Login
Newsletter
Werbung

Sicherheit: Pufferüberlauf in Linux
Aktuelle Meldungen Distributionen
Name: Pufferüberlauf in Linux
ID: USN-1920-1
Distribution: Ubuntu
Plattformen: Ubuntu 13.04
Datum: Mi, 31. Juli 2013, 08:14
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2852
Applikationen: Linux

Originalnachricht

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--===============6383286280287694612==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="------------enig378BE052C6DBF4D912CE0D18"

This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enig378BE052C6DBF4D912CE0D18
Content-Type: text/plain; charset=UTF-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-1920-1
July 30, 2013

linux-ti-omap4 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 13.04

Summary:

The system could be made to crash or run programs as an administrator.

Software Description:
- linux-ti-omap4: Linux kernel for OMAP4

Details:

Kees Cook discovered a format string vulnerability in the Broadcom B43
wireless driver for the Linux kernel. A local user could exploit this flaw
to gain administrative privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
linux-image-3.5.0-229-omap4 3.5.0-229.42

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.

References:
http://www.ubuntu.com/usn/usn-1920-1
CVE-2013-2852

Package Information:
https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.5.0-229.42



--------------enig378BE052C6DBF4D912CE0D18
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
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=/7x+
-----END PGP SIGNATURE-----

--------------enig378BE052C6DBF4D912CE0D18--


--===============6383286280287694612==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============6383286280287694612==--
Pro-Linux
Gewinnspiel
Neue Nachrichten
Werbung