-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/
iQIcBAEBCgAGBQJQyVLvAAoJEAUvNnAY1cPY4wUP/2kGRyoQVuZddrDE5uwuGXmQ
On9gBYJkd2ygbLCVhGNpgukbsRXVFFyhwHlHKwoN/sa00c8raEYG9c53eY+0X7lb
tVRqxbwt+/37bs4sUSXDA23jZ3rA+p7tBLFGiPRwCeBK6gbQVUOLMj5HpJJ2Nnb4
gDxDLYxqDmHSIZofZuxHdeTECYwSgjC8++onASEfy6daK6UksGQMnxouFBnrJcfM
e6Q26Y8REiecOxyNIfOw2kMu8RK85OsT5Zv/e9KBMpPB3eDZfg1+MMi8W85PRbQo
zAqBx/bHJN5v08U3hCUMegnFZLMsTAp78LU2uuyT7dtur9cWrsu3ZqIZLLRevUZY
TZvcjyp04uJaDBWowbf7i9bM9435jq8YxdYZ+FjW6trrXHysfKnPgROszOzYgCC6
St7AINkyO34CSVY3erqHtKhz0zw4RNI+BgOVxwbLzJO9kBArvMO+sqi8Hb42cMwd
AT0t7a7M8Vty+3dFf70WRXh8DPvnGqduR+nU9gBdASns+eZeDfWb99Hu6110lWmk
DfCACt6wTXJ8EYLexeI0MdICxq5JW7NBBG0bbaNgSIAZLH1lO9QOeOwg1YuRDeRB
eTRv7NbuIr/vhfhKZ7xVXS93zq+kJt3RQkG9JQXtixPknN+UrOomz8mMOn53wcQy
8T2lTH9i49m3eJuWCuZz
=ldNI
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1664-1
December 13, 2012
linux-ec2 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 10.04 LTS
Summary:
The system's firewall could be bypassed by a remote attacker.
Software Description:
- linux-ec2: Linux kernel for EC2
Details:
Zhang Zuotao discovered a bug in the Linux kernel's handling of overlapping
fragments in ipv6. A remote attacker could exploit this flaw to bypass
firewalls and initial new network connections that should have been blocked
by the firewall.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 10.04 LTS:
linux-image-2.6.32-350-ec2 2.6.32-350.58
After a standard system update you need to reboot your computer to make
all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1664-1
CVE-2012-4444
Package Information:
https://launchpad.net/ubuntu/+source/linux-ec2/2.6.32-350.58
No comments:
Post a Comment