This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============7435802315914809285==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="------------enig87885D3130F3A91989A14349"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig87885D3130F3A91989A14349
Content-Type: multipart/mixed;
 boundary="------------010500070403080507030704"

This is a multi-part message in MIME format.
--------------010500070403080507030704
Content-Type: text/plain; charset=ISO-8859-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1470-1
June 12, 2012

linux-lts-backport-natty vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 10.04 LTS

Summary:

Several security issues were fixed in the kernel.

Software Description:
- linux-lts-backport-natty: Linux kernel backport from Natty

Details:

Andy Adamson discovered a flaw in the Linux kernel's NFSv4 implementation.
A remote NFS server (attacker) could exploit this flaw to cause a denial of
service. (CVE-2011-4131)

A flaw was found in the Linux kernel's KVM (Kernel Virtual Machine) virtual
cpu setup. An unprivileged local user could exploit this flaw to crash the
system leading to a denial of service. (CVE-2012-1601)

A flaw was discovered in the Linux kernel's KVM (kernel virtual machine).
An administrative user in the guest OS could leverage this flaw to cause a
denial of service in the host OS. (CVE-2012-2121)

Steve Grubb reported a flaw with Linux fscaps (file system base
capabilities) when used to increase the permissions of a process. For
application on which fscaps are in use a local attacker can disable address
space randomization to make attacking the process with raised privileges
easier. (CVE-2012-2123)

Schacher Raindel discovered a flaw in the Linux kernel's memory handling
when hugetlb is enabled. An unprivileged local attacker could exploit this
flaw to cause a denial of service and potentially gain higher privileges.
(CVE-2012-2133)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  linux-image-2.6.38-15-generic   2.6.38-15.60~lucid1
  linux-image-2.6.38-15-generic-pae  2.6.38-15.60~lucid1
  linux-image-2.6.38-15-server    2.6.38-15.60~lucid1
  linux-image-2.6.38-15-virtual   2.6.38-15.60~lucid1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-1470-1
  CVE-2011-4131, CVE-2012-1601, CVE-2012-2121, CVE-2012-2123,
  CVE-2012-2133

Package Information:
  https://launchpad.net/ubuntu/+source/linux-lts-backport-natty/2.6.38-15.60~lucid1


--------------010500070403080507030704
Content-Type: text/plain; charset=UTF-8;
 name="Attached Message Part"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
 filename="Attached Message Part"


--------------010500070403080507030704--

--------------enig87885D3130F3A91989A14349
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=CzdR
-----END PGP SIGNATURE-----

--------------enig87885D3130F3A91989A14349--


--===============7435802315914809285==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============7435802315914809285==--