup-arch-i386: Fix CONFIG_APM=m issue. - patches.xen/xen-x86-no-lapic: Re-diff. Dieses Kernel Update ist ein respin des vorherigen, das CPUFREQ Unterstützung gebrochen hat (bug 357598). Alte Changes: Dieses Kernel Update behebt folgende Sicherheitsprobleme (aufgelistet in englischer Sprache): CVE-2008-0007: Insufficient range checks in certain fault handlers could be used by local attackers to potentially read or write kernel memory. CVE-2008-0001: Incorrect access mode checks could be used by local attackers to corrupt directory contents and so cause denial of service attacks or potentially execute code. CVE-2007-5966: Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value. NOTE: some of these details are obtained from third party information. CVE-2007-3843: The Linux kernel checked the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spoof CIFS network traffic that the client configured for security signatures, as demonstrated by lack of signing despite sec=ntlmv2i in a SetupAndX request. Und behebt folgende Fehler (aufgelistet in englischer Sprache mit Bugzilla Nummern): - patches.fixes/input-add-amilo-pro-v-to-nomux.patch: Add Fujitsu-Siemens Amilo Pro 2010 to nomux list (345699). - patches.arch/acpica-psd.patch: Changed resolution of named references in packages (https://bugzilla.novell.com/show_bug.cgi?id=346831). - patches.fixes/acpica_sizeof.patch: SizeOf operator ACPI interpreter fix (http://bugzilla.kernel.org/show_bug.cgi?id=9558). - patches.drivers/libata-sata_sis-fix-scr-access: sata_sis: fix SCR access (331610). - patches.drivers/libata-tape-fix: libata: backport tape support fixes (345438). - patches.arch/powernowk8_family_freq_from_fiddid.patch: To find the frequency given the fid and did is family dependant. (#332722). - patches.drivers/libata-force-cable-type: libata: implement libata.force_cbl parameter (337610). - patches.drivers/libata-sata_nv-disable-ADMA: sata_nv: disable ADMA by default (346508). - patches.fixes/via-velocity-dont-oops-on-mtu-change-1: [VIA_VELOCITY]: Don't oops on MTU change. (341537). - patches.fixes/via-velocity-dont-oops-on-mtu-change-2: via-velocity: don't oops on MTU change while down (341537). - patches.fixes/sony-laptop-call-sonypi_compat_init-earlier: s ony-laptop: call sonypi_compat_init earlier (343483). - Updated kABI symbols for 2.6.22.15 changes, and Xen x86_64 changes. - series.conf file cleanup: group together latency tracing patches. - Fix a memory leak and a panic in drivers/block/cciss.c patches.drivers/cciss-panic-in-blk_rq_map_sg: Panic in blk_rq_map_sg() from CCISS driver. - patches.drivers/cciss-fix_memory_leak: - Address missed-interrupt issues discovered upstream. - Update to 2.6.22.15 - fixes CVE-2007-5966 - lots of libata fixes, which cause the following to be removed: - patches.drivers/libata-add-NCQ-spurious-completion-horkages - patches.drivers/libata-add-ST9120822AS-to-NCQ-blacklist - patches.drivers/libata-disable-NCQ-for-ST9160821AS-3.ALD - removed patches already in this release: - patches.fixes/i4l-avoid-copying-an-overly-long-string.patch: - patches.fixes/ramdisk-2.6.23-corruption_fix.diff - patches.fixes/microtek_hal.diff: Delete. - fixed previous poweroff regression from 2.6.22.10 - lots of other fixes and some new pci ids. - Thousands of changes in patches.rt/ for the kernel-rt* kernels. - patches.fixes/usb_336850.diff: fix missing quirk leading to a device disconnecting under load (336850). - patches.fixes/nfs-unmount-leak.patch: NFSv2/v3: Fix a memory leak when using -onolock (336253). - add xenfb-module-param patch to make Xen virtual frame buffer configurable in the guest domains, instead of a fixed resolution of 800x600. - patches.xen/xen3-aux-at_vector_size.patch: Also include x86-64 (310037). - patches.xen/xen3-patch-2.6.18: Fix system lockup (335121). - patches.fixes/acpi_autoload_baydock.patch: autloading of dock module (302482). Fixed a general bug with linux specific hids there. - patches.xen/xen3-patch-2.6.22.11-12: Linux 2.6.22.12. - patches.xen/xen3-fixup-arch-i386: Fix CONFIG_APM=m issue. - patches.xen/xen-x86-no-lapic: Re-diff. security This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. kernel-bigsmp i586 ecb8dca0beab5010a1c9ef3afbe999d044d832c2 kernel-debug i586 d65e31aaf1f0f2a4319a250d3e18a46fef6457d9 kernel-debug x86_64 0452b133d5b6aadda7ec3d8f8e40fc04d83f6469 kernel-default i586 227ce5360433bae95cbeee0d2f2c74be6184fdd2 kernel-default ppc 96884fbacd9be7768cf80643ad010dcbe6f11d05 kernel-default x86_64 e5489ba77a252c93eb08f03627c7fa4194b9251f kernel-kdump ppc c9d3b75c6b7386bc36dccf8d33bc1586789f06ad kernel-ppc64 ppc 4e36eb0c52177ae3c76b2d7816763a3015d7f65c kernel-rt i586 f8718f65faa4acb546336cafafa3729bed0a642b kernel-rt x86_64 506a09ef7b7deff42a1349ef38b735bf18c66a01 kernel-rt_debug i586 2e545bd0840f54cd15f22e04abf772d9469ef39c kernel-rt_debug x86_64 220155686331d171dbca6dd5b85a2c0dbb4b9668 kernel-source i586 662ccb086c35aa7aafff5f55a1bb7326f0d61490 kernel-source ppc 972a0f173cda497f2a69a0a4314a86233a50407e kernel-source x86_64 591ca8ded580462eea353fc5db4180c346fe4641 kernel-syms i586 085e144a0e0fe2da8cf685af1fb2cccbc7673ac5 kernel-syms ppc 839cbfce3139233675e3a04fc1b5e90d24b6e254 kernel-syms x86_64 691b31002872d6a60cb9415af235c2a9e6b91574 kernel-xen i586 88e75d1c9fe2bdf2e7a46a87feeea8b0098e524d kernel-xen x86_64 2fb70f34b58d7d6b25f9e9292f70930ac9ee77de kernel-xenpae i586 21c182a0a5267c3ff646ac7fc84c02e5b3d9eebe