kernel undocumented patch for 3837c2df513f0088f0fdd19fc0db5adc undocumented patch for 3837c2df513f0088f0fdd19fc0db5adc The openSUSE 10.3 kernel was update to 2.6.22.19. This includes bugs and security fixes. CVE-2008-4576: Fixed a crash in SCTP INIT-ACK, on mismatch between SCTP AUTH availability. This might be exploited remotely for a denial of service (crash) attack. CVE-2008-3528: The ext[234] filesystem code fails to properly handle corrupted data structures. With a mounted filesystem image or partition that have corrupted dir->i_size and dir->i_blocks, a user performing either a read or write operation on the mounted image or partition can lead to a possible denial of service by spamming the logfile. CVE-2007-6716: fs/direct-io.c in the dio subsystem in the Linux kernel did not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test. CVE-2008-3525: Added missing capability checks in sbni_ioctl(). CVE-2008-3272: Fixed range checking in the snd_seq OSS ioctl, which could be used to leak information from the kernel. CVE-2008-3276: An integer overflow flaw was found in the Linux kernel dccp_setsockopt_change() function. An attacker may leverage this vulnerability to trigger a kernel panic on a victim's machine remotely. CVE-2008-1673: Added range checking in ASN.1 handling for the CIFS and SNMP NAT netfilter modules. CVE-2008-2826: A integer overflow in SCTP was fixed, which might have been used by remote attackers to crash the machine or potentially execute code. CVE-2008-2812: Various NULL ptr checks have been added to tty op functions, which might have been used by local attackers to execute code. We think that this affects only devices openable by root, so the impact is limited. The openSUSE 10.3 kernel was update to 2.6.22.19. This includes bugs and security fixes. CVE-2008-4576: Fixed a crash in SCTP INIT-ACK, on mismatch between SCTP AUTH availability. This might be exploited remotely for a denial of service (crash) attack. CVE-2008-3528: The ext[234] filesystem code fails to properly handle corrupted data structures. With a mounted filesystem image or partition that have corrupted dir->i_size and dir->i_blocks, a user performing either a read or write operation on the mounted image or partition can lead to a possible denial of service by spamming the logfile. CVE-2007-6716: fs/direct-io.c in the dio subsystem in the Linux kernel did not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test. CVE-2008-3525: Added missing capability checks in sbni_ioctl(). CVE-2008-3272: Fixed range checking in the snd_seq OSS ioctl, which could be used to leak information from the kernel. CVE-2008-3276: An integer overflow flaw was found in the Linux kernel dccp_setsockopt_change() function. An attacker may leverage this vulnerability to trigger a kernel panic on a victim's machine remotely. CVE-2008-1673: Added range checking in ASN.1 handling for the CIFS and SNMP NAT netfilter modules. CVE-2008-2826: A integer overflow in SCTP was fixed, which might have been used by remote attackers to crash the machine or potentially execute code. CVE-2008-2812: Various NULL ptr checks have been added to tty op functions, which might have been used by local attackers to execute code. We think that this affects only devices openable by root, so the impact is limited. security This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. kernel-bigsmp i586 2513f58cb193f2c965761eb4e8fb72f23f884c31 kernel-debug i586 160d399148c87f8f46542a9438f703bf5342f04d kernel-debug x86_64 772f3a1de5459af13821ee9114b0efb1eda00d3e kernel-default i586 224d2c0d9d5640a17a201ff0ac45d44530b13741 kernel-default ppc 97d02fa2b050514ce2b5ccc2d8cb86dbe6807d43 kernel-default x86_64 1d5e8b9366b786428fc01309ec8a844f8a484549 kernel-kdump ppc 01c0ab21b92fa1ef2916d6af83f47b72267b809d kernel-ppc64 ppc d39efbe5496a2f1ce0cd7a616fdb9817e75d82ab kernel-source i586 f9c8f3de0dad0237c8cef881cd1abe0dba9fec83 kernel-source ppc c9f417640ccc77cd0892f9270264aa8075a7d205 kernel-source x86_64 97783b1043e84916154305a3929ecd4a0ce3577a kernel-syms i586 2ab207a41125e53888f7d1bd3f73c9d2aa0b0072 kernel-syms ppc 47fddff847202477c1a0db7ba0a97812becbb9ac kernel-syms x86_64 b5b87ff64459c90e4b6e5c24df40531232fab392 kernel-xen i586 8fe3a89b01560718935c8b2a0ceed41c85bc6833 kernel-xen x86_64 1d93b62f5b211b2cd14050b6fc2685be4c908c8d kernel-xenpae i586 af0dfc4bbd41c599eca638ad6e2be9ebf4dc0a5c