SuSE 11.3 Security Update : compat-wireless, compat-wireless-debuginfo, etc (SAT Patch Number 9414)

This script is Copyright (C) 2014 Tenable Network Security, Inc.


Synopsis :

The remote SuSE 11 host is missing one or more security updates.

Description :

This update for the compat-wireless kernel modules provides many fixes
and enhancements :

- Fix potential crash problem in ath9k. (CVE-2014-2672,
bnc#871148)

- Fix improper updates of MAC addresses in ath9k_htc.
(bnc#851426, CVE-2013-4579)

- Fix stability issues in iwlwifi. (bnc#865475)

- Improve support for Intel 7625 cards in iwlwifi.
(bnc#51021) Installation notes :

New driver modules may conflict with old modules, which are
automatically loaded from the initrd file after reboot. To apply this
maintenance update correctly, the following steps need to be executed
on a SLEPOS system :

- Rebuild image

- Create specific scDistributionContainer with newly built
initrd and kernel

- Put the updated system image in it as a scPosImage
object Alternatively, you can use a kernel parameter to
enforce using the kernel from the system image :

- Rebuild image

- Set the kernel parameter FORCE_KEXEC, by adding the
scPxeFileTemplate object under the relevant scPosImage
object, with the scKernelParameters attribute containing
'FORCE_KEXEC=yes'.

See also :

https://bugzilla.novell.com/show_bug.cgi?id=851021
https://bugzilla.novell.com/show_bug.cgi?id=851426
https://bugzilla.novell.com/show_bug.cgi?id=865475
https://bugzilla.novell.com/show_bug.cgi?id=871148
https://bugzilla.novell.com/show_bug.cgi?id=883209
http://support.novell.com/security/cve/CVE-2013-4579.html
http://support.novell.com/security/cve/CVE-2014-2672.html

Solution :

Apply SAT patch number 9414.

Risk factor :

High / CVSS Base Score : 7.1
(CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:C)

Family: SuSE Local Security Checks

Nessus Plugin ID: 76198 ()

Bugtraq ID:

CVE ID: CVE-2013-4579
CVE-2014-2672

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now