Secunia Logo  
 
SUSE update for kernel
Secunia Advisory: SA28889
Release Date: 2008-02-12
Popularity: 5,446 views

Critical:
Less critical
Impact: Exposure of sensitive information
Privilege escalation
Where: Local system
Solution Status: Partial Fix

OS:openSUSE 10.2
openSUSE 10.3

Software:SUSE Linux Enterprise Realtime 10

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2007-6151
CVE-2007-6206
CVE-2008-0600


Description:
SUSE has issued an update for the kernel. This fixes a security issue an a vulnerability, which can be exploited by malicious, local users to disclose potentially sensitive information or gain escalated privileges.

For more information:
SA27908
SA28835

Solution:
Apply updated packages.

Updated packages for SUSE Linux Enterprise Realtime 10 are reportedly being prepared.


x86 Platform:

openSUSE 10.3:

http://download.opensuse.org/pub/open.../kernel-bigsmp-2.6.22.17-0.1.i586.rpm
8a25326349043f763b7ee1f272575ac9

http://download.opensuse.org/pub/open...6/kernel-debug-2.6.22.17-0.1.i586.rpm
aef17fa619bb8d1d1f7f78f7506c267b

http://download.opensuse.org/pub/open...kernel-default-2.6.22.17-0.1.i586.rpm
34fae134fcffe0740d6899e7a86f5e6e

http://download.opensuse.org/pub/open...i586/kernel-rt-2.6.22.17-0.1.i586.rpm
265b5a744299f6f7c519c6f837de1014

http://download.opensuse.org/pub/open...ernel-rt_debug-2.6.22.17-0.1.i586.rpm
3735cb1d57a65b414dfee6fda8d6d43f

http://download.opensuse.org/pub/open.../kernel-source-2.6.22.17-0.1.i586.rpm
3a57ed041fb4141c733cc84e541c6324

http://download.opensuse.org/pub/open...86/kernel-syms-2.6.22.17-0.1.i586.rpm
a69110f06587ac06e8e25550b59b6f2e

http://download.opensuse.org/pub/open...586/kernel-xen-2.6.22.17-0.1.i586.rpm
a31013e9d5ef5fa996ae8b96b274619d

http://download.opensuse.org/pub/open.../kernel-xenpae-2.6.22.17-0.1.i586.rpm
3ae38037c32f05a238a15dde7a1c5f88

openSUSE 10.2:

ftp://ftp.suse.com/pub/suse/update/10...6/kernel-bigsmp-2.6.18.8-0.9.i586.rpm
a5b4202bf5a5ff0ffe12d805deb90b58

ftp://ftp.suse.com/pub/suse/update/10.../kernel-default-2.6.18.8-0.9.i586.rpm
feb311251d01e4fd6268071e24a36c6c

ftp://ftp.suse.com/pub/suse/update/10...86/kernel-kdump-2.6.18.8-0.9.i586.rpm
c35a4735a2420ec71bdabadbf39a1ce9

ftp://ftp.suse.com/pub/suse/update/10...6/kernel-source-2.6.18.8-0.9.i586.rpm
6fd2e6ebfeba11f8919bd733284f996a

ftp://ftp.suse.com/pub/suse/update/10...586/kernel-syms-2.6.18.8-0.9.i586.rpm
034dea6d325dcdc49154be9e37109140

ftp://ftp.suse.com/pub/suse/update/10...i586/kernel-xen-2.6.18.8-0.9.i586.rpm
90bdfca8529c3b44e2dfa1db601f719e

ftp://ftp.suse.com/pub/suse/update/10...6/kernel-xenpae-2.6.18.8-0.9.i586.rpm
7c5be80194d1eb8c395424252df085f2

Power PC Platform:

openSUSE 10.3:

http://download.opensuse.org/pub/open.../kernel-default-2.6.22.17-0.1.ppc.rpm
4d0f63b55789fc47175ae6b844cb0620

http://download.opensuse.org/pub/open...pc/kernel-kdump-2.6.22.17-0.1.ppc.rpm
5b0389aeb6d557a2e7da967b7c76166f

http://download.opensuse.org/pub/open...pc/kernel-ppc64-2.6.22.17-0.1.ppc.rpm
ca3d9cd4140c0253e80a67429594deec

http://download.opensuse.org/pub/open...c/kernel-source-2.6.22.17-0.1.ppc.rpm
ae9adbe9443fa26830c9de1fd4c6ac94

http://download.opensuse.org/pub/open...ppc/kernel-syms-2.6.22.17-0.1.ppc.rpm
164db9fcacd161845961533e71423538

openSUSE 10.2:

ftp://ftp.suse.com/pub/suse/update/10...c/kernel-default-2.6.18.8-0.9.ppc.rpm
20ffaec3185ce5f206208070373d574c

ftp://ftp.suse.com/pub/suse/update/10...kernel-iseries64-2.6.18.8-0.9.ppc.rpm
e37869df68d1b0a6c8317267278694fd

ftp://ftp.suse.com/pub/suse/update/10...ppc/kernel-kdump-2.6.18.8-0.9.ppc.rpm
6fffa75e425ea70cd25a3f1e66495174

ftp://ftp.suse.com/pub/suse/update/10...ppc/kernel-ppc64-2.6.18.8-0.9.ppc.rpm
a424a54166b46cea9147643a2a3c4bd8

ftp://ftp.suse.com/pub/suse/update/10...pc/kernel-source-2.6.18.8-0.9.ppc.rpm
0add877d14ac642a2628cba1d2489188

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-syms-2.6.18.8-0.9.ppc.rpm
003d0da5609b7d94290333c745b72ede

x86-64 Platform:

openSUSE 10.3:

http://download.opensuse.org/pub/open...kernel-debug-2.6.22.17-0.1.x86_64.rpm
bd39e73becbf676056c8b41f4acc6b76

http://download.opensuse.org/pub/open...rnel-default-2.6.22.17-0.1.x86_64.rpm
059b6dc223093f8cb59ab78446b62571

http://download.opensuse.org/pub/open...64/kernel-rt-2.6.22.17-0.1.x86_64.rpm
efe310fb3170d6baa5f40031b1680719

http://download.opensuse.org/pub/open...nel-rt_debug-2.6.22.17-0.1.x86_64.rpm
200011e3dfb75954d67c0624c7cbe82c

http://download.opensuse.org/pub/open...ernel-source-2.6.22.17-0.1.x86_64.rpm
a14f480d53d42ce0f4f5c5a65f7f58c1

http://download.opensuse.org/pub/open.../kernel-syms-2.6.22.17-0.1.x86_64.rpm
5cd6db35cfef3dd48451d7143537f528

http://download.opensuse.org/pub/open...4/kernel-xen-2.6.22.17-0.1.x86_64.rpm
49ff7963dcead4fe6bee5abd2ee05d97

openSUSE 10.2:

ftp://ftp.suse.com/pub/suse/update/10...ernel-default-2.6.18.8-0.9.x86_64.rpm
db176b500fd6e1d4f7cf6ccd75a6f60b

ftp://ftp.suse.com/pub/suse/update/10.../kernel-kdump-2.6.18.8-0.9.x86_64.rpm
cea61bcc88d50628ffab9324f9b47391

ftp://ftp.suse.com/pub/suse/update/10...kernel-source-2.6.18.8-0.9.x86_64.rpm
f36b8b48f8c0162c9b0e49f7dc4c99a8

ftp://ftp.suse.com/pub/suse/update/10...4/kernel-syms-2.6.18.8-0.9.x86_64.rpm
056bc674cf94e69afdca3b45c1c43fa0

ftp://ftp.suse.com/pub/suse/update/10...64/kernel-xen-2.6.18.8-0.9.x86_64.rpm
edab93cccd1d91fbe97f070c26a9f051

Sources:

openSUSE 10.3:

http://download.opensuse.org/pub/open...kernel-bigsmp-2.6.22.17-0.1.nosrc.rpm
6d7a9c38144edb1dacb2c18b5c300d7d

http://download.opensuse.org/pub/open.../kernel-debug-2.6.22.17-0.1.nosrc.rpm
d33f96f601a117378e701b9bfff31470

http://download.opensuse.org/pub/open...ernel-default-2.6.22.17-0.1.nosrc.rpm
3febbdc8006a591913f9b3f717636fc9

http://download.opensuse.org/pub/open.../kernel-kdump-2.6.22.17-0.1.nosrc.rpm
a42aaff6d71df9b96f6795096e732d1d

http://download.opensuse.org/pub/open.../kernel-ppc64-2.6.22.17-0.1.nosrc.rpm
eb0fd7e940a020b84cd67136569c2fd5

http://download.opensuse.org/pub/open...src/kernel-rt-2.6.22.17-0.1.nosrc.rpm
45db3caca01b280a18ca65b3948ef2e0

http://download.opensuse.org/pub/open...rnel-rt_debug-2.6.22.17-0.1.nosrc.rpm
9979595ac1d609ea204f556494d52960

http://download.opensuse.org/pub/open...c/kernel-source-2.6.22.17-0.1.src.rpm
72f3f44ea5f330853963e56c481ee3f7

http://download.opensuse.org/pub/open...src/kernel-syms-2.6.22.17-0.1.src.rpm
0e4ff163cd849db30e6e5f556a674b48

http://download.opensuse.org/pub/open...rc/kernel-xen-2.6.22.17-0.1.nosrc.rpm
3916440c8650d6926a724b3de667c80c

http://download.opensuse.org/pub/open...kernel-xenpae-2.6.22.17-0.1.nosrc.rpm
5e90eda74a91b6432d44ae18e070bd74

openSUSE 10.2:

ftp://ftp.suse.com/pub/suse/update/10.../kernel-bigsmp-2.6.18.8-0.9.nosrc.rpm
fc384cf47a5aec37cf813116cba4e6d7

ftp://ftp.suse.com/pub/suse/update/10...kernel-default-2.6.18.8-0.9.nosrc.rpm
06d97aa363493f028e8368eebe996493

ftp://ftp.suse.com/pub/suse/update/10...rnel-iseries64-2.6.18.8-0.9.nosrc.rpm
a35675c22809cd88757afc0d5f66741c

ftp://ftp.suse.com/pub/suse/update/10...c/kernel-kdump-2.6.18.8-0.9.nosrc.rpm
e7276d68bbd8be2b67cb2bb769b70ad7

ftp://ftp.suse.com/pub/suse/update/10...c/kernel-ppc64-2.6.18.8-0.9.nosrc.rpm
635d0921aec1af3053d508c014fcf94c

ftp://ftp.suse.com/pub/suse/update/10...rc/kernel-source-2.6.18.8-0.9.src.rpm
93c89ce1da9f1f752af9ae0a9bff2cf4

ftp://ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-syms-2.6.18.8-0.9.src.rpm
2a288f8e12e899961febf5de7ae6a2b7

ftp://ftp.suse.com/pub/suse/update/10...src/kernel-xen-2.6.18.8-0.9.nosrc.rpm
796394be803069751082eb2cfebcc04f

ftp://ftp.suse.com/pub/suse/update/10.../kernel-xenpae-2.6.18.8-0.9.nosrc.rpm
94ba5b49d8890452b957b11705f20534

Original Advisory:
http://lists.opensuse.org/opensuse-security-announce/2008-02/msg00005.html

Other References:
SA27908:
http://secunia.com/advisories/27908/

SA28835:
http://secunia.com/advisories/28835/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Drupal Project Module File Upload and Cross-Site Scripting // 33 views
2. Mambo "GLOBALS['mosConfig_absolute_path']" File Inclusion // 27 views
3. SmbFTPD Long Command Processing Vulnerability // 26 views
4. Cisco Global Site Selector DNS Request Denial of Service // 25 views
5. ArticleBeach Script "page" File Inclusion Vulnerability // 25 views
6. FreeBSD update for openssl // 23 views
7. tnftpd Long Command Processing Vulnerability // 22 views
8. FreeBSD update for lukemftpd // 22 views
9. NTP OpenSSL "EVP_VerifyFinal()" Spoofing Vulnerability // 21 views
10. Lasso OpenSSL "DSA_verify()" Spoofing Vulnerability // 21 views