Lightys PC-Hilfe Forum

Linux Kernel: Security/Bugfix update

This updated openSUSE 11.3 kernel fixes the following
security bugs:

CVE-2010-3310: local users could corrupt kernel heap memory
via ROSE sockets.

CVE-2010-2962: local users could write to any kernel memory
location via the i915 GEM ioctl interface.

Additionally the update restores the
compat_alloc_userspace() inline function and includes
several other bug fixes.

... ein weiteres Security/Bugfix Updtate

This update of the openSUSE 11.3 Linux kernel fixes two
critical security issues and some bugs.

Following security issues were fixed: CVE-2010-3904: A
local privilege escalation in RDS sockets allowed local
attackers to gain privileges.

CVE-2010-2963: A problem in the compat ioctl handling in
video4linux allowed local attackers with a video device
plugged in to gain privileges on x86_64 systems.