September 2004 - openSUSE Security - openSUSE Mailing Lists

connection-tracking tables full on SuSE 9.0 with SuSEfirewall2
by Ralf Ronneburger 02 Sep '04

02 Sep '04

Hi everyone, I found messages like this on my SuSE 9.0 box that runs SuSEfirewall2: Sep 2 10:16:06 mylinux kernel: NET: 38 messages suppressed. Sep 2 10:16:06 mylinux kernel: ip_conntrack: table full, dropping packet. Sep 2 10:16:12 mylinux kernel: NET: 31 messages suppressed. Sep 2 10:16:12 mylinux kernel: ip_conntrack: table full, dropping packet. As I read that one can raise the maximum of connections to be tracked I did the following: # echo "65535" > /proc/sys/net/ipv4/ip_conntrack_max Now the logfile-entries have disappeard. I checked /proc/net/ip_conntrack and there are about 800 lines in it. So I wounder why packets got droped just 5 minutes ago when the limit was set to about 16.000? And why did some packages get through and others not (I could log into the machine with ssh with no problems)? Is there maybe a limit for each iptables-rule that calculates from ip_conntrack_max divided by the number of rules? And one last question - is 65535 the maximum for ip_conntrack_max or could it be set higher? Thanks and greetings, Ralf

1 0

2.6.5 kernel ./build directory
by Mark Tinka 02 Sep '04

02 Sep '04

hi all... i am trying to compile an additional module into my default SuSE kernel.. the compilation procedure requires me to reference '/lib/modules/`uname -r`/build for my system, 'uname -r' = 2.6.5-7.104-default looking at said directory, SuSE makes a sym link like so: ls -l /lib/modules/2.6.5-7.104-default/build lrwxrwxrwx 1 root root 43 2004-08-07 17:02 /lib/modules/2.6.5-7.104-default/build -> /usr/src/linux-2.6.5-7.104-obj/i386/default when i check /usr/src/`uname -r`-obj/i386/default, it doesn't exist... what i was wondering is how do i obtain this directory (and it's contents)..?.. do i need to install some other kernel software, since i already have the 2.6.5 kernel sources installed.. all help appreciated.. Mark. __________________________________ Do you Yahoo!? New and Improved Yahoo! Mail - 100MB free storage! http://promotions.yahoo.com/new_mail

3 3

no kernel patch for 9.0
by SuSE Ground Zero 02 Sep '04

02 Sep '04

There is not maybe not yet a patch available for 9.0 version, but in the initial security announcement I can find 9.0 between afected versions.

3 2

Re: [suse-security] SUSE Security Announcement: kernel (SUSE-SA:2004:028)
by Kyek, Andreas, VF-DE 02 Sep '04

02 Sep '04

Rene Gallati wrote: [...] > Well never say never, there may yet be some master bug > forcing a version > jump. Or what was the reason that there was a switch from 2.6.4 (SuSE > 9.1 default installation) to the current 2.6.5 version ? > > It's not that I absolutely must have a SuSE 2.6.8.1 kernel for 9.1, I > can install and patch it myself, but somehow I always feel > safer using a > SuSE kernel (odd I know :) ) There is just one disconcerting > problem I > have on a box at a customer and potentially 2.6.8.1 may fix it for me > because there were some changes in the involved driver. Be aware that 2.6.8 and also 2.6.8.1 will kill CD-burning and ripping (at least for non-Root Users). There was/is a lot of discussion about that in suse-linux / suse-multimedia. So it doesn't matter which Kernel you choose: There will be some problems with each Kernel. Mayby your hardware/software is affected; maybe not. But definitly each of them has bugs. Andreas

1 0

Metainformationen in Dokumenten als Sicherheitsrisiko- auch unter Linux?
by Axel.Krebs＠t-online.de 01 Sep '04

01 Sep '04

Hallo! Stieß vorhin auf http://www.metadatarisk.org/ Sind vergleichbare Sicherheitsrisiken in (unsichtbaren?) Metadaten auch in OO-Dokumenten bekannt? Weiß jemand was dazu? Danke erstmal, Axel -- Dr. A. Krebs <Axel.Krebs(a)T-Online.de>

4 3

Kernel update (2.6.5-7.108-default not installing via YAST)
by Steve Kratz 01 Sep '04

01 Sep '04

Platform SuSE 9.1, trying to do a YAST update to get the new kernel. I have the default kernel, kernel-docs, and kernel-source installed. YAST starts downloading the files (I see them show up in the /var/lib/YAST2..../rpm folder) but when it starts installing, it simply fails. All the log really shows is "ERROR(You:rpm failed.)" followed by the kernel package(s). I have manually downloaded and installed these packages directly with rpm -Uvh, and they installed fine. I've also selected several different update source sites. They all do the same. I know the kernel's updated, uname shows the proper kernel, and I know this takes care of the update issue at the moment, but I'd really like to have YaST/YOU be able to take care of the updates. Ideas? Steve Kratz

1 0

Re: [suse-security-announce] SUSE Security Announcement: kernel (SUSE-SA:2004:028)
by Al Bogner 01 Sep '04

01 Sep '04

Am Mittwoch, 1. September 2004 14:30 schrieb Thomas Biege: > _________________________________________________________________ >_____________ > > SUSE Security Announcement > > Package: kernel > Announcement-ID: SUSE-SA:2004:028 > Date: Wednesday, Sept 1st 2004 14:26 > MEST Affected products: 8.1, 8.2, 9.0, 9.1 > SUSE Linux Database Server, > SUSE eMail Server III, 3.1 > SUSE Linux Enterprise Server 8, 9 > SUSE Linux Connectivity Server > SUSE Linux Office Server > Vulnerability Type: remote denial-of-service > Severity (1-10): 6 > SUSE default package: yes > Cross References: none I am unsure if the problems are solved in 2.6.5-7.108-default, because I downloaded the kernel today before I received this mail. Could you please name the kernels exactly, which have the bugs solved, in the announcement? Al

3 4