Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

openSUSE 11.4 Advisory 2014:0878-1 Important: Local Escalation Fix

opensuse
Calendar Grey July 8, 2014
Dist Opensuse Esm H88
The recent kernel revision tackles unauthorized privilege escalation and resolves a critical crash vulnerability in openSUSE, enhancing both security and system reliability.
An update that solves one vulnerability and has one errata is now available.

Description

kernel update for Evergreen 11.4 fixes local privilege escalation in futex

code (bnc#880892 / CVE-2014-3153) and a regression causing a crash if

IPsec peer is unavailable

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 11.4:

zypper in -t patch 2014-69

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 11.4 (i586 x86_64):

kernel-debug-3.0.101-87.1

kernel-debug-base-3.0.101-87.1

kernel-debug-base-debuginfo-3.0.101-87.1

kernel-debug-debuginfo-3.0.101-87.1

kernel-debug-debugsource-3.0.101-87.1

kernel-debug-devel-3.0.101-87.1

kernel-debug-devel-debuginfo-3.0.101-87.1

kernel-debug-hmac-3.0.101-87.1

kernel-default-3.0.101-87.1

kernel-default-base-3.0.101-87.1

kernel-default-base-debuginfo-3.0.101-87.1

kernel-default-debuginfo-3.0.101-87.1

kernel-default-debugsource-3.0.101-87.1

kernel-default-devel-3.0.101-87.1

kernel-default-devel-debuginfo-3.0.101-87.1

kernel-default-hmac-3.0.101-87.1

kernel-desktop-3.0.101-87.1

kernel-desktop-base-3.0.101-87.1

kernel-desktop-base-debuginfo-3.0.101-87.1

kernel-desktop-debuginfo-3.0.101-87.1

kernel-desktop-debugsource-3.0.101-87.1

kernel-desktop-devel-3.0.101-87.1

kernel-desktop-devel-debuginfo-3.0.101-87.1

kernel-desktop-hmac-3.0.101-87.1

kernel-ec2-3.0.101-87.1

kernel-ec2-base-3.0.101-87.1

kernel-ec2-base-debuginfo-3.0.101-87.1

kernel-ec2-debuginfo-3.0.101-87.1

kernel-ec...

Read the Full Advisory

References

https://www.suse.com/security/cve/CVE-2014-3153.html

--

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2014:0878-1
Rating: important
Affected Products: openSUSE 11.4 le.

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here