Other Linux distributions or operating systems might be affected as well, please contact your vendor for information about this issue. There is no warranty whatsoever and no liability for any direct, indirect or incidental damage arising from this information or the installation of the update package. The masquerading feature in the Linux kernel has got a vulnerability in the udp and ftp masquerading code which allows arbitary backward connections to be opened. Some denial of service were found. Impact Remote users may bypass ipchains filter rules protecting the internal network.
Users can crash the machine.
Solution Update the package from our FTP server. Please note that we provide a patched 2.2.14 kernel to ensure stability and not the 2.2.15 kernel. All SuSE security announcements are sent to this list. Only SuSE's security annoucements are sent to this list. This information is provided freely to everyone interested and may be redistributed provided that it is not altered in any way.