kernel Linux Kernel update Linux Kernel update This kernel update for openSUSE 10.3 fixes some bugs and several security problems. The following security issues are fixed: CVE-2009-2692: A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2406: A kernel stack overflow when mounting eCryptfs filesystems in parse_tag_11_packet() was fixed. Code execution might be possible of ecryptfs is in use. CVE-2009-2407: A kernel heap overflow when mounting eCryptfs filesystems in parse_tag_3_packet() was fixed. Code execution might be possible of ecryptfs is in use. The compiler option -fno-delete-null-pointer-checks was added to the kernel build, and the -fwrapv compiler option usage was fixed to be used everywhere. This works around the compiler removing checks too aggressively. CVE-2009-1389: A crash in the r8169 driver when receiving large packets was fixed. This is probably exploitable only in the local network. CVE-2009-0676: A memory disclosure via the SO_BSDCOMPAT socket option was fixed. CVE-2009-1630: The nfs_permission function in fs/nfs/dir.c in the NFS client implementation when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver. random: make get_random_int() was made more random to enhance ASLR protection. This kernel update for openSUSE 10.3 fixes some bugs and several security problems. The following security issues are fixed: CVE-2009-2692: A missing NULL pointer check in the socket sendpage function can be used by local attackers to gain root privileges. CVE-2009-2406: A kernel stack overflow when mounting eCryptfs filesystems in parse_tag_11_packet() was fixed. Code execution might be possible of ecryptfs is in use. CVE-2009-2407: A kernel heap overflow when mounting eCryptfs filesystems in parse_tag_3_packet() was fixed. Code execution might be possible of ecryptfs is in use. The compiler option -fno-delete-null-pointer-checks was added to the kernel build, and the -fwrapv compiler option usage was fixed to be used everywhere. This works around the compiler removing checks too aggressively. CVE-2009-1389: A crash in the r8169 driver when receiving large packets was fixed. This is probably exploitable only in the local network. CVE-2009-0676: A memory disclosure via the SO_BSDCOMPAT socket option was fixed. CVE-2009-1630: The nfs_permission function in fs/nfs/dir.c in the NFS client implementation when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which allows local users to bypass permissions and execute files, as demonstrated by files on an NFSv4 fileserver. random: make get_random_int() was made more random to enhance ASLR protection. security This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. kernel-bigsmp i586 4738244a347c132bfe896af6cf239c2996176059 kernel-debug i586 39b65abb2b60f3848f0681f71c6137aad9756450 kernel-debug x86_64 5143fcd7bdf94d72613f708c644cc1bf621b6dfd kernel-default i586 abe57034f5e8fea71bf8ca77b77f383a72454dd0 kernel-default ppc 1fcaa7a4fcc19a2a7ad8d09a63c4934f5ff639af kernel-default x86_64 ea3fab59e5451720cbbf1a9a22fc557e0baff4a1 kernel-kdump ppc b2b51d966540be058eb3111e776552e7528165dd kernel-ppc64 ppc 3b916a9adfa6027522e22b95fb9b3cebba51a11a kernel-source i586 18bf9af90198140e035b084f761c6ca04360ff0c kernel-source ppc c731ebacfa69297c6f94e50fe678588e3c21f58e kernel-source x86_64 ad279e8f07c148b6797f18074b29cf68feb1cd78 kernel-syms i586 f303392cd93485e938511b8b1cd0d67c47d3f9e2 kernel-syms ppc a7c544033d21a3156f4fa8fd61a23375bc8b600d kernel-syms x86_64 30b9370a01008e3b85ba2b0072f6169618170334 kernel-xen i586 591ae36195fadccc1e4d6ce38b0d47ae537bc2ae kernel-xen x86_64 ec74bc14d60bbff257169ffbfc9ec81450e65c6d kernel-xenpae i586 8c27a8fadca80b91a38af1f2348de247a559d08b