drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Ausführen von Code mit höheren Privilegien in Linux (Aktualisierung)
Name: |
Ausführen von Code mit höheren Privilegien in Linux (Aktualisierung) |
|
ID: |
USN-2858-3 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 15.10 |
|
Datum: |
Di, 5. Januar 2016, 22:56 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8660 |
|
Applikationen: |
Linux |
|
Update von: |
Ausführen von Code mit höheren Privilegien in Linux |
|
Originalnachricht |
--===============2407269221730820526== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="tqSMaTz1cCSspCQ4" Content-Disposition: inline
--tqSMaTz1cCSspCQ4 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
========================================================================== Ubuntu Security Notice USN-2858-3 January 05, 2016
linux-raspi2 vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 15.10
Summary:
The system could be made to run programs as an administrator.
Software Description: - linux-raspi2: Linux kernel for Raspberry Pi 2
Details:
Nathan Williams discovered that overlayfs in the Linux kernel incorrectly handled setattr operations. A local unprivileged attacker could use this to create files with administrative permission attributes and execute arbitrary code with elevated privileges.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 15.10: linux-image-4.2.0-1018-raspi2 4.2.0-1018.25
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
References: http://www.ubuntu.com/usn/usn-2858-3 http://www.ubuntu.com/usn/usn-2858-1 CVE-2015-8660
Package Information: https://launchpad.net/ubuntu/+source/linux-raspi2/4.2.0-1018.25
--tqSMaTz1cCSspCQ4 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJWjDh5AAoJEC8Jno0AXoH0vGcP/i1wcc+FHI61Hg04jyQ9ozpS oFYWorgrQu/2Lt2IlmX5XQxj0iz4M0Jku7ApEZgQvCkBaDB5261WBH/oDCSdDyVX QsIM7mdpRUxEB/8Np6wmvTAs4Q8NZ90mM8oKHliCvDfKEJ5jt/RmVWc7TIsb6Cdw jt8IegI9aXhBSpwzNIW4Y1geN8K58/PbDk4jnVWdVt9bhq2RBKgqvUpd9qXC2HHY qxlp6xddx1jj8Y4gzgmnU5U5ZxddzDvTIGw65OKbL/lin9KxvHJ2ttCQRtLxQBn3 PLQs1YZCvJiTDNcwgGx0EHbhh0whTH8EGjkvUDEmn9vdL/VdXcnzfNN9dBYnF7zX R4ofz0uZjvHjPIPypQ4zijHkxHYWGRHdMDqAih+bcWAqHFnk+COvOunO9iWlb0bp fmqeBSEFFBb6EM6AAt5trDwEt93i7/Da/FslK4QZSqgY4j4jw+sQzUAfjyXQypbr 8S/Lvg/MupjcP8sjcycOEh/bgyfGMRIjJLjvUQj6L2hTeREeH3700YXuy0acHH9q bmtXAqpyycB7ijI5+BdD4Pn/61ukDvzbLlhsnPFTQ1T8fZbB8CneCgAVe8xIbfTg O9f9ukMQcpRTZTYNGL7CdjZRDjHd+cMjhLpkixOHBsxTvD3+qlFwDHVtIfTj1O6s 9mv3n33I1hd30q60OPsl =hgF9 -----END PGP SIGNATURE-----
--tqSMaTz1cCSspCQ4--
--===============2407269221730820526== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============2407269221730820526==--
|
|
|
|