[USN-1920-1] Linux kernel (OMAP4) vulnerability

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iQIcBAEBCgAGBQJR+D/lAAoJEAUvNnAY1cPYtCwQAJitfFRSVgOV9ByTJYWdqy6/
FN5EdfTXs5JYnjwi8xlk75t0Fnnp77P7AfbvA4gC3opCyLjDxOT1VcCw1M6LDUwx
zyYUmYVYv79VEtiYju55g9twaLg8oZN0A9OR82FiMChYuBC8wvNkgao4k2aBKzeL
Rw4CElmHb0uJOTE0S45FiaaTCjwY5GEtUeQ8eOj+40XKiKN6tVEg5akrQW6lKzpf
S1aHbv2ayD4lcDr6rIotykI3RINL3fI8THX6DNuX1tXjIizO5cPUHw6Z4PIhRrp3
2ssieDVDMLXbR7SiDOmW4v/6gd3d/HnDIdKHa6Wkqgy60f+mqgg4WKMxWiPEXawq
unO30FKfKRkehtnNX+ZTdeNK3k8qW6MtBMCHswmGqxHbaz1JtzaFeahdVV3I9Mzs
8+tQGLxXPFp685ka03J1R3KErUrWdEnsf93e1OxCpy/s++ggVO++YFPgaiQEe+pA
OesvHBP46KMS1zGMZPPTbQK2+i9erzFH9uO8+i0iL9Yk66NG1BfMmymyjKjkUl8A
3zhhO3hWrdfV03HCW6jKw8M4AwJ69uXD2Ljj8N0muLmHylbaA+glFkx/B5SloT9r
7oScDC7jnz5CEA0gWPWdtGLeLxK0MdoaJ9qWwDPe85ovBop4TKscvgGBloGXPZfo
E45uKcck8iMa6EB92v76
=/7x+
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-1920-1
July 30, 2013

linux-ti-omap4 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 13.04

Summary:

The system could be made to crash or run programs as an administrator.

Software Description:
- linux-ti-omap4: Linux kernel for OMAP4

Details:

Kees Cook discovered a format string vulnerability in the Broadcom B43
wireless driver for the Linux kernel. A local user could exploit this flaw
to gain administrative privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.04:
linux-image-3.5.0-229-omap4 3.5.0-229.42

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.

References:
http://www.ubuntu.com/usn/usn-1920-1
CVE-2013-2852

Package Information:
https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.5.0-229.42