This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============3283237035931568301==
Content-Type: multipart/signed; micalg=pgp-sha512;
 protocol="application/pgp-signature";
 boundary="R2afSi8pJNgqf9v0GMJjaPWoNSni6gceG"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--R2afSi8pJNgqf9v0GMJjaPWoNSni6gceG
Content-Type: multipart/mixed;
 boundary="SD2oWcsIKeNoSvx1UQa2Pa6l2Rf3Fdw7f";
 protected-headers="v1"
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Reply-To: Ubuntu Security <security@ubuntu.com>
To: ubuntu-security-announce@lists.ubuntu.com
Message-ID: <b60674ab-6e24-aa1a-944c-fff2e7a443ea@canonical.com>
Subject: [USN-3454-1] libffi vulnerability

--SD2oWcsIKeNoSvx1UQa2Pa6l2Rf3Fdw7f
Content-Type: text/plain; charset=utf-8
Content-Language: en-C
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-3454-1
October 12, 2017

libffi vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 LTS

Summary:

A security issue was fixed in libffi.

Software Description:
- libffi: Foreign Function Interface library

Details:

It was discovered that libffi incorrectly enforced an executable stack. An
attacker could possibly use this issue, in combination with another
vulnerability, to facilitate executing arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  libffi6                         3.1~rc1+r3.0.13-12ubuntu0.2

In general, a standard system update will make all the necessary changes.

References:
  https://www.ubuntu.com/usn/usn-3454-1
  CVE-2017-1000376

Package Information:
  https://launchpad.net/ubuntu/+source/libffi/3.1~rc1+r3.0.13-12ubuntu0.2



--SD2oWcsIKeNoSvx1UQa2Pa6l2Rf3Fdw7f--

--R2afSi8pJNgqf9v0GMJjaPWoNSni6gceG
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCgAGBQJZ375fAAoJEGVp2FWnRL6TXvcP/38JUDYTwqaCtmBUpVJTQT9m
fCkbybQB6U3VnZ7T61AqFaAaJJ+hPePiJ1AL6tL6DV9g0EFkOi/6ihsf4mh7rkaQ
J1g9rcIVrKUa5ZmNwMSSDQxIisuRGvb2rFj0RmJeilZx/zxhppuM15gRS91ofZP+
eDwCl3mpMF31bdWsniJJA/KBVG7DvY0qIsZZ0G+AMBXxl8PYKLITOvOLnehPdzDu
Yo13V+CYOPsKm+if1D0Lrg3kjF+ct7W1INX0KQyi22imFhmww4bglllqZ7NlBsaE
p2QatsfxE08Dy757Sy4adUUgH2zC6KrcAzOZETtKWgU/QvmsUe73dKen5SKqNDxg
LhVhqactPWG0VKrGztz4/tL+Q8HgVqT4rEseS10asKV6RnmmdQLIT7OAtaFJvWT/
Rv7qAWeW5FL7UQgxMCTeaugzJvinGdulhr3AnnZPUhnZyQ5zxTe3s99eRqw8nO3H
rkQ83xGRbCA3Y5gGK9vt3fbyw49RvaloHyUiD2ZqJWzG3h6FVgVvPSdDgMgCobxd
aG31O/WT1r3NiVcS9XQqdp0wL08SkJtiMcEd+aGm+4JsS15y/njk/+xbSEfSUqKb
z5HjEZqiWZ/Ci85TFI439dv5SQIsKr+oXD+Ip+R+fLnS8aDq2m9qJFQr0S/GaGeK
dGmTVUT7aNbGNJgJ1g/c
=FjrH
-----END PGP SIGNATURE-----

--R2afSi8pJNgqf9v0GMJjaPWoNSni6gceG--


--===============3283237035931568301==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

LS0gCnVidW50dS1zZWN1cml0eS1hbm5vdW5jZSBtYWlsaW5nIGxpc3QKdWJ1bnR1LXNlY3VyaXR5
LWFubm91bmNlQGxpc3RzLnVidW50dS5jb20KTW9kaWZ5IHNldHRpbmdzIG9yIHVuc3Vic2NyaWJl
IGF0OiBodHRwczovL2xpc3RzLnVidW50dS5jb20vbWFpbG1hbi9saXN0aW5mby91YnVudHUtc2Vj
dXJpdHktYW5ub3VuY2UK

--===============3283237035931568301==--