Sécurité informatique

SECURINFOS.INFO - Bulletins de sécurité informatique, Alertes et Protection

SUSE : mise à jour pour le kernel

23/06/2008 12H37
Référence Secunia : SA30818 
Date de publication : 2008-06-23

Risque : Moyennement Critique. Niveau 3 sur 5.
Impact : Contournement de la Sécurité, Exposition de données sensibles, Elévation de privilèges, DoS, Accès au système
Lieu : A distance


Solutions :
Correctif de l'éditeur

OS :
openSUSE 10.2
openSUSE 10.3

Référence CVE :
CVE-2008-2358


Description :
SUSE a réalisé une mise à jour pour le kernel. Cela corrige quelques vulnérabilités, qui pourraient être exploitées par des utilisateurs locaux malveillants pour divulguer des informations sensibles potentielles, contourner certaines restrictions de sécurité, causer un Déni de Service (DoS), et obtenir des privilèges plus élevés, et personnes malicieuses pour causer un DoS et potentiellement compromettre un système vulnérable.


Solutions :
Appliquez les paquetages mis à jour.

Plateforme x86:

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-bigsmp-2.6.22.18-0.2.i586.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-debug-2.6.22.18-0.2.i586.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-default-2.6.22.18-0.2.i586.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-source-2.6.22.18-0.2.i586.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-syms-2.6.22.18-0.2.i586.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-xen-2.6.22.18-0.2.i586.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/i586/kernel-xenpae-2.6.22.18-0.2.i586.rpm

openSUSE 10.2:

ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-bigsmp-2.6.18.8-0.10.i586.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-default-2.6.18.8-0.10.i586.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-kdump-2.6.18.8-0.10.i586.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-source-2.6.18.8-0.10.i586.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-syms-2.6.18.8-0.10.i586.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-xen-2.6.18.8-0.10.i586.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/i586/kernel-xenpae-2.6.18.8-0.10.i586.rpm

Plate-forme Power PC:

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/kernel-default-2.6.22.18-0.2.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/kernel-kdump-2.6.22.18-0.2.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/kernel-ppc64-2.6.22.18-0.2.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/kernel-source-2.6.22.18-0.2.ppc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/ppc/kernel-syms-2.6.22.18-0.2.ppc.rpm

openSUSE 10.2:

ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-default-2.6.18.8-0.10.ppc.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-iseries64-2.6.18.8-0.10.ppc.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-kdump-2.6.18.8-0.10.ppc.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-ppc64-2.6.18.8-0.10.ppc.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-source-2.6.18.8-0.10.ppc.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/ppc/kernel-syms-2.6.18.8-0.10.ppc.rpm

Plate-forme x86-64:

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-debug-2.6.22.18-0.2.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-default-2.6.22.18-0.2.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-source-2.6.22.18-0.2.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-syms-2.6.22.18-0.2.x86_64.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/x86_64/kernel-xen-2.6.22.18-0.2.x86_64.rpm

openSUSE 10.2:

ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/kernel-default-2.6.18.8-0.10.x86_64.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/kernel-kdump-2.6.18.8-0.10.x86_64.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/kernel-source-2.6.18.8-0.10.x86_64.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/kernel-syms-2.6.18.8-0.10.x86_64.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/x86_64/kernel-xen-2.6.18.8-0.10.x86_64.rpm

Sources:

openSUSE 10.3:

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-bigsmp-2.6.22.18-0.2.nosrc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-debug-2.6.22.18-0.2.nosrc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-default-2.6.22.18-0.2.nosrc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-kdump-2.6.22.18-0.2.nosrc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-ppc64-2.6.22.18-0.2.nosrc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-source-2.6.22.18-0.2.src.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-syms-2.6.22.18-0.2.src.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-xen-2.6.22.18-0.2.nosrc.rpm

http://download.opensuse.org/pub/opensuse/update/10.3/rpm/src/kernel-xenpae-2.6.22.18-0.2.nosrc.rpm

openSUSE 10.2:

ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-bigsmp-2.6.18.8-0.10.nosrc.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-default-2.6.18.8-0.10.nosrc.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-iseries64-2.6.18.8-0.10.nosrc.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-kdump-2.6.18.8-0.10.nosrc.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-ppc64-2.6.18.8-0.10.nosrc.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-source-2.6.18.8-0.10.src.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-syms-2.6.18.8-0.10.src.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-xen-2.6.18.8-0.10.nosrc.rpm

ftp.suse.com/pub/suse/update/10.2/rpm/src/kernel-xenpae-2.6.18.8-0.10.nosrc.rpm

Référence :
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00006.html


Autres références :

SA27666:
http://secunia.com/advisories/27666/

SA27908:
http://secunia.com/advisories/27908/

SA28835:
http://secunia.com/advisories/28835/

SA30044:
http://secunia.com/advisories/30044/

SA30101:
http://secunia.com/advisories/30101/

SA30241:
http://secunia.com/advisories/30241/




Veuillez noter : Le information que ce bulletin Secunia est basé provient d'un tiers sans mention du contraire. Secunia collecte, valide, et vérifie tout les rapports de vulnérabilité issus de la recherche en sécurité de groupes, distributeurs ou autres.

Les noms, marques et enseignes cités sur ce site sont la propriété de leurs déposants respectifs.