Sécurité informatique

SECURINFOS.INFO - Bulletins de sécurité informatique, Alertes et Protection

SUSE : mise à jour pour le kernel

09/07/2007 17H38
Référence Secunia : SA25961 
Date de publication : 2007-07-09

Risque : Moyennement Critique. Niveau 3 sur 5.
Impact : Contournement de la SécuritéBrute forceDoS
Lieu : A distance


Solutions :
Correctif de l'éditeur

OS :
openSUSE 10.2
SUSE Linux 10
SuSE Linux 9.0
Novell Open Entreprise Serveur

Référence CVE :
CVE-2007-2876



Description :
SUSE a réalisé une mise à jour pour le kernel. Cela corrige quelques vulnérabilités et une faiblesse, qui pourraient être exploitées par des utilisateurs locaux malveillants pour causer un Déni de Service (DoS) ou des personnes malicieuses pour causer un DoS et contourner certaines restrictions de sécurité.


Solutions :
Appliquez les paquetages mis à jour.

Plateforme x86:

openSUSE 10.2:
ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-bigsmp-2.6.18.8-0.5.i586.rpm
a505d3960da0ec2ffe648752f1d8b6c4
ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-default-2.6.18.8-0.5.i586.rpm
da9c7c160022a364b3bb07fee33d602d
ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-source-2.6.18.8-0.5.i586.rpm
4e1c40c4fda8864192a230bb05380aca
ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-syms-2.6.18.8-0.5.i586.rpm
5e273c329378e6c102f2f8ad7e154926
ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-xen-2.6.18.8-0.5.i586.rpm
c309622d4a95ffe1737c40f025856a7e
ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-xenpae-2.6.18.8-0.5.i586.rpm
195c5f7ab27f3c3ab20fb47fa0e27ec6

SUSE LINUX 10.0:
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/Intel-536ep-4.69-0.2.i586.rpm
1d3fe226bab796dcd52bd99a568f726e
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-bigsmp-2.6.13-15.16.i586.rpm
3cf2ab34b8a006be241aa022f192c89b
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-bigsmp-nongpl-2.6.13-15.16.i586.rpm
ee1c01585c96fadcf3071e1028470725
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-default-2.6.13-15.16.i586.rpm
d17a8edd2af6c014176525b3b18d9dd9
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-default-nongpl-2.6.13-15.16.i586.rpm
05614b6e759579c3e0ee5325ad226fd5
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-smp-2.6.13-15.16.i586.rpm
fc205f6d3c72ee4a4efafd391866a593
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-smp-nongpl-2.6.13-15.16.i586.rpm
741e1670becd48cae2f9994c2dfaff5c
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-source-2.6.13-15.16.i586.rpm
fe997ec5203094fc2fa58eb6b03cc6b5
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-syms-2.6.13-15.16.i586.rpm
c7cf492f1fa78512c1a8d9cd7fb07bac
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-um-2.6.13-15.16.i586.rpm
40114d46d9bb329c5dce4762a7ca78d7
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-um-nongpl-2.6.13-15.16.i586.rpm
0839b75f18b63ddf1623769d0283eb18
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-xen-2.6.13-15.16.i586.rpm
0626e5104b81301c71ddde79bfabdc27
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/kernel-xen-nongpl-2.6.13-15.16.i586.rpm
aa2d3994fe3ac616548eb20beb056c57
ftp.suse.com/pub/suse/i386/update/10.0/rpm/i586/um-host-kernel-2.6.13-15.16.i586.rpm
d377dae62b3689c187d8258597df6a67

Plate-forme Power PC:

openSUSE 10.2:
ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-default-2.6.18.8-0.5.ppc.rpm
590007ea5d50c35b79eaf3246f80b360
ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-iseries64-2.6.18.8-0.5.ppc.rpm
b174a54f8aae959fdfc50d009be2d069
ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-ppc64-2.6.18.8-0.5.ppc.rpm
448c87b384c1f62d9e5519cd6f47f5aa
ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-source-2.6.18.8-0.5.ppc.rpm
04bf780fe95e95d9953ab344a0debfe0
ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-syms-2.6.18.8-0.5.ppc.rpm
63102284392f8afc6e5a48855b6cf8a8

SUSE LINUX 10.0:
ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-default-2.6.13-15.16.ppc.rpm
7f704938e86c3de242436d114560fae9
ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-iseries64-2.6.13-15.16.ppc.rpm
bf310faa41c55b897893e8891e0eaaa8
ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-ppc64-2.6.13-15.16.ppc.rpm
1a01f7fe3c5b9701d2d122d05138c000
ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-source-2.6.13-15.16.ppc.rpm
b76403857ba669b234d2891855809f06
ftp.suse.com/pub/suse/i386/update/10.0/rpm/ppc/kernel-syms-2.6.13-15.16.ppc.rpm
6617ba26a91fd4ae1f7018c2b9675159

Plate-forme x86-64:

openSUSE 10.2:
ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/kernel-default-2.6.18.8-0.5.x86_64.rpm
36bf701bec6ff3f1ef7622ae2d718fc7
ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/kernel-source-2.6.18.8-0.5.x86_64.rpm
2a00aff3634cb6b60c6c174bbfbc87cc
ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/kernel-syms-2.6.18.8-0.5.x86_64.rpm
0d673a9f9557eb1643c66c6a22f63cda
ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/kernel-xen-2.6.18.8-0.5.x86_64.rpm
187d790942b4b7287a766c45e6ece747

SUSE LINUX 10.0:
ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-default-2.6.13-15.16.x86_64.rpm
effe5768bfde49ca4062a55c49607263
ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-default-nongpl-2.6.13-15.16.x86_64.rpm
ffb75eae6c6ff7bfc965a6227f1f7972
ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-smp-2.6.13-15.16.x86_64.rpm
106430486de053978ed824436dd064fa
ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-smp-nongpl-2.6.13-15.16.x86_64.rpm
c1e57b4f42c2de1cf31ebaf9cbdc389f
ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-source-2.6.13-15.16.x86_64.rpm
ab6ba07327191cf7c409f4f9c0602d73
ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-syms-2.6.13-15.16.x86_64.rpm
e3b600c1e5e2ab862168d20220bcff5c
ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-xen-2.6.13-15.16.x86_64.rpm
d299aa32d3e17091aa83d7f3097653b5
ftp.suse.com/pub/suse/i386/update/10.0/rpm/x86_64/kernel-xen-nongpl-2.6.13-15.16.x86_64.rpm
d523b78f2f2d5d1d162d3cbd4511a7c2

Sources:

openSUSE 10.2:
ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-bigsmp-2.6.18.8-0.5.nosrc.rpm
a4c9f16922fea3aaad385b4614d21d15
ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-default-2.6.18.8-0.5.nosrc.rpm
a576cb1f91137053da1e7f6c58c7d37c
ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-iseries64-2.6.18.8-0.5.nosrc.rpm
901878ad7875cdce03c2178c2d91ae06
ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-ppc64-2.6.18.8-0.5.nosrc.rpm
4985f6d66c4cb0d899f5a01db4e38237
ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-source-2.6.18.8-0.5.src.rpm
71a95473e6114f4eea2a6a00f591d8f8
ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-syms-2.6.18.8-0.5.src.rpm
5a7312884f85d6bce16991333c1504b1
ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-xen-2.6.18.8-0.5.nosrc.rpm
e53829bfc3ae75c0dfdcc0c7e5411ba8
ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-xenpae-2.6.18.8-0.5.nosrc.rpm
d8cfd9e90f21b4167ebf2935aeba7678

SUSE LINUX 10.0:
ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/Intel-536ep-4.69-0.2.src.rpm
05dec5d7ae03b161f2a57f6da8955700
ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/kernel-bigsmp-2.6.13-15.16.nosrc.rpm
e5ef10ca84c922a722a593e76a20c2f1
ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/kernel-default-2.6.13-15.16.nosrc.rpm
a76d8142a583508c669e147c070ce78d
ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/kernel-iseries64-2.6.13-15.16.nosrc.rpm
8016b18e1d36bbfbbed8f75d2c79cb04
ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/kernel-ppc64-2.6.13-15.16.nosrc.rpm
cf5c3bdf83956b642ddd3aa46eac5ee0
ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/kernel-smp-2.6.13-15.16.nosrc.rpm
261324df40ac37369cfdd9b22919c742
ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/kernel-source-2.6.13-15.16.nosrc.rpm
17a5dd4d44426ce4d7d96aa437582513
ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/kernel-source-2.6.13-15.16.src.rpm
d200d519ac2cdb2e01a9222f381c3e63
ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/kernel-syms-2.6.13-15.16.src.rpm
a3c1111ae281e8ac2ed871b39e2236e3
ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/kernel-um-2.6.13-15.16.nosrc.rpm
88a5a6f8507a193e9407d6490821be94
ftp.suse.com/pub/suse/i386/update/10.0/rpm/src/kernel-xen-2.6.13-15.16.nosrc.rpm
0b1277b23d20e93da20ecafe4a23a8b6

Référence :
http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00005.html


Autres références :

SA24492:
http://secunia.com/advisories/24492/

SA24618:
http://secunia.com/advisories/24618/

SA24793:
http://secunia.com/advisories/24793/

SA25030:
http://secunia.com/advisories/25030/

SA25682:
http://secunia.com/advisories/25682/




Veuillez noter : L'information sur laquelle ce bulletin Secunia est basé provient d'un tiers sauf mention du contraire. Secunia collecte, valide, et vérifie tout les rapports de vulnérabilité issus de la recherche en sécurité de groupes, distributeurs ou autres.

Les noms, marques et enseignes cités sur ce site sont la propriété de leurs déposants respectifs.