drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Pufferüberlauf in Libksba
Name: |
Pufferüberlauf in Libksba |
|
ID: |
USN-2427-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 12.04 LTS, Ubuntu 14.04 LTS, Ubuntu 14.10 |
|
Datum: |
Fr, 28. November 2014, 08:39 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9087 |
|
Applikationen: |
The GNU Privacy Guard |
|
Originalnachricht |
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --===============7035406772305741067== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="Eg2qm8iewJ1vxOd7hMV7cbKKx7jt1mpht"
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --Eg2qm8iewJ1vxOd7hMV7cbKKx7jt1mpht Content-Type: text/plain; charset=utf- Content-Transfer-Encoding: quoted-printable
========================================================================== Ubuntu Security Notice USN-2427-1 November 27, 2014
libksba vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.10 - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS
Summary:
Libksba could be made to crash or run programs if it opened a specially crafted file.
Software Description: - libksba: X.509 and CMS support library
Details:
Hanno Böck discovered that Libksba incorrectly handled certain S/MIME messages or ECC based OpenPGP data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 14.10: libksba8 1.3.0-3ubuntu0.14.10.1
Ubuntu 14.04 LTS: libksba8 1.3.0-3ubuntu0.14.04.1
Ubuntu 12.04 LTS: libksba8 1.2.0-2ubuntu0.1
In general, a standard system update will make all the necessary changes.
References: http://www.ubuntu.com/usn/usn-2427-1 CVE-2014-9087
Package Information: https://launchpad.net/ubuntu/+source/libksba/1.3.0-3ubuntu0.14.10.1 https://launchpad.net/ubuntu/+source/libksba/1.3.0-3ubuntu0.14.04.1 https://launchpad.net/ubuntu/+source/libksba/1.2.0-2ubuntu0.1
--Eg2qm8iewJ1vxOd7hMV7cbKKx7jt1mpht Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc"
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJUd4C4AAoJEGVp2FWnRL6Td/kP/3h6d5KqqnT7STURyRmWIK3g YUTDbrWrNhb9Nq0XOsd+84gWoKltCWhx49foxqooyvvSTkLSZKC5eBR20AdU3OcF QmwgZmCrLnghSLvD0dsPg/djr/K1y3scK7XqVu7BDSeAC4tLMhoBW91cW1VN3bFA HBOM9ICVYtq3xzmY0QnIP72a9paTh6Vu+wk7JEx3pl+vdzalMFEEaT0qgUDwiKzy htq/xX6AgBQ06SV5QU0rILpi29lurNTggRTfQXZpYQnpzG7tzyjq0G0XXP0i9r6T rs/6nK8sj/licKpCfGwWw0R4+ErdI6tlFb9F4vajO4hMVhwx6lbgJt9OlWJNN+pT 1ZsyEBcsqjDMzchSVV5AWPnr5rxFgisXh9VnNqGtxKS7oM+Jd2Vb08LlyZuWmlKG WjQhusq9wDB23P8i37KND0qYehVQidaKcpPeTlm1u/YhZ+3VZY8uV/vhfKujJgny qsjiHk98bL8oz7dUEm6vdz8/G55Zqr03Wlmwz9xms3683VFmcgPd29tPDSwzLp2g zmwpogJOfbVjEa9kHip7ujmgUILddLz/kVZbTEUT6Zulc+2EbAsdK/WsYkZql4E5 bmQs2eAFXr/QFovTLx/fjrQIB3sOSFob93XtITXkGmWNLFC1h3C2EaBgmWhM+/wC 7oAN5wck3pjFxH968/JJ =vlbS -----END PGP SIGNATURE-----
--Eg2qm8iewJ1vxOd7hMV7cbKKx7jt1mpht--
--===============7035406772305741067== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============7035406772305741067==--
|
|
|
|