Login
Newsletter
Werbung

Sicherheit: Mehrere Probleme in Linux
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in Linux
ID: USN-2283-1
Distribution: Ubuntu
Plattformen: Ubuntu 12.04 LTS
Datum: Do, 17. Juli 2014, 08:37
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0131
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4608
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943
Applikationen: Linux

Originalnachricht

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============4589522090124719880==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature";
boundary="PWGLW355c7f3a08OdGtpUHj6G036R9N9I"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--PWGLW355c7f3a08OdGtpUHj6G036R9N9I
Content-Type: text/plain; charset=UTF-
Content-Transfer-Encoding: quoted-printable

==========================================================================
Ubuntu Security Notice USN-2283-1
July 16, 2014

linux vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 LTS

Summary:

Several security issues were fixed in the kernel.

Software Description:
- linux: Linux kernel

Details:

Sasha Levin reported a flaw in the Linux kernel's point-to-point protocol
(PPP) when used with the Layer Two Tunneling Protocol (L2TP). A local user
could exploit this flaw to gain administrative privileges. (CVE-2014-4943)

Michael S. Tsirkin discovered an information leak in the Linux kernel's
segmentation of skbs when using the zerocopy feature of vhost-net. A local
attacker could exploit this flaw to gain potentially sensitive information
from kernel memory. (CVE-2014-0131)

Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
linux-image-3.2.0-67-generic 3.2.0-67.101
linux-image-3.2.0-67-generic-pae 3.2.0-67.101
linux-image-3.2.0-67-highbank 3.2.0-67.101
linux-image-3.2.0-67-omap 3.2.0-67.101
linux-image-3.2.0-67-powerpc-smp 3.2.0-67.101
linux-image-3.2.0-67-powerpc64-smp 3.2.0-67.101
linux-image-3.2.0-67-virtual 3.2.0-67.101

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.

References:
http://www.ubuntu.com/usn/usn-2283-1
CVE-2014-0131, CVE-2014-4608, CVE-2014-4943

Package Information:
https://launchpad.net/ubuntu/+source/linux/3.2.0-67.101



--PWGLW355c7f3a08OdGtpUHj6G036R9N9I
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=kagq
-----END PGP SIGNATURE-----

--PWGLW355c7f3a08OdGtpUHj6G036R9N9I--


--===============4589522090124719880==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

--===============4589522090124719880==--
Pro-Linux
Pro-Linux @Facebook
Neue Nachrichten
Werbung