The SUSE Linux Enterprise 11 Service Pack 3 Real Time Extension kernel has been updated to fix various bugs and security issues. The following security bugs have been fixed: * CVE-2012-2372: The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic) by establishing an RDS connection with the source IP address equal to the IPoIB interfaces own IP address, as demonstrated by rds-ping. (bnc#767610) * CVE-2013-2929: The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass intended ptrace restrictions or obtain sensitive information from IA64 scratch
#767610 #786450 #792271 #821619 #832710 #837563
#840524 #846404 #846690 #847652 #850915 #851426
#851603 #852553 #855126 #857926 #858869 #858870
#858872 #859840 #861636 #861980 #862429 #862934
#863300 #863335 #863410 #863873 #864404 #864464
#865310 #865330 #865882 #866081 #866102 #866615
#866800 #866864 #867362 #867517 #867531 #867723
#867953 #868488 #868528 #868653 #868748 #869033
#869414 #869563 #869934 #870173 #870335 #870450
#870496 #870498 #870576 #870591 #870618 #870877
#870958 #871561 #871634 #871676 #871728 #871854
#871861 #871899 #872188 #872540 #872634 #873061
#873374 #873463 #874108 #874145 #874440 #874577
#875386 #876102 #876114 #876176 #876463 #877013
#877257 #877497 #877775 #878115 #878...
Read the Full Advisory
Get the latest Linux and open source security news straight to your inbox.