Login
Newsletter
Werbung

Sicherheit: Preisgabe von Informationen in Linux
Aktuelle Meldungen Distributionen
Name: Preisgabe von Informationen in Linux
ID: USN-1260-1
Distribution: Ubuntu
Plattformen: Ubuntu 11.10
Datum: Mo, 14. November 2011, 21:22
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2494
Applikationen: Linux

Originalnachricht

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============5604121898438415337==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="------------enigD8D62F449C0F733AF4CB483D"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigD8D62F449C0F733AF4CB483D
Content-Type: text/plain; charset=ISO-8859-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1260-1
November 14, 2011

linux-ti-omap4 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 11.10

Summary:

A security issue was fixed in the kernel.

Software Description:
- linux-ti-omap4: Linux kernel for OMAP4

Details:

Vasiliy Kulikov discovered that taskstats did not enforce access
restrictions. A local attacker could exploit this to read certain
information, leading to a loss of privacy.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
linux-image-3.0.0-1206-omap4 3.0.0-1206.12

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.

References:
http://www.ubuntu.com/usn/usn-1260-1
CVE-2011-2494

Package Information:
https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.0.0-1206.12



--------------enigD8D62F449C0F733AF4CB483D
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=SDlu
-----END PGP SIGNATURE-----

--------------enigD8D62F449C0F733AF4CB483D--


--===============5604121898438415337==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============5604121898438415337==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung