drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in Linux
Name: |
Mehrere Probleme in Linux |
|
ID: |
USN-2283-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 12.04 LTS |
|
Datum: |
Do, 17. Juli 2014, 08:37 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0131
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4608
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4943 |
|
Applikationen: |
Linux |
|
Originalnachricht |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============4589522090124719880== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="PWGLW355c7f3a08OdGtpUHj6G036R9N9I"
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --PWGLW355c7f3a08OdGtpUHj6G036R9N9I Content-Type: text/plain; charset=UTF- Content-Transfer-Encoding: quoted-printable
========================================================================== Ubuntu Security Notice USN-2283-1 July 16, 2014
linux vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description: - linux: Linux kernel
Details:
Sasha Levin reported a flaw in the Linux kernel's point-to-point protocol (PPP) when used with the Layer Two Tunneling Protocol (L2TP). A local user could exploit this flaw to gain administrative privileges. (CVE-2014-4943)
Michael S. Tsirkin discovered an information leak in the Linux kernel's segmentation of skbs when using the zerocopy feature of vhost-net. A local attacker could exploit this flaw to gain potentially sensitive information from kernel memory. (CVE-2014-0131)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the Linux kernel. An attacker could exploit this flaw to cause a denial of service (memory corruption or OOPS). (CVE-2014-4608)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 12.04 LTS: linux-image-3.2.0-67-generic 3.2.0-67.101 linux-image-3.2.0-67-generic-pae 3.2.0-67.101 linux-image-3.2.0-67-highbank 3.2.0-67.101 linux-image-3.2.0-67-omap 3.2.0-67.101 linux-image-3.2.0-67-powerpc-smp 3.2.0-67.101 linux-image-3.2.0-67-powerpc64-smp 3.2.0-67.101 linux-image-3.2.0-67-virtual 3.2.0-67.101
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well.
References: http://www.ubuntu.com/usn/usn-2283-1 CVE-2014-0131, CVE-2014-4608, CVE-2014-4943
Package Information: https://launchpad.net/ubuntu/+source/linux/3.2.0-67.101
--PWGLW355c7f3a08OdGtpUHj6G036R9N9I Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJTxy4lAAoJEAUvNnAY1cPYB/QP/iDT4vEbZ9IhI4R0P8kA4atl lHaldaZhJNl9oe/3muKu37tLkInYA2QgJ4wR97NL1WTWPUGAx9aIwsKprQdhFNW1 S7N06yTwj0XLgQawb21InEd3A8Q3bMUdoaNqvjaruD4ljsc8lsXoflx0p4el2Kxd ix4Jk/qjInZRlRobQynu9Tf+uqUQlLnazHhn7qxySeZ5t+hzKz8rcIOyG7C8Hb3i rkEDKo5KUBXV2klHyvbniFIisfAbftu291g1UiZ1Z4izqRK4P1kr8K4skXmYQgLf WYZyvzuokbmZZ7C/0Qotk2qVkG3UqYZ45HT5w0HrNGgDp37yUWYufEbr6P0AXEwZ LGHXDLeJzBuxa/CfSYzoNKm3aMzYvqR9/6UY91Is2+FZCSnELX6kNuFAfihy2pjW s8Pwz7NEQrPhARMxpGsA60E8uI8vrAKxS0QHtq4rVGNzjp//2J1s7d2jNFbnv4n1 R/Wi3VHPKdO7ghbNlyy5ImobEOPLZhh8aRpPFp6KLCkxELYAQve4x1WedUd2gYcE iWVRre2gWNu/tGFRvPy0ul1XINhz2IpcT+cOPP2Nm9Ejy/mjNP1wQwQqZ0AeOSKM Q2AgBzX6ZILk6u998RJ/pzaG0Vx6KUYico/AhSuUwi9FaDLQM0bpryIpLTaDaCB7 B0ZFSFMB6i6HstEQXjQ/ =kagq -----END PGP SIGNATURE-----
--PWGLW355c7f3a08OdGtpUHj6G036R9N9I--
--===============4589522090124719880== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============4589522090124719880==--
|
|
|
|