remote denial of service

Please Install the Updated Packages.

This kernel update fixes the following security problems: CVE-2007-6282: A remote attacker could crash the IPSec/IPv6 stack by sending a bad ESP packet. This requires the host to be able to receive such packets (default filtered by the firewall). CVE-2008-1615: On x86_64 systems a denial of service attack could be used by local attackers to immediately panic / crash the machine. CVE-2008-1375: Fixed a dnotify race condition, which could be used by local attackers to potentially execute code. CVE-2008-1367: Clear the &quot direction&quot flag before calling signal handlers. For specific not yet identified programs under specific timing conditions this could potentially have caused memory corruption or code execution. Other changes and improvements include: - OCFS2 updated to 1.2.9 - Significant bug fixes. More details are available in the RPM changelog.

kernel on SUSE SLES 9, Novell Linux Desktop 9, Novell Linux POS 9

• http://www.novell.com/linux/security/advisories/2008_31_kernel.html

---

Updated on 2015-03-25