-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/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=5Udh
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2134-1
March 07, 2014
linux-ti-omap4 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux-ti-omap4: Linux kernel for OMAP4
Details:
Mathy Vanhoef discovered an error in the the way the ath9k driver was
handling the BSSID masking. A remote attacker could exploit this error to
discover the original MAC address after a spoofing atack. (CVE-2013-4579)
Andrew Honig reported an error in the Linux Kernel's Kernel Virtual Machine
(KVM) VAPIC synchronization operation. A local user could exploit this flaw
to gain privileges or cause a denial of service (system crash).
(CVE-2013-6368)
halfdog reported an error in the AMD K7 and K8 platform support in the
Linux kernel. An unprivileged local user could exploit this flaw on AMD
based systems to cause a denial of service (task kill) or possibly gain
privileges via a crafted application. (CVE-2014-1438)
An information leak was discovered in the Linux kernel's hamradio YAM
driver for AX.25 packet radio. A local user with the CAP_NET_ADMIN
capability could exploit this flaw to obtain sensitive information from
kernel memory. (CVE-2014-1446)
Matthew Thode reported a denial of service vulnerability in the Linux
kernel when SELinux support is enabled. A local user with the CAP_MAC_ADMIN
capability (and the SELinux mac_admin permission if running in enforcing
mode) could exploit this flaw to cause a denial of service (kernel crash).
(CVE-2014-1874)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
linux-image-3.2.0-1444-omap4 3.2.0-1444.63
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2134-1
CVE-2013-4579, CVE-2013-6368, CVE-2014-1438, CVE-2014-1446,
CVE-2014-1874
Package Information:
https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.2.0-1444.63
No comments:
Post a Comment