openSUSE 12.2: 2013:1042-1 Critical: Kernel Security Fix Issues
opensuse
June 19, 2013
An update that solves three vulnerabilities and has 5 fixes is now available.
Description
The openSUSE 12.2 kernel was updated to fix security issue
and other bugs.
Security issues fixed: CVE-2013-2850: Incorrect strncpy
usage in the network listening part of the iscsi target
driver could have been used by remote attackers to crash
the kernel or execute code.
This required the iscsi target running on the machine and
the attacker able to make a network connection to it (aka
not filtered by firewalls).
CVE-2013-2094: The perf_swevent_init function in
kernel/events/core.c in the Linux kernel used an incorrect
integer data type, which allowed local users to gain
privileges via a crafted perf_event_open system call.
CVE-2013-0290: The __skb_recv_datagram function in
net/core/datagram.c in the Linux kernel did not properly
handle the MSG_PEEK flag with zero-length data, which
allowed local users to cause a denial of service (infinite
loop and system hang) via a crafted application.
Bugs fixed:
- reiserfs: fix...
Read the Full Advisory
Patch
Patch Instructions:
To install this openSUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- openSUSE 12.2:
zypper in -t patch openSUSE-2013-512
To bring your system up-to-date, use "zypper patch".
Package List
- openSUSE 12.2 (i586 x86_64):
kernel-default-3.4.47-2.38.1
kernel-default-base-3.4.47-2.38.1
kernel-default-base-debuginfo-3.4.47-2.38.1
kernel-default-debuginfo-3.4.47-2.38.1
kernel-default-debugsource-3.4.47-2.38.1
kernel-default-devel-3.4.47-2.38.1
kernel-default-devel-debuginfo-3.4.47-2.38.1
kernel-syms-3.4.47-2.38.1
- openSUSE 12.2 (i686 x86_64):
kernel-debug-3.4.47-2.38.1
kernel-debug-base-3.4.47-2.38.1
kernel-debug-base-debuginfo-3.4.47-2.38.1
kernel-debug-debuginfo-3.4.47-2.38.1
kernel-debug-debugsource-3.4.47-2.38.1
kernel-debug-devel-3.4.47-2.38.1
kernel-debug-devel-debuginfo-3.4.47-2.38.1
kernel-desktop-3.4.47-2.38.1
kernel-desktop-base-3.4.47-2.38.1
kernel-desktop-base-debuginfo-3.4.47-2.38.1
kernel-desktop-debuginfo-3.4.47-2.38.1
kernel-desktop-debugsource-3.4.47-2.38.1
kernel-desktop-devel-3.4.47-2.38.1
kernel-desktop-devel-debuginfo-3.4.47-2.38.1
kernel-ec2-3.4.47-2.38.1
kernel-ec2-base-3.4.47-2.38.1
kernel-ec2-base-debuginfo-3.4.47-2.38.1
kernel-ec2-debuginfo-3.4.47-2.38.1
kernel-ec2-debugsource-...
Read the Full AdvisoryReferences
https://www.suse.com/security/cve/CVE-2013-0290.html
https://www.suse.com/security/cve/CVE-2013-2094.html
https://www.suse.com/security/cve/CVE-2013-2850.html
--
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2013:1042-1
Rating: critical
Affected Products:
openSUSE 12.2
le.
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!