[월:] 2016년 11월

USN-3126-1: Linux kernel vulnerabilities Ubuntu Security Notice USN-3126-1 11th November, 2016 linux vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 LTS Summary Several security issues were fixed in the kernel. Software description linux – Linux kernel Details Ondrej Kozina discovered that the keyring interface in the Linux kernelcontained a buffer overflow when displaying timeout events via the/proc/keys interface. A local attacker could use this to cause a denial ofservice (system crash). (CVE-2016-7042) Dmitry Vyukov discovered a use-after-free vulnerability during errorprocessing in the recvmmsg(2) implementation in the Linux kernel. A remoteattacker could use this to cause a denial of service (system crash) orpossibly execute arbitrary code. (CVE-2016-7117) Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 12.04 LTS: linux-image-3.2.0-115-generic 3.2.0-115.157 linux-image-3.2.0-115-powerpc-smp 3.2.0-115.157 linux-image-powerpc 3.2.0.115.131 linux-image-3.2.0-115-virtual 3.2.0-115.157 linux-image-3.2.0-115-highbank [ more… ]

USN-3126-2: Linux kernel (OMAP4) vulnerabilities Ubuntu Security Notice USN-3126-2 11th November, 2016 linux-ti-omap4 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 LTS Summary Several security issues were fixed in the kernel. Software description linux-ti-omap4 – Linux kernel for OMAP4 Details Ondrej Kozina discovered that the keyring interface in the Linux kernelcontained a buffer overflow when displaying timeout events via the/proc/keys interface. A local attacker could use this to cause a denial ofservice (system crash). (CVE-2016-7042) Dmitry Vyukov discovered a use-after-free vulnerability during errorprocessing in the recvmmsg(2) implementation in the Linux kernel. A remoteattacker could use this to cause a denial of service (system crash) orpossibly execute arbitrary code. (CVE-2016-7117) Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 12.04 LTS: linux-image-omap4 3.2.0.1493.88 linux-image-3.2.0-1493-omap4 3.2.0-1493.120 To update [ more… ]