[월:] 2017년 03월

USN-3240-1: NVIDIA graphics vulnerability Ubuntu Security Notice USN-3240-1 20th March, 2017 nvidia-graphics-drivers-304, nvidia-graphics-drivers-340, nvidia-graphics-drivers-375 vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary NVIDIA graphics drivers could be made to crash under certain conditions. Software description nvidia-graphics-drivers-304 – NVIDIA binary X.Org driver nvidia-graphics-drivers-340 – NVIDIA binary X.Org driver nvidia-graphics-drivers-375 – NVIDIA binary X.Org driver Details It was discovered that the NVIDIA graphics drivers contained a flaw in thekernel mode layer. A local attacker could use this issue to cause a denial ofservice. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 16.10: nvidia-367 375.39-0ubuntu0.16.10.1 nvidia-375 375.39-0ubuntu0.16.10.1 nvidia-331 340.102-0ubuntu0.16.10.1 nvidia-current 304.135-0ubuntu0.16.10.1 nvidia-340-updates 340.102-0ubuntu0.16.10.1 nvidia-340 340.102-0ubuntu0.16.10.1 nvidia-331-updates 340.102-0ubuntu0.16.10.1 nvidia-304-updates 304.135-0ubuntu0.16.10.1 nvidia-304 304.135-0ubuntu0.16.10.1 Ubuntu 16.04 LTS: nvidia-367 375.39-0ubuntu0.16.04.1 nvidia-375 375.39-0ubuntu0.16.04.1 [ more… ]

USN-3239-1: GNU C Library vulnerabilities Ubuntu Security Notice USN-3239-1 20th March, 2017 eglibc, glibc vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.04 LTS Ubuntu 14.04 LTS Ubuntu 12.04 LTS Summary Several security issues were fixed in the GNU C Library. Software description eglibc – GNU C Library glibc – GNU C Library Details It was discovered that the GNU C Library incorrectly handled thestrxfrm() function. An attacker could use this issue to cause a denialof service or possibly execute arbitrary code. This issue only affectedUbuntu 12.04 LTS and Ubuntu 14.04 LTS. (CVE-2015-8982) It was discovered that an integer overflow existed in the_IO_wstr_overflow() function of the GNU C Library. An attacker coulduse this to cause a denial of service or possibly execute arbitrarycode. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04LTS. (CVE-2015-8983) It [ more… ]

USN-3173-2: NVIDIA graphics drivers vulnerability Ubuntu Security Notice USN-3173-2 20th March, 2017 nvidia-graphics-drivers-375 vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary NVIDIA graphics drivers could be made to crash under certain conditions. Software description nvidia-graphics-drivers-375 – NVIDIA binary X.Org driver Details USN-3173-1 fixed a vulnerability in nvidia-graphics-drivers-304 andnvidia-graphics-drivers-340. This update provides the corresponding update fornvidia-graphics-drivers-375. Original advisory details: It was discovered that the NVIDIA graphics drivers contained a flaw in the kernel mode layer. A local attacker could use this issue to cause a denial of service. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 16.10: nvidia-367 375.39-0ubuntu0.16.10.1 nvidia-375 375.39-0ubuntu0.16.10.1 Ubuntu 16.04 LTS: nvidia-367 375.39-0ubuntu0.16.04.1 nvidia-375 375.39-0ubuntu0.16.04.1 Ubuntu 14.04 LTS: nvidia-367 375.39-0ubuntu0.14.04.1 nvidia-375 375.39-0ubuntu0.14.04.1 To update your system, [ more… ]