drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in Linux
Name: |
Mehrere Probleme in Linux |
|
ID: |
USN-2946-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 14.04 LTS |
|
Datum: |
Mi, 6. April 2016, 10:35 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8812
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2550
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2085
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2847 |
|
Applikationen: |
Linux |
|
Originalnachricht |
--===============5231525110737275859== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="NzB8fVQJ5HfG6fxh" Content-Disposition: inline
--NzB8fVQJ5HfG6fxh Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
========================================================================== Ubuntu Security Notice USN-2946-1 April 06, 2016
linux vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description: - linux: Linux kernel
Details:
Venkatesh Pottem discovered a use-after-free vulnerability in the Linux kernel's CXGB3 driver. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2015-8812)
Xiaofei Rex Guo discovered a timing side channel vulnerability in the Linux Extended Verification Module (EVM). An attacker could use this to affect system integrity. (CVE-2016-2085)
David Herrmann discovered that the Linux kernel incorrectly accounted file descriptors to the original opener for in-flight file descriptors sent over a unix domain socket. A local attacker could use this to cause a denial of service (resource exhaustion). (CVE-2016-2550)
It was discovered that the Linux kernel did not enforce limits on the amount of data allocated to buffer pipes. A local attacker could use this to cause a denial of service (resource exhaustion). (CVE-2016-2847)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 14.04 LTS: linux-image-3.13.0-85-generic 3.13.0-85.129 linux-image-3.13.0-85-generic-lpae 3.13.0-85.129 linux-image-3.13.0-85-lowlatency 3.13.0-85.129 linux-image-3.13.0-85-powerpc-e500 3.13.0-85.129 linux-image-3.13.0-85-powerpc-e500mc 3.13.0-85.129 linux-image-3.13.0-85-powerpc-smp 3.13.0-85.129 linux-image-3.13.0-85-powerpc64-emb 3.13.0-85.129 linux-image-3.13.0-85-powerpc64-smp 3.13.0-85.129
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
References: http://www.ubuntu.com/usn/usn-2946-1 CVE-2015-8812, CVE-2016-2085, CVE-2016-2550, CVE-2016-2847
Package Information: https://launchpad.net/ubuntu/+source/linux/3.13.0-85.129
--NzB8fVQJ5HfG6fxh Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJXBMIHAAoJEC8Jno0AXoH0DewP/38B8wdngB/E4EIcXQpJOa/c CfyS5SK58YG76KC4GoDEcbOCCKFgdZ9s79V7iJZfqNt7slq3dH68LzIqnx6ZFi9S 647IoM1O9+3J9oDkTu6Vfv91domJRrygTjNC0kMB/RA/UXH3XM0pfmA7NmpfbU2N oUm0CiXp215Oxue5jq7nVpW9oru1fS/Qa+VdjSRms+972Qv8rXgYTECpviOBLqEZ aDpRVNjp26kw56ITMo7D3CQDtwjSpsNAeiOtxukceidNTxvST00dyQAJFEadoRHG UDEaqdPd03pcEdLzcAMvT+weHsCaZGa++AR4btcMcV0YUOVcz84VvQ/BhSrOF4X8 IMNwCfmregidmZI7ReiIWEhCi8WVwfNkOsL5HbCVVmP5BDGPAakNbShElyB7atsP MwJzJ/bfrMNkGe72DTOhGwy1hezwvzeIOyVXVoZLWxkoj5pmxGetod5KgQDlvp/8 yu/PhlvL+CkYku3uxKhgr9c4cSnnvsa98meg2W4rh5OEFatIvirzyMuA4ldC/cAs HHK7oU0cU8WgW31hDBYeXwnDWr6bgW3r3gXJIYAqD83ChcWht2JV7b8uDTsNpXL5 BtXWlNnuUT2PnOhWfNomqfmXCqkuz/2FkhaQ+I81OOvuvjb/XMbYgmlUAmJdMkuC hlrY2x0zCq9VzTbhHGAW =rYxw -----END PGP SIGNATURE-----
--NzB8fVQJ5HfG6fxh--
--===============5231525110737275859== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============5231525110737275859==--
|
|
|
|