Fixlet Site - PatchesforSUSELinuxEnterprise Current Version: 134 Published: Sat, 24 May 2008 00:27:12 GMT New Fixlets: ============ *************************************************************** Title: PATCH-B8051902 - Security update for xine-lib - SLED10 Severity: Fixlet ID: 805190201 Fixlet Link: http://support.novell.com/techcenter/psdb/f20cac5da33ab969c71be538df88af2a.html Fixlet Description: Please see patch page for more detailed information. *************************************************************** Title: PATCH-B8051905 - Security update for Linux kernel - SLED10 Severity: Fixlet ID: 805190501 Fixlet Link: http://support.novell.com/techcenter/psdb/9a7b2285c7996f094834fbc31c4d0281.html Fixlet Description: This kernel update fixes the following security problem: CVE-2008-2136: tunneled ipv6 packets (SIT) could trigger a memory leak in the kernel. Remote attackers could exploit that to crash machines. Additionally the following bugfixes have been included for all platforms: patches.xfs/xfs-kern_31033a_Fix-fsync-b0rkage.patch: Fix XFS fsync breakage (bnc#388798). patches.fixes/sit-add-missing-kfree_skb: sit - Add missing kfree_skb() on pskb_may_pull() failure. (bnc#389152) patches.xfs/xfs-kern_30701a_Ensure-a-btree-insert-returns-a-valid-cursor.patch: Ensure a btree insert returns a valid cursor. ( bnc#388806). patches.fixes/369802_d_path_fix.patch: fix d_path for pseudo filesystems (bnc#369802). patches.fixes/ignore_lost_ticks: fixed do_vgettimeofday() and other issues with this patch (bnc#267050) patches.drivers/pci-express-aer-aerdriver-off.patch: PCI - add possibility to turn AER off (bnc#382033) patches.drivers/pci-express-aer-documentation: PCI - add AER documentation (bnc#382033) Everyone using the Linux Kernel on x86 architecture should update. Please see patch page for more detailed information. *************************************************************** Title: PATCH-B8051905 - Security update for Linux kernel - SLES10 Severity: <Unspecified> Fixlet ID: 805190502 Fixlet Link: http://support.novell.com/techcenter/psdb/9a7b2285c7996f094834fbc31c4d0281.html Fixlet Description: This kernel update fixes the following security problem: CVE-2008-2136: tunneled ipv6 packets (SIT) could trigger a memory leak in the kernel. Remote attackers could exploit that to crash machines. Additionally the following bugfixes have been included for all platforms: patches.xfs/xfs-kern_31033a_Fix-fsync-b0rkage.patch: Fix XFS fsync breakage (bnc#388798). patches.fixes/sit-add-missing-kfree_skb: sit - Add missing kfree_skb() on pskb_may_pull() failure. (bnc#389152) patches.xfs/xfs-kern_30701a_Ensure-a-btree-insert-returns-a-valid-cursor.patch: Ensure a btree insert returns a valid cursor. ( bnc#388806). patches.fixes/369802_d_path_fix.patch: fix d_path for pseudo filesystems (bnc#369802). patches.fixes/ignore_lost_ticks: fixed do_vgettimeofday() and other issues with this patch (bnc#267050) patches.drivers/pci-express-aer-aerdriver-off.patch: PCI - add possibility to turn AER off (bnc#382033) patches.drivers/pci-express-aer-documentation: PCI - add AER documentation (bnc#382033) Everyone using the Linux Kernel on x86 architecture should update. Please see patch page for more detailed information. *************************************************************** Title: PATCH-B8051905 - Dependencies Needed - SLED10/SLES10 Severity: Fixlet ID: 805190505 Fixlet Description: Updated kernel packages are now available for SuSE Linux Enterprise 10. However, this update requires that the package "apparmor-parser" be installed and greater than version "2.1.1-0.1". *************************************************************** Title: PATCH-B8051905 - Dependency Conflict - SLED10/SLES10 Severity: Fixlet ID: 805190506 Fixlet Description: Updated kernel packages are now available for SuSE Linux Enterprise 10. However, these systems currently have the one of the following kernel modules installed: Kernel Modules for Atheros Cards (madwifi) Novell Client for Linux (novfs) Wrapper for Microsoft NDIS Network Drivers for WLAN Cards (ndiswrapper) Kernel Modules for Omnibooks from omke-project (omnibook) Kernel modules for various WLAN adapters (wlan) Zapata Telephony Interface Drivers (zaptel) ThinkPad Configuration modules (tpctl) Distributed Replicated Block Device (drbd) Transparently Decompressing Loopback Block Device Utilities (cloop) If these kernel modules are not needed, they should be removed before updating the Linux kernel. Additionally, any separately packaged kernel module that is installed for the current running kernel will need to be either removed before the kernel is updated, or manually updated simultaneously.