drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in Linux
Name: |
Mehrere Probleme in Linux |
|
ID: |
USN-2946-2 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 12.04 LTS |
|
Datum: |
Mi, 6. April 2016, 10:33 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2550
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2085
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8812
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2847 |
|
Applikationen: |
Linux |
|
Originalnachricht |
--===============7951415885758582402== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="i0/AhcQY5QxfSsSZ" Content-Disposition: inline
--i0/AhcQY5QxfSsSZ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
========================================================================== Ubuntu Security Notice USN-2946-2 April 06, 2016
linux-lts-trusty vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise
Details:
Venkatesh Pottem discovered a use-after-free vulnerability in the Linux kernel's CXGB3 driver. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2015-8812)
Xiaofei Rex Guo discovered a timing side channel vulnerability in the Linux Extended Verification Module (EVM). An attacker could use this to affect system integrity. (CVE-2016-2085)
David Herrmann discovered that the Linux kernel incorrectly accounted file descriptors to the original opener for in-flight file descriptors sent over a unix domain socket. A local attacker could use this to cause a denial of service (resource exhaustion). (CVE-2016-2550)
It was discovered that the Linux kernel did not enforce limits on the amount of data allocated to buffer pipes. A local attacker could use this to cause a denial of service (resource exhaustion). (CVE-2016-2847)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 12.04 LTS: linux-image-3.13.0-85-generic 3.13.0-85.129~precise1 linux-image-3.13.0-85-generic-lpae 3.13.0-85.129~precise1
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
References: http://www.ubuntu.com/usn/usn-2946-2 http://www.ubuntu.com/usn/usn-2946-1 CVE-2015-8812, CVE-2016-2085, CVE-2016-2550, CVE-2016-2847
Package Information: https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-85.129~precise1
--i0/AhcQY5QxfSsSZ Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJXBMISAAoJEC8Jno0AXoH0wzIQAIEOj+P3ZDrajqB/WJJlBr9Z Uc4Yar78Z89960sp1V1PLLEmuChxBy+bMQzCPxXhnnNLoPXVTtos3N41B84hOw2F DGXJ0yoIgPd5rE/2+8uRbpyEKS8T8Qw4tjvxVZOIeQCmDrCLjLYfUfeMpE0qrUFa IBMgibCmMrmMQW5ZOpfyFHaxV56qtJQwdnZmM+/2OETJbDtQHtGX1WmQPfK/dLlp EsU5JvOtXYloW3bKtjC7/3bU6j++fKnwwrzQnhnePSWNQCC+VN7wwC75kzpEMhDb k0S2+DePe6YphMaLdRgt8QGt5luYl95PdzwKaNCfC9HRyXOlGmBdJWeCEzBhWpmw TN9shzRS6OIP9jy7LELI/Srw+Y6VzIpW0DUvuePPs9jjBSVOxVWFeTRpl3sI8fBy XLel22GseeszwD3FFqXXJOK2wUC4s+Y9PujiqGRZ/p6djBk9yB0gKCCy0DyuQQ9L EtGiuAYGh1XDC/fkTkNBuFpKG5fpW/qy3tq6WqY9oy6Pk8VU5qF+i72so96bQLq7 KuDwxGl4KebPgP/FH6wxCBWpZu5dh8NnE1SrPM00ONWC2IPfjggW/7L+2m/BSNQ3 r0P4gROsE2+X1EXSCKB4VpPo8z4jaPIiZDqr8cchq1OukNblU7R2jgiuGjObwwH1 VPpSycQaA5vkciOeh7YT =Fv0s -----END PGP SIGNATURE-----
--i0/AhcQY5QxfSsSZ--
--===============7951415885758582402== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============7951415885758582402==--
|
|
|
|