drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in Linux
Name: |
Mehrere Probleme in Linux |
|
ID: |
USN-1824-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 10.04 LTS |
|
Datum: |
Mi, 15. Mai 2013, 19:32 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6549
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1826
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1860
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1928
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2634 |
|
Applikationen: |
Linux |
|
Originalnachricht |
This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --===============7621064896153240858== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="------------enig6B13BB0DC9C0AD4D28A62C58"
This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig6B13BB0DC9C0AD4D28A62C58 Content-Type: multipart/mixed; boundary="------------000900070307090301050508"
This is a multi-part message in MIME format. --------------000900070307090301050508 Content-Type: text/plain; charset=ISO-8859- Content-Transfer-Encoding: quoted-printable
========================================================================== Ubuntu Security Notice USN-1824-1 May 15, 2013
linux vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 10.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description: - linux: Linux kernel
Details:
Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver. A local user could exploit this flaw to examine some of the kernel's heap memory. (CVE-2012-6549)
Mathias Krause discovered a flaw in xfrm_user in the Linux kernel. A local attacker with NET_ADMIN capability could potentially exploit this flaw to escalate privileges. (CVE-2013-1826)
A buffer overflow was discovered in the Linux Kernel's USB subsystem for devices reporting the cdc-wdm class. A specially crafted USB device when plugged-in could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2013-1860)
An information leak was discovered in the Linux kernel's /dev/dvb device. A local user could exploit this flaw to obtain sensitive information from the kernel's stack memory. (CVE-2013-1928)
An information leak in the Linux kernel's dcb netlink interface was discovered. A local user could obtain sensitive information by examining kernel stack memory. (CVE-2013-2634)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 10.04 LTS: linux-image-2.6.32-47-386 2.6.32-47.109 linux-image-2.6.32-47-generic 2.6.32-47.109 linux-image-2.6.32-47-generic-pae 2.6.32-47.109 linux-image-2.6.32-47-ia64 2.6.32-47.109 linux-image-2.6.32-47-lpia 2.6.32-47.109 linux-image-2.6.32-47-powerpc 2.6.32-47.109 linux-image-2.6.32-47-powerpc-smp 2.6.32-47.109 linux-image-2.6.32-47-powerpc64-smp 2.6.32-47.109 linux-image-2.6.32-47-preempt 2.6.32-47.109 linux-image-2.6.32-47-server 2.6.32-47.109 linux-image-2.6.32-47-sparc64 2.6.32-47.109 linux-image-2.6.32-47-sparc64-smp 2.6.32-47.109 linux-image-2.6.32-47-versatile 2.6.32-47.109 linux-image-2.6.32-47-virtual 2.6.32-47.109
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well.
References: http://www.ubuntu.com/usn/usn-1824-1 CVE-2012-6549, CVE-2013-1826, CVE-2013-1860, CVE-2013-1928, CVE-2013-2634
Package Information: https://launchpad.net/ubuntu/+source/linux/2.6.32-47.109
--------------000900070307090301050508 Content-Type: text/plain; charset=UTF-8; name="Attached Message Part" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="Attached Message Part"
--------------000900070307090301050508--
--------------enig6B13BB0DC9C0AD4D28A62C58 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/
iQIcBAEBCgAGBQJRk8RHAAoJEAUvNnAY1cPYnh8QAJzkVKWpe0qLcDGV68rFT9+y hGKKLG3WEaN/Kj84NBFcg1mS0QQDoiNZP+kbMRJpGH5GcWxjwe8wYQlmEAyr0uB2 hf2tqCN1weFLrdokN5Wj90JURBzSse5V/g3/Z5qlGvLHUemAZafGCz/TnP4XTq8P vOd5FE/qR7R9hKs2i0kNCGEjIbhV3KqSXiu9VmSBtjwN6siFpNCkyDrraS4USdiC nZJPlxlmrXA05jqZmi/ymghTqmfESyP+tf4LYebFT9R3y3/CSxNLeGXh9hCz2MED 8L8SYLhxsPvtvIlAdmTbJr2Xn24uPQ3rPPmAMWnzOh/sZGpMf24DT0SNIpzDotVg l+S+ZcG2Apw1MQOkSse+qNfA2GdJye+RbzKTww0O2UZV74fwlDqlQ8epxIp0h+ov /YIQDgfshRH0Ca/IaoIdywlzrz/QHu+w60FK/39tjfmy45RF534tgakis4Ri1suY a5VzCrsXwDtzm+ojTHXmeIThki8uBZQw+66UImonuTMbI1c76UoyVwddvAWitcPy B00+ffB/k+r3R7/p4gGEHXJ8EzTMA8eniMeMaLJTXcPMtJcjEX3cuBu+14WktDI2 n+BbVeCPGr9voNZN/F22oX4q2Lz7sWolYD8GL8p66Sqov2wOp//csEhIUb370Y7o Z0h8lWEwW7X+spnPQZrT =omzJ -----END PGP SIGNATURE-----
--------------enig6B13BB0DC9C0AD4D28A62C58--
--===============7621064896153240858== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============7621064896153240858==--
|
|
|
|