English
The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1

SUSE update for kernel


Secunia ID

SA49628

CVE-ID

CVE-2011-2928, CVE-2011-4077, CVE-2011-4324, CVE-2011-4330, CVE-2012-2313, CVE-2012-2319

Release Date

20 Jun 2012

Criticality

Less Critical

Solution Status

Vendor Patch

Where

Local system

Impact
DoS (Denial of Service)

This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system.

Privilege escalation

This covers vulnerabilities where a user is able to conduct certain tasks with the privileges of other users or administrative users.

This typically includes cases where a local user on a client or server system can gain access to the administrator or root account thus taking full control of the system.

Description

SUSE has issued an update for the kernel. This fixes two vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service) and potentially gain escalated privileges.

For more information:
SA46591
SA48645 (#2)

Solution

Apply updated packages via the zypper package manager.

Original Advisory

SUSE-SU-2012:0736-1:
http://lists.opensuse.org/opensuse-security-announce/2012-06/msg00017.html