-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ## ## Patch description of patch c643da5f2818ac7452d602b15588f117 ## Kind: security Shortdescription.english: Security update for Linux kernel Longdescription.english: Applies to Package: k_athlon,k_deflt,k_psmp,k_smp,k_debug,kernel-source Product(s): Release: 20050322 Obsoletes: a119095a26a882ce898e6ee8dd3518c1 Indications Everyone using the Linux Kernel on x86 architecture should update. Contraindications None. Problem description This update fixes following security bugs: * CAN-2005-0136: Fixed a local denial of service problem on ia64 which was possible to trigger by using the ptrace system call. * It was possible to deadlock the NFS lockd by special multi client access patterns. * Missing checking in the epoll system calls allowed overwriting of a small range of kernel memory. Additionally following bugs were fixed: * ppc: SA_ONESHOT signals are handled correctly now. * Fixed bad checks for ipv6_add_addr() return values which lead to crashes. * Fixed an assertion failure in do_get_write_access(). Solution Please install the updates provided at the location noted below. Installation notes This update is provided as an RPM package that can easily be installed onto a running system. First, find out which kernel package to use, for example with rpm -qf /boot/vmlinuz Download the kernel image fitting your setup and install it with either: * rpm -Fvh k_deflt-2.4.*.i586.rpm for the default kernel image, or * rpm -Fhv k_athlon-2.4.*.i586.rpm for the AMD Athlon optimized kernel image, or * rpm -Fhv k_smp-2.4.*.i586.rpm for the SMP kernel image, or * rpm -Fhv k_psmp-2.4.*.i586.rpm for the PSMP kernel image Please do only install one of these kernels, not all of them. In case you are using LILO as bootmanager, please make sure that you also execute the command lilo after installing the update for the system to remain bootable. Finally, reboot the system with shutdown -r now to load the new kernel (replace "now" with the appropriate amount of time to allow local users to cleanly log out, for example "+5" for five minutes.) Hsilgne.noitpircsedgnol: Size: 240625 Preinformation.english: This update can be used to install a new kernel. If you decide to use the kernel update, we recommend that you reboot your system upon completion of the YaST Online Update, as additional kernel modules may be needed which can only be loaded after the system is rebooted. Hsilgne.noitamrofnierp: MinYaST1Version: MinYaST2Version: UpdateOnlyInstalled: true Packages: ## ## -----> k_athlon <----- ## Filename: k_athlon.rpm Label: Kernel optimized for AMD Athlon processors Series: i586 Size: 56045000 22284944 Buildtime: 1111419609 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: System/Kernel Copyright: GPL AuthorName: Linus Torvalds et al. AuthorAddress: Version: 2.4.21-281 StartCommand: Obsoletes: Requires: /sbin/mkinitrd /bin/cp /bin/sed /bin/touch /bin/awk /bin/sh rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: kernel ## ## -----> k_debug <----- ## Filename: k_debug.rpm Label: Debug version of the kernel. Series: i586 Size: 694792698 110474993 Buildtime: 1111419319 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: System/Kernel Copyright: GPL AuthorName: AuthorAddress: Version: 2.4.21-281 StartCommand: Obsoletes: Requires: /sbin/mkinitrd /bin/cp /bin/sed /bin/touch /bin/awk /bin/sh rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: kernel ## ## -----> k_deflt <----- ## Filename: k_deflt.rpm Label: The standard kernel Series: i586 Size: 54741178 22183526 Buildtime: 1111417767 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: System/Kernel Copyright: GPL AuthorName: AuthorAddress: Version: 2.4.21-281 StartCommand: Obsoletes: Requires: /sbin/mkinitrd /bin/cp /bin/sed /bin/touch /bin/awk /bin/sh rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: k_deflt_24 k_laptop k_eide k_deflt_22 k_pentiu k_orig kernel ## ## -----> k_psmp <----- ## Filename: k_psmp.rpm Label: Kernel 2.4 with SMP-support for older processors (Pentium classic) Series: i586 Size: 55240844 22497254 Buildtime: 1111419856 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: System/Kernel Copyright: GPL AuthorName: torvalds@transmeta.com AuthorAddress: Version: 2.4.21-281 StartCommand: Obsoletes: Requires: /sbin/mkinitrd /bin/cp /bin/sed /bin/touch /bin/awk /bin/sh rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: kernel ## ## -----> k_smp <----- ## Filename: k_smp.rpm Label: Kernel with multiprocessor support Series: i586 Size: 57051121 22701471 Buildtime: 1111419691 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: System/Kernel Copyright: GPL AuthorName: AuthorAddress: Version: 2.4.21-281 StartCommand: Obsoletes: Requires: /sbin/mkinitrd /bin/cp /bin/sed /bin/touch /bin/awk /bin/sh rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: k_smp_24 k_smp_22 kernel ## ## -----> kernel-source <----- ## Filename: kernel-source.rpm Label: The Linux kernel (the core of the Linux operating system) Series: i586 Size: 269651188 46258465 Buildtime: 1111413612 DepAND: DepOR: DepExcl: Flag: Category: RpmGroup: Development/Sources Copyright: GPL AuthorName: Linus Torvalds see /usr/src/linux/CREDITS for more details. AuthorAddress: Version: 2.4.21-281 StartCommand: Obsoletes: Requires: make c_compiler rpmlib(PayloadIsBzip2) <= 3.0.5-1 Provides: linux lx_suse lx_sus22 lx_sus24 Segakcap: -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQFCQqsdqE7a6JyACsoRAgS/AJ9qoka5rQQEO534v7TU2AKGhP4ZVgCf V+heFwxpnS3h3JooamO8qvBfaqE= =N9Rn -----END PGP SIGNATURE-----