Debian DSA 442-1 Critical: Kernel Upgrades for S390 Security Issues

Several security related problems have been fixed in the Linux kernel
2.4.17 used for the S/390 architecture, mostly by backporting fixes
from 2.4.18 and incorporating recent security fixes. The corrections
are listed below with the identification from the Common
Vulnerabilities and Exposures (CVE) project:

CAN-2002-0429:

The iBCS routines in arch/i386/kernel/traps.c for Linux kernels
2.4.18 and earlier on x86 systems allow local users to kill
arbitrary processes via a a binary compatibility interface (lcall)

CAN-2003-0001:

Multiple ethernet network interface card (NIC) device drivers do
not pad frames with null bytes, which allows remote attackers to
obtain information from previous packets or kernel memory by using
malformed packets, as demonstrated by Etherleak.

CAN-2003-0244:

The route cache implementation in Linux 2.4, and the Netfilter IP
conntrack module, allows remote attackers to cause a denial of
service (CPU consumption) via packets with forged source addresses
...