Security update for Linux kernel (critical)

2013-05-3115:04:12

lists.opensuse.org

0.033 Low

EPSS

Percentile

90.3%

JSON

The SUSE Linux Enterprise 11 SP2 Realtime kernel has been
updated to fix a critical security issue.

CVE-2013-2850: Incorrect strncpy usage in the network
listening part of the iscsi target driver could have been
used by remote attackers to crash the kernel or execute
code.

This required the iscsi target running on the machine
and the attacker able to make a network connection to it
(aka not filtered by firewalls).

OSVersionArchitecturePackageVersionFilename
SLE SERVER Unsupported Extras11i586kernel-default-extra< 3.0.74-0.6.10.1kernel-default-extra-3.0.74-0.6.10.1.i586.rpm
SUSE Linux Enterprise High Availability Extension11.2i586ocfs2-kmp-xen< 1.6_3.0.74_0.6.10-0.11.40ocfs2-kmp-xen-1.6_3.0.74_0.6.10-0.11.40.i586.rpm
SUSE Linux Enterprise Desktop11.2i586kernel-source< 3.0.74-0.6.10.1kernel-source-3.0.74-0.6.10.1.i586.rpm
SUSE Linux Enterprise Desktop11.2x86_64kernel-trace< 3.0.74-0.6.10.1kernel-trace-3.0.74-0.6.10.1.x86_64.rpm
SUSE Linux Enterprise Server for VMware11.2i586kernel-source< 3.0.74-0.6.10.1kernel-source-3.0.74-0.6.10.1.i586.rpm
SUSE Linux Enterprise Server11.2x86_64kernel-default-devel< 3.0.74-0.6.10.1kernel-default-devel-3.0.74-0.6.10.1.x86_64.rpm
SUSE Linux Enterprise Server11.2ia64kernel-default< 3.0.74-0.6.10.1kernel-default-3.0.74-0.6.10.1.ia64.rpm
SUSE Linux Enterprise High Availability Extension11.2s390xcluster-network-kmp-trace< 1.4_3.0.74_0.6.10-2.18.41cluster-network-kmp-trace-1.4_3.0.74_0.6.10-2.18.41.s390x.rpm
SUSE Linux Enterprise High Availability Extension11.2i586gfs2-kmp-default< 2_3.0.74_0.6.10-0.7.73gfs2-kmp-default-2_3.0.74_0.6.10-0.7.73.i586.rpm
SUSE Linux Enterprise Real Time11.2x86_64cluster-network-kmp-rt< 1.4_3.0.74_rt98_0.6.6-2.18.42cluster-network-kmp-rt-1.4_3.0.74_rt98_0.6.6-2.18.42.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
SLE SERVER Unsupported Extras	11	i586	kernel-default-extra	< 3.0.74-0.6.10.1	kernel-default-extra-3.0.74-0.6.10.1.i586.rpm
SUSE Linux Enterprise High Availability Extension	11.2	i586	ocfs2-kmp-xen	< 1.6_3.0.74_0.6.10-0.11.40	ocfs2-kmp-xen-1.6_3.0.74_0.6.10-0.11.40.i586.rpm
SUSE Linux Enterprise Desktop	11.2	i586	kernel-source	< 3.0.74-0.6.10.1	kernel-source-3.0.74-0.6.10.1.i586.rpm
SUSE Linux Enterprise Desktop	11.2	x86_64	kernel-trace	< 3.0.74-0.6.10.1	kernel-trace-3.0.74-0.6.10.1.x86_64.rpm
SUSE Linux Enterprise Server for VMware	11.2	i586	kernel-source	< 3.0.74-0.6.10.1	kernel-source-3.0.74-0.6.10.1.i586.rpm
SUSE Linux Enterprise Server	11.2	x86_64	kernel-default-devel	< 3.0.74-0.6.10.1	kernel-default-devel-3.0.74-0.6.10.1.x86_64.rpm
SUSE Linux Enterprise Server	11.2	ia64	kernel-default	< 3.0.74-0.6.10.1	kernel-default-3.0.74-0.6.10.1.ia64.rpm
SUSE Linux Enterprise High Availability Extension	11.2	s390x	cluster-network-kmp-trace	< 1.4_3.0.74_0.6.10-2.18.41	cluster-network-kmp-trace-1.4_3.0.74_0.6.10-2.18.41.s390x.rpm
SUSE Linux Enterprise High Availability Extension	11.2	i586	gfs2-kmp-default	< 2_3.0.74_0.6.10-0.7.73	gfs2-kmp-default-2_3.0.74_0.6.10-0.7.73.i586.rpm
SUSE Linux Enterprise Real Time	11.2	x86_64	cluster-network-kmp-rt	< 1.4_3.0.74_rt98_0.6.6-2.18.42	cluster-network-kmp-rt-1.4_3.0.74_rt98_0.6.6-2.18.42.x86_64.rpm