Login
Newsletter
Werbung

Sicherheit: Ausführen beliebiger Kommandos in Linux
Aktuelle Meldungen Distributionen
Name: Ausführen beliebiger Kommandos in Linux
ID: USN-1391-1
Distribution: Ubuntu
Plattformen: Ubuntu 10.10
Datum: Mi, 7. März 2012, 17:33
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0038
Applikationen: Linux

Originalnachricht

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============6272491063110082538==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="------------enig26EC7FC5F3FBBFF7996FD680"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig26EC7FC5F3FBBFF7996FD680
Content-Type: multipart/mixed;
boundary="------------040504060604050205030408"

This is a multi-part message in MIME format.
--------------040504060604050205030408
Content-Type: text/plain; charset=ISO-8859-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1391-1
March 07, 2012

linux-mvl-dove vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 10.10

Summary:

The system could be made to crash or run programs as an administrator.

Software Description:
- linux-mvl-dove: Linux kernel for DOVE

Details:

A flaw was discovered in the XFS filesystem. If a local user mounts a
specially crafted XFS image it could potential execute arbitrary code on
the system.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.10:
linux-image-2.6.32-423-dove 2.6.32-423.42

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.

References:
http://www.ubuntu.com/usn/usn-1391-1
CVE-2012-0038

Package Information:
https://launchpad.net/ubuntu/+source/linux-mvl-dove/2.6.32-423.42


--------------040504060604050205030408
Content-Type: text/plain; charset=UTF-8;
name="Attached Message Part"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="Attached Message Part"


--------------040504060604050205030408--

--------------enig26EC7FC5F3FBBFF7996FD680
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBCgAGBQJPV4ndAAoJEAUvNnAY1cPYFAEP/2Opwy1qpbd1WeNoadQxiQil
e4Z3EtaB7PmH8kYnaPriqMAOUI6DYXaorxAuPQ2gvzCRoLysvt7IsuZSCPNnBFVB
kpQQpvRB5brchU8+bG5vwz687Tco+yaCo51pMArlmEi13MFwhgXtJomjOVVk2Yi9
F9MACdeJXn7J3HJW4DJhTq136Wo0il795DCW5uH1KrfqI4BHSbvMs3yFl62KkGZc
26OXnMbueR12uipAPQ3Ypj1MRUnTY51T1ACW13AQP8KzfGBix9pygWTOd8WM3nIP
gnxrOzwGHloBtUoO/SaLFnCmQeaDnnX6/hI5RhLos1ymRdO+ew8loPSN0NFJ3Wrg
468JANrFqQ60ic7rIw0HAdafruQALO69f7uxkedoBtT5Oq0VBYDHFmZU2zNsD4XS
8bzMLmn15QhKEym8X/ey7NWzSm7FLvzf6jfCHAvr02ed3csiE7QAL2aQ8TCfvf1a
5QKEMXeiHFVrVxJGqdaVnFoG2sc8M6xjdrMXNYAhhi/vjUk7HrIhQNy3q11dfuYm
VKM9sHyVRM8TDZwQNW84Z/Bb/cjBMRTp9Kjdok1IjVpIIf/xDfDN87gZJ/9BE+nm
0kEUkKKcOvrHtObMbahIdpNpgEatXqmH9L1gbAazHNWsbNiptBv8y99Rwq3wY/6b
i6Iwo+b4NeShVD10IKuN
=qico
-----END PGP SIGNATURE-----

--------------enig26EC7FC5F3FBBFF7996FD680--


--===============6272491063110082538==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============6272491063110082538==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung