SECURITY

USN-3910-2: Linux kernel (Xenial HWE) vulnerabilities linux-lts-xenial, linux-aws vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 LTS Summary Several security issues were fixed in the Linux kernel. Software Description linux-aws – Linux kernel for Amazon Web Services (AWS) systems linux-lts-xenial – Linux hardware enablement kernel from Xenial for Trusty Details USN-3910-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. It was discovered that the f2fs filesystem implementation in the Linux kernel did not handle the noflush_merge mount option correctly. An attacker could use this to cause a denial of service (system crash). (CVE-2017-18241) It was discovered that the procfs filesystem did not properly handle processes mapping some memory elements onto files. [ more… ]

USN-3909-1: libvirt vulnerability libvirt vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary libvirt could be made to crash under certain conditions. Software Description libvirt – Libvirt virtualization toolkit Details It was discovered that libvirt incorrectly handled waiting for certain agent events. An attacker inside a guest could possibly use this issue to cause libvirtd to stop responding, resulting in a denial of service. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10 libvirt-clients – 4.6.0-2ubuntu3.4 libvirt-daemon – 4.6.0-2ubuntu3.4 libvirt0 – 4.6.0-2ubuntu3.4 Ubuntu 18.04 LTS libvirt-clients – 4.0.0-1ubuntu8.8 libvirt-daemon – 4.0.0-1ubuntu8.8 libvirt0 – 4.0.0-1ubuntu8.8 Ubuntu 16.04 LTS libvirt-bin – 1.3.1-1ubuntu10.25 libvirt0 – 1.3.1-1ubuntu10.25 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system update you need [ more… ]

USN-3908-2: Linux kernel (Trusty HWE) vulnerability linux-lts-trusty vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 ESM Summary The system could be made to run programs as an administrator. Software Description linux-lts-trusty – Linux hardware enablement kernel from Trusty for Precise ESM Details USN-3908-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 ESM. Jann Horn discovered a race condition in the fork() system call in the Linux kernel. A local attacker could use this to gain access to services that cache authorizations. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM linux-image-3.13.0-166-generic – 3.13.0-166.216~precise1 linux-image-3.13.0-166-generic-lpae – 3.13.0-166.216~precise1 linux-image-3.13.0-166-lowlatency – 3.13.0-166.216~precise1 linux-image-generic-lpae-lts-trusty – 3.13.0.166.156 [ more… ]