SuSE Security Announcement - A problem exists in the Linux kernel 2.4 and 2.6 series where missing Discretionary Access Control (DAC) in the chown(2) system call allow an attacker with a local account the ability to change the group ownership of arbitrary files.
016299baba8db03cb7e0aa77aab766ca6012636db94e2bb330a1d595585702a8
Sending crafted packets to a 2.6 series kernel with netfilter rules matching TCP options (using the --tcp-option match) may result in a Denial of Service.
28a31023e011acd43ed42575cb7c55864db29f0f4463ce4e22d18f0616b771b0