SuSE 10 Security Update : the Linux kernel (ZYPP Patch Number 7164)
High Nessus Plugin ID 59152
The remote SuSE 10 host is missing a security-related patch.
This kernel update for the SUSE Linux Enterprise 10 SP3 kernel fixes several critical security issues. The following security issues were fixed : - Incorrect buffer handling in the biarch-compat buffer handling could be used by local attackers to gain root privileges. This problem affects foremost x86_64, or potentially other biarch platforms, like PowerPC and S390x. (CVE-2010-3081) - A kernel information leak via the WEXT ioctl was fixed. (CVE-2010-2955) - A kernel information leak via the XFS filesystem was fixed. (CVE-2010-3078) - A kernel information leak in the net eql code was fixed. (CVE-2010-3297) Additionally a data corruption bug in s390 was fixed : - A race between /proc/pid/stat and fork in the S390 kernel could lead to data corruption.