Mailinglist Archive: opensuse-security-announce (13 mails)

[Marcus Meissner <meissner@xxxxxxx>]

On Mon, Jul 28, 2008 at 05:27:34PM +0200, Marcus Meissner wrote:
> Hi,
>
> On Monday 21 Jul 2008 we published a security announcement regarding the
> release of a Linux kernel update for SUSE Linux Enterprise 10 Service
> Pack 2.
>
> This advisory is here:
> http://www.novell.com/linux/security/advisories/2008_37_kernel.html

Above URL should be:
http://www.novell.com/linux/security/advisories/2008_35_kernel.html

The problem affects only SUSE Linux Enterprise 10 Service Pack 2
kernel, version 2.6.16.60-0.25.
 
> Unfortunately this kernel update introduces a critical regression in
> handling of IDE CD-ROMs on little endian processor architectures (Intel
> x86, AMD64 and Intel EM64T aka x86_64, and Intel Itanium aka ia64),
> causing IDE-CDROMs not to work at all and even crash the machine.
>
> Due to this problem we have removed the kernel update for the
> three affected architectures from the update servers and from
> https://download.novell.com/
>
>
> Please note that this IDE-CDROM regression is not a security problem in
> itself, but since the removal of the update disables available security
> fixes it is announced here.
>
>
> A Novell TID is also available, TID 7001037:
> http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=7001037
>
> We are working on publishing fixed kernel packages within this week.
>
> Ciao, Marcus