drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Preisgabe von Informationen in Linux
Name: |
Preisgabe von Informationen in Linux |
|
ID: |
USN-3594-1 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 14.04 LTS |
|
Datum: |
Fr, 9. März 2018, 14:29 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5715 |
|
Applikationen: |
Linux |
|
Originalnachricht |
--===============7421481197269354899== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="pAwQNkOnpTn9IO2O" Content-Disposition: inline
--pAwQNkOnpTn9IO2O Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
========================================================================== Ubuntu Security Notice USN-3594-1 March 09, 2018
linux vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 LTS
Summary:
The system could be made to expose sensitive information.
Software Description: - linux: Linux kernel
Details:
USN-3542-1 mitigated CVE-2017-5715 (Spectre Variant 2) for the amd64 architecture in Ubuntu 14.04 LTS. This update provides the compiler-based retpoline kernel mitigation for the amd64 and i386 architectures. Original advisory details:
Jann Horn discovered that microprocessors utilizing speculative execution and branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Spectre. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5715)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 14.04 LTS: linux-image-3.13.0-143-generic 3.13.0-143.192 linux-image-3.13.0-143-generic-lpae 3.13.0-143.192 linux-image-3.13.0-143-lowlatency 3.13.0-143.192 linux-image-generic 3.13.0.143.153 linux-image-generic-lpae 3.13.0.143.153 linux-image-lowlatency 3.13.0.143.153
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
References: https://usn.ubuntu.com/usn/usn-3594-1 CVE-2017-5715, https://usn.ubuntu.com/3542-1/
Package Information: https://launchpad.net/ubuntu/+source/linux/3.13.0-143.192
--pAwQNkOnpTn9IO2O Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEEpgY7tWAjCaQ8jrvULwmejQBegfQFAlqiUzIACgkQLwmejQBe gfTRww//UyJFWa4kkwntkKjIU9RBi7vScyMvjjkrQ4ZuMEOyfcspS63nN2Y/Zt/M wKmZ81m5fUD34B9sFEtdLlp2dAUzGIbUhTO+6csfAwGv3KZH5HZkROdQnrtdBwb9 8rkWJBEOf1tFxv6IQQwxPdvuDA9tl+u38LKVbwqp+k1kPGNyeUI15YZDQB1II4pG Ro4vgO3L1bo0DnfMvaK2puTmshayBzo2Hcg7B86mVI+Ip+w10AqEqIzspNiAEKUe d/n6ZQkt/rWWoptB0P+mWQ6rjxPVdNb2ljTTT+ZxSr/TVreFVDfInovKjDNUDkwc 5tNccU5h8ZboqCF4SK6vjxCILemNDjrdWDwqVvFd0gMFpXvoGAcJb0HgCuvlaJNC jxFrs1oLV/NNWszOmbbdy6O94yqm+/P8vD3ZWEE5guUtfavoYikI4teTb7KbDv7y nutKMv9VDZyPjt40TVQ1Xn13J4SpZoKHGP8lkr/VbxZ4w8xLdwEGOa56ghQuaacA X2WHnvYPUqr0EgR+cEyqbz3ewPDmRdOp+U4292LjWHpKMlV8GrFRVpp3cPMhdTum vjnELNx7bnXJhAvS7f2Ef7WJ2+yEFtjpzOEDPoX9feFpJySHVxmAJBmhRu/SkiFC Jgatb+CN6Bc2xLogiTsp6bwqKX66TqCfj0YjoL/VhywfFOWHSKM= =WnK5 -----END PGP SIGNATURE-----
--pAwQNkOnpTn9IO2O--
--===============7421481197269354899== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
|
|
|
|