drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in Linux (Aktualisierung)
Name: |
Mehrere Probleme in Linux (Aktualisierung) |
|
ID: |
USN-3342-2 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 16.04 LTS |
|
Datum: |
Fr, 30. Juni 2017, 00:51 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7294
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5577
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9075
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8890
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7374
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9077
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9076
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9074
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000363
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9242 |
|
Applikationen: |
Linux |
|
Update von: |
Mehrere Probleme in Linux |
|
Originalnachricht |
--===============2156898458987576078== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="7fwXp2o0gOrkU5lS" Content-Disposition: inline
--7fwXp2o0gOrkU5lS Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
========================================================================== Ubuntu Security Notice USN-3342-2 June 29, 2017
linux-hwe vulnerabilities ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 16.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description: - linux-hwe: Linux hardware enablement (HWE) kernel
Details:
USN-3342-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.10 for Ubuntu 16.04 LTS.
USN-3333-1 fixed a vulnerability in the Linux kernel. However, that fix introduced regressions for some Java applications. This update addresses the issue. We apologize for the inconvenience.
It was discovered that a use-after-free flaw existed in the filesystem encryption subsystem in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-7374)
Roee Hay discovered that the parallel port printer driver in the Linux kernel did not properly bounds check passed arguments. A local attacker with write access to the kernel command line arguments could use this to execute arbitrary code. (CVE-2017-1000363)
Ingo Molnar discovered that the VideoCore DRM driver in the Linux kernel did not return an error after detecting certain overflows. A local attacker could exploit this issue to cause a denial of service (OOPS). (CVE-2017-5577)
Li Qiang discovered that an integer overflow vulnerability existed in the Direct Rendering Manager (DRM) driver for VMWare devices in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-7294)
It was discovered that a double-free vulnerability existed in the IPv4 stack of the Linux kernel. An attacker could use this to cause a denial of service (system crash). (CVE-2017-8890)
Andrey Konovalov discovered an IPv6 out-of-bounds read error in the Linux kernel's IPv6 stack. A local attacker could cause a denial of service or potentially other unspecified problems. (CVE-2017-9074)
Andrey Konovalov discovered a flaw in the handling of inheritance in the Linux kernel's IPv6 stack. A local user could exploit this issue to cause a denial of service or possibly other unspecified problems. (CVE-2017-9075)
It was discovered that dccp v6 in the Linux kernel mishandled inheritance. A local attacker could exploit this issue to cause a denial of service or potentially other unspecified problems. (CVE-2017-9076)
It was discovered that the transmission control protocol (tcp) v6 in the Linux kernel mishandled inheritance. A local attacker could exploit this issue to cause a denial of service or potentially other unspecified problems. (CVE-2017-9077)
It was discovered that the IPv6 stack in the Linux kernel was performing its over write consistency check after the data was actually overwritten. A local attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2017-9242)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04 LTS: linux-image-4.8.0-58-generic 4.8.0-58.63~16.04.1 linux-image-4.8.0-58-generic-lpae 4.8.0-58.63~16.04.1 linux-image-4.8.0-58-lowlatency 4.8.0-58.63~16.04.1 linux-image-generic-hwe-16.04 4.8.0.58.29 linux-image-generic-lpae-hwe-16.04 4.8.0.58.29 linux-image-lowlatency-hwe-16.04 4.8.0.58.29
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
References: https://www.ubuntu.com/usn/usn-3342-2 https://www.ubuntu.com/usn/usn-3342-1 https://www.ubuntu.com/usn/usn-3333-1 https://launchpad.net/bugs/1699772 CVE-2017-1000363, CVE-2017-5577, CVE-2017-7294, CVE-2017-7374, CVE-2017-8890, CVE-2017-9074, CVE-2017-9075, CVE-2017-9076, CVE-2017-9077, CVE-2017-9242
Package Information: https://launchpad.net/ubuntu/+source/linux-hwe/4.8.0-58.63~16.04.1
--7fwXp2o0gOrkU5lS Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBCgAGBQJZVUn/AAoJEC8Jno0AXoH0CWEP/j970DfqZSVdxMDmh5Ghalnc AMTAtt2vjS7H2jqugotCmjZHFYba+g3qVHbTiq8brVhqpabLVJ8BnyFHF2V2Ht+m wkQOG4f+jDB0jPp0kqpV8SSt7DQlYopa50pVMsCMKEVZfaoC1RBDv3OJgWYxeiBg C2O9eVslWbqz4+S4RtJVxM6J3GEyt6tCsgelGP4oSpf7L6KVzdkAMMQrpwxB4UeB pb9b7uwM+EmFFM1WWlC/6FFkNrM5hyhozAJZcF1/rReTECMfDhVrcotn5NZhc0TC cMFix17mX+S3Lo1yJfs5h1ouT+GfWJgrfA14pmqpib4Vx79LqOjZ0GEB64VANNr3 2JSX0zrU9ErjogHXdSpnCZ73QJU2IzLnJsLAQ4a3hynkDlISkKIY94mpZcV2Q7eY x5s/w0bTsowEA06psMHgYlfFnHR+3+aJ3b4vx7Uwq9jfsUiqiW9pDbgU4r5gN0an xiU6nI88gtMmyrVd1+GUnrCiyKb2BqnppIRACLcz4RSFClZrJ6Vr6zK7Z43dxMef hnE5kDnfFWUrTkw8Q6tsvZdevMnnF+VvBGOHzneDiLan5+0TeWP8j4nXAfwj/dZP eGtWSEROGRz99+UVsucxpuDCLczKMTGx133tl6NDmkKAWVNYb9ciGZD6VW5zdHdu uOSk/1sirvrd7j4rEeQb =zg9f -----END PGP SIGNATURE-----
--7fwXp2o0gOrkU5lS--
--===============2156898458987576078== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
--===============2156898458987576078==--
|
|
|
|