CentOS Errata and Security Advisory 2014:1893 Important
Upstream details at : https://rhn.redhat.com/errata/RHSA-2014-1893.html
The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )
i386:
b0d5d2c56dc2794ccd036623672af58746d121b5341744c2f7c16b30120faa5c libXfont-1.2.2-1.0.6.el5_11.i386.rpm
000738dd0bf9934918d680b769b46d1154bdebd5db64d6c14d84e6ec1880ecb6 libXfont-devel-1.2.2-1.0.6.el5_11.i386.rpm
x86_64:
b0d5d2c56dc2794ccd036623672af58746d121b5341744c2f7c16b30120faa5c libXfont-1.2.2-1.0.6.el5_11.i386.rpm
c85c8a5f09ccfc2825a5c181b43d9934cddc9b8be6e3d98389bd3d2cf9051134 libXfont-1.2.2-1.0.6.el5_11.x86_64.rpm
000738dd0bf9934918d680b769b46d1154bdebd5db64d6c14d84e6ec1880ecb6 libXfont-devel-1.2.2-1.0.6.el5_11.i386.rpm
7d1d9ce7ed17eb29cf611ec4c643622addcb88051a2ff3c81204b36683d33dd2 libXfont-devel-1.2.2-1.0.6.el5_11.x86_64.rpm
Source:
b07fd5437a25237fafb50d381d56adac6e3bedaf9cb731aecc3e3366f6f594bd libXfont-1.2.2-1.0.6.el5_11.src.rpm
--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos@irc.freenode.net
_______________________________________________
CentOS-announce mailing list
CentOS-announce@centos.org
http://lists.centos.org/mailman/listinfo/centos-announce
Tuesday, November 25, 2014
Monday, November 24, 2014
[USN-2421-1] Linux kernel vulnerabilities
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=S1cK
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2421-1
November 25, 2014
linux vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.10
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux: Linux kernel
Details:
A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual
Machine) subsystem handles the CR4 control register at VM entry on Intel
processors. A local host OS user can exploit this to cause a denial of
service (kill arbitrary processes, or system disruption) by leveraging
/dev/kvm access. (CVE-2014-3690)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.10:
linux-image-3.16.0-25-generic 3.16.0-25.33
linux-image-3.16.0-25-generic-lpae 3.16.0-25.33
linux-image-3.16.0-25-lowlatency 3.16.0-25.33
linux-image-3.16.0-25-powerpc-e500mc 3.16.0-25.33
linux-image-3.16.0-25-powerpc-smp 3.16.0-25.33
linux-image-3.16.0-25-powerpc64-emb 3.16.0-25.33
linux-image-3.16.0-25-powerpc64-smp 3.16.0-25.33
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2421-1
CVE-2014-3690, CVE-2014-4608, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux/3.16.0-25.33
Version: GnuPG v1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=S1cK
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2421-1
November 25, 2014
linux vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.10
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux: Linux kernel
Details:
A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual
Machine) subsystem handles the CR4 control register at VM entry on Intel
processors. A local host OS user can exploit this to cause a denial of
service (kill arbitrary processes, or system disruption) by leveraging
/dev/kvm access. (CVE-2014-3690)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.10:
linux-image-3.16.0-25-generic 3.16.0-25.33
linux-image-3.16.0-25-generic-lpae 3.16.0-25.33
linux-image-3.16.0-25-lowlatency 3.16.0-25.33
linux-image-3.16.0-25-powerpc-e500mc 3.16.0-25.33
linux-image-3.16.0-25-powerpc-smp 3.16.0-25.33
linux-image-3.16.0-25-powerpc64-emb 3.16.0-25.33
linux-image-3.16.0-25-powerpc64-smp 3.16.0-25.33
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2421-1
CVE-2014-3690, CVE-2014-4608, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux/3.16.0-25.33
[USN-2420-1] Linux kernel vulnerabilities
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=dWHL
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2420-1
November 25, 2014
linux vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux: Linux kernel
Details:
A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual
Machine) subsystem handles the CR4 control register at VM entry on Intel
processors. A local host OS user can exploit this to cause a denial of
service (kill arbitrary processes, or system disruption) by leveraging
/dev/kvm access. (CVE-2014-3690)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
Andy Lutomirski discovered a flaw in how the Linux kernel handles
pivot_root when used with a chroot directory. A local user could exploit
this flaw to cause a denial of service (mount-tree loop). (CVE-2014-7970)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.04 LTS:
linux-image-3.13.0-40-generic 3.13.0-40.69
linux-image-3.13.0-40-generic-lpae 3.13.0-40.69
linux-image-3.13.0-40-lowlatency 3.13.0-40.69
linux-image-3.13.0-40-powerpc-e500 3.13.0-40.69
linux-image-3.13.0-40-powerpc-e500mc 3.13.0-40.69
linux-image-3.13.0-40-powerpc-smp 3.13.0-40.69
linux-image-3.13.0-40-powerpc64-emb 3.13.0-40.69
linux-image-3.13.0-40-powerpc64-smp 3.13.0-40.69
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2420-1
CVE-2014-3690, CVE-2014-4608, CVE-2014-7970, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux/3.13.0-40.69
Version: GnuPG v1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=dWHL
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2420-1
November 25, 2014
linux vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux: Linux kernel
Details:
A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual
Machine) subsystem handles the CR4 control register at VM entry on Intel
processors. A local host OS user can exploit this to cause a denial of
service (kill arbitrary processes, or system disruption) by leveraging
/dev/kvm access. (CVE-2014-3690)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
Andy Lutomirski discovered a flaw in how the Linux kernel handles
pivot_root when used with a chroot directory. A local user could exploit
this flaw to cause a denial of service (mount-tree loop). (CVE-2014-7970)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.04 LTS:
linux-image-3.13.0-40-generic 3.13.0-40.69
linux-image-3.13.0-40-generic-lpae 3.13.0-40.69
linux-image-3.13.0-40-lowlatency 3.13.0-40.69
linux-image-3.13.0-40-powerpc-e500 3.13.0-40.69
linux-image-3.13.0-40-powerpc-e500mc 3.13.0-40.69
linux-image-3.13.0-40-powerpc-smp 3.13.0-40.69
linux-image-3.13.0-40-powerpc64-emb 3.13.0-40.69
linux-image-3.13.0-40-powerpc64-smp 3.13.0-40.69
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2420-1
CVE-2014-3690, CVE-2014-4608, CVE-2014-7970, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux/3.13.0-40.69
[USN-2419-1] Linux kernel (Trusty HWE) vulnerabilities
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=QBKT
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2419-1
November 25, 2014
linux-lts-trusty vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux-lts-trusty: Linux hardware enablement kernel from Trusty
Details:
A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual
Machine) subsystem handles the CR4 control register at VM entry on Intel
processors. A local host OS user can exploit this to cause a denial of
service (kill arbitrary processes, or system disruption) by leveraging
/dev/kvm access. (CVE-2014-3690)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
Andy Lutomirski discovered a flaw in how the Linux kernel handles
pivot_root when used with a chroot directory. A local user could exploit
this flaw to cause a denial of service (mount-tree loop). (CVE-2014-7970)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
linux-image-3.13.0-40-generic 3.13.0-40.69~precise1
linux-image-3.13.0-40-generic-lpae 3.13.0-40.69~precise1
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2419-1
CVE-2014-3690, CVE-2014-4608, CVE-2014-7970, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-40.69~precise1
Version: GnuPG v1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=QBKT
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2419-1
November 25, 2014
linux-lts-trusty vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux-lts-trusty: Linux hardware enablement kernel from Trusty
Details:
A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual
Machine) subsystem handles the CR4 control register at VM entry on Intel
processors. A local host OS user can exploit this to cause a denial of
service (kill arbitrary processes, or system disruption) by leveraging
/dev/kvm access. (CVE-2014-3690)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
Andy Lutomirski discovered a flaw in how the Linux kernel handles
pivot_root when used with a chroot directory. A local user could exploit
this flaw to cause a denial of service (mount-tree loop). (CVE-2014-7970)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
linux-image-3.13.0-40-generic 3.13.0-40.69~precise1
linux-image-3.13.0-40-generic-lpae 3.13.0-40.69~precise1
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2419-1
CVE-2014-3690, CVE-2014-4608, CVE-2014-7970, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-40.69~precise1
[USN-2418-1] Linux kernel (OMAP4) vulnerabilities
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=D5Ce
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2418-1
November 25, 2014
linux-ti-omap4 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux-ti-omap4: Linux kernel for OMAP4
Details:
Nadav Amit reported that the KVM (Kernel Virtual Machine) mishandles
noncanonical addresses when emulating instructions that change the rip
(Instruction Pointer). A guest user with access to I/O or the MMIO can use
this flaw to cause a denial of service (system crash) of the guest.
(CVE-2014-3647)
A flaw was discovered with the handling of the invept instruction in the
KVM (Kernel Virtual Machine) subsystem of the Linux kernel. An unprivileged
guest user could exploit this flaw to cause a denial of service (system
crash) on the guest. (CVE-2014-3646)
A flaw was discovered with invept instruction support when using nested EPT
in the KVM (Kernel Virtual Machine). An unprivileged guest user could
exploit this flaw to cause a denial of service (system crash) on the guest.
(CVE-2014-3645)
Lars Bull reported a race condition in the PIT (programmable interrupt
timer) emulation in the KVM (Kernel Virtual Machine) subsystem of the Linux
kernel. A local guest user with access to PIT i/o ports could exploit this
flaw to cause a denial of service (crash) on the host. (CVE-2014-3611)
Lars Bull and Nadav Amit reported a flaw in how KVM (the Kernel Virtual
Machine) handles noncanonical writes to certain MSR registers. A privileged
guest user can exploit this flaw to cause a denial of service (kernel
panic) on the host. (CVE-2014-3610)
A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel was discovered. A
remote attacker could exploit this flaw to cause a denial of service
(system crash). (CVE-2014-3673)
A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel was discovered. A
remote attacker could exploit this flaw to cause a denial of service
(panic). (CVE-2014-3687)
It was discovered that excessive queuing by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel can cause memory
pressure. A remote attacker could exploit this flaw to cause a denial of
service. (CVE-2014-3688)
A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual
Machine) subsystem handles the CR4 control register at VM entry on Intel
processors. A local host OS user can exploit this to cause a denial of
service (kill arbitrary processes, or system disruption) by leveraging
/dev/kvm access. (CVE-2014-3690)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
It was discovered the Linux kernel's implementation of IPv6 did not
properly validate arguments in the ipv6_select_ident function. A local user
could exploit this flaw to cause a denial of service (system crash) by
leveraging tun or macvtap device access. (CVE-2014-7207)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
linux-image-3.2.0-1456-omap4 3.2.0-1456.76
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2418-1
CVE-2014-3610, CVE-2014-3611, CVE-2014-3645, CVE-2014-3646,
CVE-2014-3647, CVE-2014-3673, CVE-2014-3687, CVE-2014-3688,
CVE-2014-3690, CVE-2014-4608, CVE-2014-7207, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.2.0-1456.76
Version: GnuPG v1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=D5Ce
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2418-1
November 25, 2014
linux-ti-omap4 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux-ti-omap4: Linux kernel for OMAP4
Details:
Nadav Amit reported that the KVM (Kernel Virtual Machine) mishandles
noncanonical addresses when emulating instructions that change the rip
(Instruction Pointer). A guest user with access to I/O or the MMIO can use
this flaw to cause a denial of service (system crash) of the guest.
(CVE-2014-3647)
A flaw was discovered with the handling of the invept instruction in the
KVM (Kernel Virtual Machine) subsystem of the Linux kernel. An unprivileged
guest user could exploit this flaw to cause a denial of service (system
crash) on the guest. (CVE-2014-3646)
A flaw was discovered with invept instruction support when using nested EPT
in the KVM (Kernel Virtual Machine). An unprivileged guest user could
exploit this flaw to cause a denial of service (system crash) on the guest.
(CVE-2014-3645)
Lars Bull reported a race condition in the PIT (programmable interrupt
timer) emulation in the KVM (Kernel Virtual Machine) subsystem of the Linux
kernel. A local guest user with access to PIT i/o ports could exploit this
flaw to cause a denial of service (crash) on the host. (CVE-2014-3611)
Lars Bull and Nadav Amit reported a flaw in how KVM (the Kernel Virtual
Machine) handles noncanonical writes to certain MSR registers. A privileged
guest user can exploit this flaw to cause a denial of service (kernel
panic) on the host. (CVE-2014-3610)
A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel was discovered. A
remote attacker could exploit this flaw to cause a denial of service
(system crash). (CVE-2014-3673)
A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel was discovered. A
remote attacker could exploit this flaw to cause a denial of service
(panic). (CVE-2014-3687)
It was discovered that excessive queuing by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel can cause memory
pressure. A remote attacker could exploit this flaw to cause a denial of
service. (CVE-2014-3688)
A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual
Machine) subsystem handles the CR4 control register at VM entry on Intel
processors. A local host OS user can exploit this to cause a denial of
service (kill arbitrary processes, or system disruption) by leveraging
/dev/kvm access. (CVE-2014-3690)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
It was discovered the Linux kernel's implementation of IPv6 did not
properly validate arguments in the ipv6_select_ident function. A local user
could exploit this flaw to cause a denial of service (system crash) by
leveraging tun or macvtap device access. (CVE-2014-7207)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
linux-image-3.2.0-1456-omap4 3.2.0-1456.76
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2418-1
CVE-2014-3610, CVE-2014-3611, CVE-2014-3645, CVE-2014-3646,
CVE-2014-3647, CVE-2014-3673, CVE-2014-3687, CVE-2014-3688,
CVE-2014-3690, CVE-2014-4608, CVE-2014-7207, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.2.0-1456.76
[USN-2417-1] Linux kernel vulnerabilities
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=bB3S
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2417-1
November 25, 2014
linux vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux: Linux kernel
Details:
Nadav Amit reported that the KVM (Kernel Virtual Machine) mishandles
noncanonical addresses when emulating instructions that change the rip
(Instruction Pointer). A guest user with access to I/O or the MMIO can use
this flaw to cause a denial of service (system crash) of the guest.
(CVE-2014-3647)
A flaw was discovered with the handling of the invept instruction in the
KVM (Kernel Virtual Machine) subsystem of the Linux kernel. An unprivileged
guest user could exploit this flaw to cause a denial of service (system
crash) on the guest. (CVE-2014-3646)
A flaw was discovered with invept instruction support when using nested EPT
in the KVM (Kernel Virtual Machine). An unprivileged guest user could
exploit this flaw to cause a denial of service (system crash) on the guest.
(CVE-2014-3645)
Lars Bull reported a race condition in the PIT (programmable interrupt
timer) emulation in the KVM (Kernel Virtual Machine) subsystem of the Linux
kernel. A local guest user with access to PIT i/o ports could exploit this
flaw to cause a denial of service (crash) on the host. (CVE-2014-3611)
Lars Bull and Nadav Amit reported a flaw in how KVM (the Kernel Virtual
Machine) handles noncanonical writes to certain MSR registers. A privileged
guest user can exploit this flaw to cause a denial of service (kernel
panic) on the host. (CVE-2014-3610)
A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel was discovered. A
remote attacker could exploit this flaw to cause a denial of service
(system crash). (CVE-2014-3673)
A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel was discovered. A
remote attacker could exploit this flaw to cause a denial of service
(panic). (CVE-2014-3687)
It was discovered that excessive queuing by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel can cause memory
pressure. A remote attacker could exploit this flaw to cause a denial of
service. (CVE-2014-3688)
A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual
Machine) subsystem handles the CR4 control register at VM entry on Intel
processors. A local host OS user can exploit this to cause a denial of
service (kill arbitrary processes, or system disruption) by leveraging
/dev/kvm access. (CVE-2014-3690)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
It was discovered the Linux kernel's implementation of IPv6 did not
properly validate arguments in the ipv6_select_ident function. A local user
could exploit this flaw to cause a denial of service (system crash) by
leveraging tun or macvtap device access. (CVE-2014-7207)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
linux-image-3.2.0-72-generic 3.2.0-72.107
linux-image-3.2.0-72-generic-pae 3.2.0-72.107
linux-image-3.2.0-72-highbank 3.2.0-72.107
linux-image-3.2.0-72-omap 3.2.0-72.107
linux-image-3.2.0-72-powerpc-smp 3.2.0-72.107
linux-image-3.2.0-72-powerpc64-smp 3.2.0-72.107
linux-image-3.2.0-72-virtual 3.2.0-72.107
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2417-1
CVE-2014-3610, CVE-2014-3611, CVE-2014-3645, CVE-2014-3646,
CVE-2014-3647, CVE-2014-3673, CVE-2014-3687, CVE-2014-3688,
CVE-2014-3690, CVE-2014-4608, CVE-2014-7207, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux/3.2.0-72.107
Version: GnuPG v1
iQIcBAEBCgAGBQJUdAHxAAoJEAUvNnAY1cPY9+EP/3xS6sKfRofLE62p/UwrNtNi
mk2LT73+jvi1aeRAgqgmBDmPOBtko5u8b7ubHm6hXYA4QiA85aH/jUH+JB07PZLJ
neFzbd5gh12h/bSmY5uV7lSIcleN8KfbjEvcCuVqhMoqogiImG8eORb82Lo0IJjU
gDxvdNwCwlaSgKJuOyOTYVJmdvkD2gi5NOJNYIOQeAqqY1vcLSSA5ntwXPNttptR
+b6HSUuGVNxCjpnVgpOCQGo7cRfPtRT+m/H16LlAI2orhsuUaYU/aytsZYDEZb7+
7figIRlBhMCkGWBwIIEDCNlojAPq+fdb8ehnZiN6U1jDhhU1Bwt7+RNpYfID5zUO
f1lmUhNdOAhyqqtaJwglwmvEbGrlZULY2wlNp2h8kvnDJe7l+vuldLwdwj4iRKIV
RRZGjfmgB+Aqy3f0w0hU0ukzI8QUssu87pHwcSLX3uWuYCO8UdrGGsSFXBGqIQpK
HvhIaq0HZGeCTEulC2N41zufEFRHiKHPTl7oTTD/EyTKfO/EOChEVKFC0E09pW+O
cnPrSPIHnoTCktAXupAm+Ouw4+9v8hQeMeJU4Tygg3kfQBBirKo0mCS9Me9jkHX+
L84rAMd38jITXzQ+jTOo6Bi64FJyJ0MEGIex6O4/PT7PYqjfTBYkvNDEc/LfALuB
1XtAXKPU1Z9pnG/gYA6o
=bB3S
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2417-1
November 25, 2014
linux vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux: Linux kernel
Details:
Nadav Amit reported that the KVM (Kernel Virtual Machine) mishandles
noncanonical addresses when emulating instructions that change the rip
(Instruction Pointer). A guest user with access to I/O or the MMIO can use
this flaw to cause a denial of service (system crash) of the guest.
(CVE-2014-3647)
A flaw was discovered with the handling of the invept instruction in the
KVM (Kernel Virtual Machine) subsystem of the Linux kernel. An unprivileged
guest user could exploit this flaw to cause a denial of service (system
crash) on the guest. (CVE-2014-3646)
A flaw was discovered with invept instruction support when using nested EPT
in the KVM (Kernel Virtual Machine). An unprivileged guest user could
exploit this flaw to cause a denial of service (system crash) on the guest.
(CVE-2014-3645)
Lars Bull reported a race condition in the PIT (programmable interrupt
timer) emulation in the KVM (Kernel Virtual Machine) subsystem of the Linux
kernel. A local guest user with access to PIT i/o ports could exploit this
flaw to cause a denial of service (crash) on the host. (CVE-2014-3611)
Lars Bull and Nadav Amit reported a flaw in how KVM (the Kernel Virtual
Machine) handles noncanonical writes to certain MSR registers. A privileged
guest user can exploit this flaw to cause a denial of service (kernel
panic) on the host. (CVE-2014-3610)
A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel was discovered. A
remote attacker could exploit this flaw to cause a denial of service
(system crash). (CVE-2014-3673)
A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel was discovered. A
remote attacker could exploit this flaw to cause a denial of service
(panic). (CVE-2014-3687)
It was discovered that excessive queuing by SCTP (Stream Control
Transmission Protocol) implementation in the Linux kernel can cause memory
pressure. A remote attacker could exploit this flaw to cause a denial of
service. (CVE-2014-3688)
A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual
Machine) subsystem handles the CR4 control register at VM entry on Intel
processors. A local host OS user can exploit this to cause a denial of
service (kill arbitrary processes, or system disruption) by leveraging
/dev/kvm access. (CVE-2014-3690)
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
It was discovered the Linux kernel's implementation of IPv6 did not
properly validate arguments in the ipv6_select_ident function. A local user
could exploit this flaw to cause a denial of service (system crash) by
leveraging tun or macvtap device access. (CVE-2014-7207)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
linux-image-3.2.0-72-generic 3.2.0-72.107
linux-image-3.2.0-72-generic-pae 3.2.0-72.107
linux-image-3.2.0-72-highbank 3.2.0-72.107
linux-image-3.2.0-72-omap 3.2.0-72.107
linux-image-3.2.0-72-powerpc-smp 3.2.0-72.107
linux-image-3.2.0-72-powerpc64-smp 3.2.0-72.107
linux-image-3.2.0-72-virtual 3.2.0-72.107
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2417-1
CVE-2014-3610, CVE-2014-3611, CVE-2014-3645, CVE-2014-3646,
CVE-2014-3647, CVE-2014-3673, CVE-2014-3687, CVE-2014-3688,
CVE-2014-3690, CVE-2014-4608, CVE-2014-7207, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux/3.2.0-72.107
[USN-2416-1] Linux kernel (EC2) vulnerabilities
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBCgAGBQJUdAHRAAoJEAUvNnAY1cPYP9sP/0t7HnVQbKfynIHO1PiJTSDP
5UqyX028JUJRB6KqC5Bf2FuPVPGdjyYG0zQT4Cqs8LFRAURbefpWIaYP1d2KndJk
i6sqZx6kXFxCNnTRdD/zhnFMn5fWmBEHVOkd+lNRoSqMoMB25LhU0aTy6zNgiCzW
KUS6xpB7O44cLt5rmjtJa/C0EtEE7cUfb7j4am3Zxtzd3UTRzNnyGOhSEm5bi2xa
rsqAF/paki1SfAP1gMxO4z8Urw7sABynuA0WndSb+n8m4VElwSh88wBxzrMN1/w4
1ufgyxJpdIB9MepJJZpphW7JqwZUG4gisZOWvFtTva7ncaxN066e48sDE2cgQXEe
kh/KFlFovidYLCLp4yt6GAvUthzXiS33QZTvY3215jxjm0MAA/opc0i3LcWmRK8f
/czHD20pVEND0NPlq20iHp9/NwswZ3i6R0tGcdvxTMzaB4O5RVRBEpdHMPjkDXU5
6X+JLWuRptD2b7AyuA8JS7DJqIroogXo7w5wCCMXXouxQhyxy18FEMUgR48chk7s
0MDmgq6UNvD8/mThfUv+oErA20ROvvr9bqaYnSU0A8ZddFZ4iltrasyjpkKQlPv4
kS1jPqToVO69DEBw07dpAqr8h/FD2eZnZGzm6Z1e48ESrG5Fl/FAXTtyteNsoQjT
QSlN2MkOm+1swEIOL/Zs
=mqGa
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2416-1
November 25, 2014
linux-ec2 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 10.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux-ec2: Linux kernel for EC2
Details:
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 10.04 LTS:
linux-image-2.6.32-372-ec2 2.6.32-372.89
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2416-1
CVE-2014-4608, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux-ec2/2.6.32-372.89
Version: GnuPG v1
iQIcBAEBCgAGBQJUdAHRAAoJEAUvNnAY1cPYP9sP/0t7HnVQbKfynIHO1PiJTSDP
5UqyX028JUJRB6KqC5Bf2FuPVPGdjyYG0zQT4Cqs8LFRAURbefpWIaYP1d2KndJk
i6sqZx6kXFxCNnTRdD/zhnFMn5fWmBEHVOkd+lNRoSqMoMB25LhU0aTy6zNgiCzW
KUS6xpB7O44cLt5rmjtJa/C0EtEE7cUfb7j4am3Zxtzd3UTRzNnyGOhSEm5bi2xa
rsqAF/paki1SfAP1gMxO4z8Urw7sABynuA0WndSb+n8m4VElwSh88wBxzrMN1/w4
1ufgyxJpdIB9MepJJZpphW7JqwZUG4gisZOWvFtTva7ncaxN066e48sDE2cgQXEe
kh/KFlFovidYLCLp4yt6GAvUthzXiS33QZTvY3215jxjm0MAA/opc0i3LcWmRK8f
/czHD20pVEND0NPlq20iHp9/NwswZ3i6R0tGcdvxTMzaB4O5RVRBEpdHMPjkDXU5
6X+JLWuRptD2b7AyuA8JS7DJqIroogXo7w5wCCMXXouxQhyxy18FEMUgR48chk7s
0MDmgq6UNvD8/mThfUv+oErA20ROvvr9bqaYnSU0A8ZddFZ4iltrasyjpkKQlPv4
kS1jPqToVO69DEBw07dpAqr8h/FD2eZnZGzm6Z1e48ESrG5Fl/FAXTtyteNsoQjT
QSlN2MkOm+1swEIOL/Zs
=mqGa
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2416-1
November 25, 2014
linux-ec2 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 10.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux-ec2: Linux kernel for EC2
Details:
Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 10.04 LTS:
linux-image-2.6.32-372-ec2 2.6.32-372.89
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2416-1
CVE-2014-4608, CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux-ec2/2.6.32-372.89
[USN-2415-1] Linux kernel vulnerability
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=VItv
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2415-1
November 25, 2014
linux vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 10.04 LTS
Summary:
The system could be made to deny write access to files.
Software Description:
- linux: Linux kernel
Details:
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 10.04 LTS:
linux-image-2.6.32-68-386 2.6.32-68.135
linux-image-2.6.32-68-generic 2.6.32-68.135
linux-image-2.6.32-68-generic-pae 2.6.32-68.135
linux-image-2.6.32-68-ia64 2.6.32-68.135
linux-image-2.6.32-68-lpia 2.6.32-68.135
linux-image-2.6.32-68-powerpc 2.6.32-68.135
linux-image-2.6.32-68-powerpc-smp 2.6.32-68.135
linux-image-2.6.32-68-powerpc64-smp 2.6.32-68.135
linux-image-2.6.32-68-preempt 2.6.32-68.135
linux-image-2.6.32-68-server 2.6.32-68.135
linux-image-2.6.32-68-sparc64 2.6.32-68.135
linux-image-2.6.32-68-sparc64-smp 2.6.32-68.135
linux-image-2.6.32-68-versatile 2.6.32-68.135
linux-image-2.6.32-68-virtual 2.6.32-68.135
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2415-1
CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux/2.6.32-68.135
Version: GnuPG v1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=VItv
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2415-1
November 25, 2014
linux vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 10.04 LTS
Summary:
The system could be made to deny write access to files.
Software Description:
- linux: Linux kernel
Details:
Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 10.04 LTS:
linux-image-2.6.32-68-386 2.6.32-68.135
linux-image-2.6.32-68-generic 2.6.32-68.135
linux-image-2.6.32-68-generic-pae 2.6.32-68.135
linux-image-2.6.32-68-ia64 2.6.32-68.135
linux-image-2.6.32-68-lpia 2.6.32-68.135
linux-image-2.6.32-68-powerpc 2.6.32-68.135
linux-image-2.6.32-68-powerpc-smp 2.6.32-68.135
linux-image-2.6.32-68-powerpc64-smp 2.6.32-68.135
linux-image-2.6.32-68-preempt 2.6.32-68.135
linux-image-2.6.32-68-server 2.6.32-68.135
linux-image-2.6.32-68-sparc64 2.6.32-68.135
linux-image-2.6.32-68-sparc64-smp 2.6.32-68.135
linux-image-2.6.32-68-versatile 2.6.32-68.135
linux-image-2.6.32-68-virtual 2.6.32-68.135
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.
References:
http://www.ubuntu.com/usn/usn-2415-1
CVE-2014-7975
Package Information:
https://launchpad.net/ubuntu/+source/linux/2.6.32-68.135
reallost1.fbsd2233449 如何带好 业 务 团队
《销售主管2天强化训练营》
【主讲：何炜东】
【培训时间】2014年12月13-14上海、12月18-19北京、12月20-21深圳
【培训对象】被提升的销售精英、销售主任、销售经理、区域经理、业务经理、销售总监、总经理
【授课方式】讲师讲授 + 视频演绎 + 案例研讨 +角色扮演 + 讲师点评
【培训费用】2980/2天/1人，（含资料费、午餐、茶点）
【报名热线】上海：021-31006787 北京：010-5129-9910 深圳：0755-6128-0006 转吕小姐
【在线QQ】 1368751945 1-3-3-8-1-8-1-1-9-1-9 吕小姐
【课程背景】
大部分销售主管都是从销售第一线被提拔上来，个人的销售能力都很强。但成为一个销售团队的主
管后，经常出现的一个问题是管理能力与经验不足。销售管理工作千头万绪，销售主管每天都在忙碌、
焦虑中度过，很少有时间去提升自己的管理技能。销售主管2天强化训练营，让销售主管在2天内进行强
化训练，学习必备的管理知识，理清基本的管理思路，解决管理中常见的问题。
1. 作为销售主管，以前没学习过管理知识，不知道如何管人，怎么办？
2. 作为销售主管，我当然应该有自己的销售任务吗？
3. 如何与下属相处？该严厉还是宽容？慈不掌兵还是爱兵如子？
4. 什么样的人才适合？应该如何挑选销售人员？
5. 试用期短，难以看到新人的业绩，试用期内如何评估考察？
6. 有人说"教会徒弟，饿死师傅"，怎么办？还要去辅导业务员吗？
7. 销售业绩该如何抓? 销售主管做些什么工作才能真正提升业绩？
8. 销售人员每天出去后，是去拜访客户，还是逛街、去网吧玩游戏？不好管理，怎么办？
9. 有没有一种方法，不需增加投入，而又能马上帮助业务员提升业绩？
10. 业绩竞赛对销售人员似乎没什么效果，怎么办？如何去激励销售人员？
以上疑虑，在《销售主管2天强化训练营》将得到解答！
【课程收益】
1. 明确销售主管的工作定位，知道如何把握工作重点；
2. 帮助销售主管理清思路，正确处理销售中的常见问题；
3. 了解如何组建销售团队，如何选人、育人、留人；
4. 明白销售过程管理的原理与方法；
5. 学会销售团队业绩考核指标设定的方法；
6．了解销售业务人员奖惩的基本原理；
7．学完《销售主管2天强化训练营》并掌握所学技巧方法，能有效提升销售团队业绩。
导师简介 ---【何炜东】
实战型销售管理培训专家
【实战经验】
可口可乐公司销售经理，曾主管三个营业所及两个销售部门，带领团队从无到有创立直销系统；
- 通用电气（GE）华南大区销售经理，建立产品销售新渠道模式；
- 和记黄埔集团之屈臣氏蒸馏水（Watsons Water）销售经理-南中国，建立健全产品分销体系；
- 亦曾服务于民营企业，担任过培训中心、制造企业、科技公司培训总监、人力资源总监、销售总监等职
- 曾带领数百人的销售团队及主管华南四省销售业务，创造销量比上一年增长3倍的佳绩；
- 从基层销售做起，经历从业务员到销售总监的过程，对各级销售主管所遇管理问题都有所了解；
- 多年的销售管理经验积累，帮助学员了解知名外企在销售管理中的先进方法；
- 经过正规的营销理论体系训练，海外知名商学院QUT工商管理硕士(MBA）；
- 北京大学、北京交通大学、上海交通大学、北京理工大学、西北工业大学深圳研究院特聘讲师；
- 已出版书籍：《十项全能销售管理者》 。
- 培训以互动、启发、情景式培训见长；将先进的管理理念结合讲师多年实战管理经验；注重受训人员的
感悟及参与；培训风格深入浅出、条理清晰；课堂气氛轻松、活跃、实战性强；通过各种实际案例及游戏
等方式充分调动参训人员的培训热情。为上千家企业提供销售培训与咨询，并被多家知名企业聘为销售团
队辅导顾问。
【授课风格】
以互动、启发、情景式培训见长；
将先进的管理理念结合讲师多年实战管理经验；
注重受训人员的感悟及参与；
培训风格深入浅出、条理清晰；
课堂气氛轻松、活跃、实战性强；
通过各种实际案例及游戏等方式充分调动参训人员的培训热情。
课程大纲
第一部分、销售主管的工作与角色定位
一、销售主管该做什么？
1. 案例分析：这个主管该如何做？
2. 销售主管为什么这么忙？如何能不这么忙？
3. 销售主管的工作重点在哪里？
二、销售管理的几个注意点
1. 管理要注意度。案例分析：这个主管为什么会失败？ （管理方法不是一成不变的）
2. 管理无大事，一切在细节（抓销量，也得从细节抓起）
3. 防火重于救火（预防更重要）
三、销售主管角色定位
1. 与公司、上司、同事的关系定位
2. 与下属的关系定位
-- 主管与下属能否成为真正的朋友？
-- 对下属该严厉还是宽容？
第二部分、销售团队的组建
一、销售人员的挑选
1. 选人比用人更重要，哪种销售人员适合你？什么性格好？
2. 面试销售人员要注意的问题
3. 试用期如何判断？ 试用期要考察销售人员的2大点
二、销售人员的培育
1. 销售主管的主要职责：教师还是教练？
2. 培训成本太高？
3. 为什么培训效果不理想？
4. 指导下属时要注意的几个问题
-- 你说了他一定懂吗？
-- 他懂了一定做吗？
5. 辅导销售人员的5种主要方法
三、如何留住优秀销售人员？
1. 为什么优秀销售人员要走？
2. 如何留住优秀人才？
第三部分、销售人员管理与销售业绩管理
一、我们的工作重点应放在哪些人身上？
1. 销售经理的时间与精力不能平均分配，如何避免会哭的孩子有奶吃现象？
2. 销售人员的3大分类
3. 销售人员分类管理原则
二、销售业绩如何抓？
1. 为什么抓业绩，总是不见效果？
2. 抓业绩，要从三点入手
三、销售人员日常工作管理
1. 销售人员出去干嘛了，你知道吗？如何管理？
2. 销售人员日常工作管理三招。
-- 不用增加投入，让团队销售业绩提升的方法
四、销售目标设定与分解
1. 销售目标的设定原则
2. 销售人员的业绩指标分解方法
五、销售业绩考核
1、销售中的关键指标
-- 如何考核下属？先进的销售管理，必须做到量化
2. 关键业绩指标―KPI介绍
-- 考核销售人员的几个关键业绩指标
3. 运用关键业绩指标的几个注意点
第四部分，销售人员的激励与惩罚
一、必须了解的几个激励原理
1. 马斯洛需求层次理论
2. 公平理论 -- 案例分析
二、激励方法
1. 我两手空空，拿什么激励下属？
-- 几个低成本的激励方法
2. 提拔下属与激励
-- 业绩好就应该提拔？哪类人能提拔？扶上马，还得送一程
三、业绩竞赛与激励
1. 业绩竞赛一定合适吗？ 业绩竞赛的利与弊
2. 如何避免业绩竞赛的弊端？
四、销售人员的惩罚
1. 有了胡萝卜，还需要大棒吗？单靠激励行吗？
2. 如何批评下属？批评下属的标准动作
第五部分、销售主管的自我提升
1. 我们为什么会被提升？我们的能力是否能胜任现在的工作？
2. 如何提升自己的管理技能？
-- 提高管理技能的3个途径
-- 管理者的学习，我们是否真的意识到学习的重要性？
-- 管理者如何学习？没有时间学习怎么办？
3. 销售主管要当心的陷阱
-- 案例分析：身经百战的她为什么失败?
-- 如何破解陷阱？
? 温馨提示: 本课程可针对企业需求，组织内训，欢迎咨询。
注：如不需此类信建信息，请发送"删除'至qytuixin@126.com,我们会第一时间为您删除，打扰之处，还望谅解
【主讲：何炜东】
【培训时间】2014年12月13-14上海、12月18-19北京、12月20-21深圳
【培训对象】被提升的销售精英、销售主任、销售经理、区域经理、业务经理、销售总监、总经理
【授课方式】讲师讲授 + 视频演绎 + 案例研讨 +角色扮演 + 讲师点评
【培训费用】2980/2天/1人，（含资料费、午餐、茶点）
【报名热线】上海：021-31006787 北京：010-5129-9910 深圳：0755-6128-0006 转吕小姐
【在线QQ】 1368751945 1-3-3-8-1-8-1-1-9-1-9 吕小姐
【课程背景】
大部分销售主管都是从销售第一线被提拔上来，个人的销售能力都很强。但成为一个销售团队的主
管后，经常出现的一个问题是管理能力与经验不足。销售管理工作千头万绪，销售主管每天都在忙碌、
焦虑中度过，很少有时间去提升自己的管理技能。销售主管2天强化训练营，让销售主管在2天内进行强
化训练，学习必备的管理知识，理清基本的管理思路，解决管理中常见的问题。
1. 作为销售主管，以前没学习过管理知识，不知道如何管人，怎么办？
2. 作为销售主管，我当然应该有自己的销售任务吗？
3. 如何与下属相处？该严厉还是宽容？慈不掌兵还是爱兵如子？
4. 什么样的人才适合？应该如何挑选销售人员？
5. 试用期短，难以看到新人的业绩，试用期内如何评估考察？
6. 有人说"教会徒弟，饿死师傅"，怎么办？还要去辅导业务员吗？
7. 销售业绩该如何抓? 销售主管做些什么工作才能真正提升业绩？
8. 销售人员每天出去后，是去拜访客户，还是逛街、去网吧玩游戏？不好管理，怎么办？
9. 有没有一种方法，不需增加投入，而又能马上帮助业务员提升业绩？
10. 业绩竞赛对销售人员似乎没什么效果，怎么办？如何去激励销售人员？
以上疑虑，在《销售主管2天强化训练营》将得到解答！
【课程收益】
1. 明确销售主管的工作定位，知道如何把握工作重点；
2. 帮助销售主管理清思路，正确处理销售中的常见问题；
3. 了解如何组建销售团队，如何选人、育人、留人；
4. 明白销售过程管理的原理与方法；
5. 学会销售团队业绩考核指标设定的方法；
6．了解销售业务人员奖惩的基本原理；
7．学完《销售主管2天强化训练营》并掌握所学技巧方法，能有效提升销售团队业绩。
导师简介 ---【何炜东】
实战型销售管理培训专家
【实战经验】
可口可乐公司销售经理，曾主管三个营业所及两个销售部门，带领团队从无到有创立直销系统；
- 通用电气（GE）华南大区销售经理，建立产品销售新渠道模式；
- 和记黄埔集团之屈臣氏蒸馏水（Watsons Water）销售经理-南中国，建立健全产品分销体系；
- 亦曾服务于民营企业，担任过培训中心、制造企业、科技公司培训总监、人力资源总监、销售总监等职
- 曾带领数百人的销售团队及主管华南四省销售业务，创造销量比上一年增长3倍的佳绩；
- 从基层销售做起，经历从业务员到销售总监的过程，对各级销售主管所遇管理问题都有所了解；
- 多年的销售管理经验积累，帮助学员了解知名外企在销售管理中的先进方法；
- 经过正规的营销理论体系训练，海外知名商学院QUT工商管理硕士(MBA）；
- 北京大学、北京交通大学、上海交通大学、北京理工大学、西北工业大学深圳研究院特聘讲师；
- 已出版书籍：《十项全能销售管理者》 。
- 培训以互动、启发、情景式培训见长；将先进的管理理念结合讲师多年实战管理经验；注重受训人员的
感悟及参与；培训风格深入浅出、条理清晰；课堂气氛轻松、活跃、实战性强；通过各种实际案例及游戏
等方式充分调动参训人员的培训热情。为上千家企业提供销售培训与咨询，并被多家知名企业聘为销售团
队辅导顾问。
【授课风格】
以互动、启发、情景式培训见长；
将先进的管理理念结合讲师多年实战管理经验；
注重受训人员的感悟及参与；
培训风格深入浅出、条理清晰；
课堂气氛轻松、活跃、实战性强；
通过各种实际案例及游戏等方式充分调动参训人员的培训热情。
课程大纲
第一部分、销售主管的工作与角色定位
一、销售主管该做什么？
1. 案例分析：这个主管该如何做？
2. 销售主管为什么这么忙？如何能不这么忙？
3. 销售主管的工作重点在哪里？
二、销售管理的几个注意点
1. 管理要注意度。案例分析：这个主管为什么会失败？ （管理方法不是一成不变的）
2. 管理无大事，一切在细节（抓销量，也得从细节抓起）
3. 防火重于救火（预防更重要）
三、销售主管角色定位
1. 与公司、上司、同事的关系定位
2. 与下属的关系定位
-- 主管与下属能否成为真正的朋友？
-- 对下属该严厉还是宽容？
第二部分、销售团队的组建
一、销售人员的挑选
1. 选人比用人更重要，哪种销售人员适合你？什么性格好？
2. 面试销售人员要注意的问题
3. 试用期如何判断？ 试用期要考察销售人员的2大点
二、销售人员的培育
1. 销售主管的主要职责：教师还是教练？
2. 培训成本太高？
3. 为什么培训效果不理想？
4. 指导下属时要注意的几个问题
-- 你说了他一定懂吗？
-- 他懂了一定做吗？
5. 辅导销售人员的5种主要方法
三、如何留住优秀销售人员？
1. 为什么优秀销售人员要走？
2. 如何留住优秀人才？
第三部分、销售人员管理与销售业绩管理
一、我们的工作重点应放在哪些人身上？
1. 销售经理的时间与精力不能平均分配，如何避免会哭的孩子有奶吃现象？
2. 销售人员的3大分类
3. 销售人员分类管理原则
二、销售业绩如何抓？
1. 为什么抓业绩，总是不见效果？
2. 抓业绩，要从三点入手
三、销售人员日常工作管理
1. 销售人员出去干嘛了，你知道吗？如何管理？
2. 销售人员日常工作管理三招。
-- 不用增加投入，让团队销售业绩提升的方法
四、销售目标设定与分解
1. 销售目标的设定原则
2. 销售人员的业绩指标分解方法
五、销售业绩考核
1、销售中的关键指标
-- 如何考核下属？先进的销售管理，必须做到量化
2. 关键业绩指标―KPI介绍
-- 考核销售人员的几个关键业绩指标
3. 运用关键业绩指标的几个注意点
第四部分，销售人员的激励与惩罚
一、必须了解的几个激励原理
1. 马斯洛需求层次理论
2. 公平理论 -- 案例分析
二、激励方法
1. 我两手空空，拿什么激励下属？
-- 几个低成本的激励方法
2. 提拔下属与激励
-- 业绩好就应该提拔？哪类人能提拔？扶上马，还得送一程
三、业绩竞赛与激励
1. 业绩竞赛一定合适吗？ 业绩竞赛的利与弊
2. 如何避免业绩竞赛的弊端？
四、销售人员的惩罚
1. 有了胡萝卜，还需要大棒吗？单靠激励行吗？
2. 如何批评下属？批评下属的标准动作
第五部分、销售主管的自我提升
1. 我们为什么会被提升？我们的能力是否能胜任现在的工作？
2. 如何提升自己的管理技能？
-- 提高管理技能的3个途径
-- 管理者的学习，我们是否真的意识到学习的重要性？
-- 管理者如何学习？没有时间学习怎么办？
3. 销售主管要当心的陷阱
-- 案例分析：身经百战的她为什么失败?
-- 如何破解陷阱？
? 温馨提示: 本课程可针对企业需求，组织内训，欢迎咨询。
注：如不需此类信建信息，请发送"删除'至qytuixin@126.com,我们会第一时间为您删除，打扰之处，还望谅解
[announce] Dec 1 City-Wide Technical Holiday Meta-Party
The RSVP list for the city-wide technical user group "Annual NYC Tech
Holiday Meta-Party" will close down on Tuesday November 25.
Make sure you RSVP ASAP to rsvp-dec AT nycbug DOT org
It will be on Monday, December 1 from 7 PM on Clyde Frazier's Wine and
Dine at 485 10th Avenue. A few dozen NYC user groups are hosting,
including NYC*BUG.
_______________________________________________
announce mailing list
announce@lists.nycbug.org
http://lists.nycbug.org/mailman/listinfo/announce
Holiday Meta-Party" will close down on Tuesday November 25.
Make sure you RSVP ASAP to rsvp-dec AT nycbug DOT org
It will be on Monday, December 1 from 7 PM on Clyde Frazier's Wine and
Dine at 485 10th Avenue. A few dozen NYC user groups are hosting,
including NYC*BUG.
_______________________________________________
announce mailing list
announce@lists.nycbug.org
http://lists.nycbug.org/mailman/listinfo/announce
[USN-2414-1] KDE-Runtime vulnerability
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=UEcg
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2414-1
November 24, 2014
kde-runtime vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
KDE-Runtime could be made to run arbitrary javascript.
Software Description:
- kde-runtime: runtime components from the official KDE release
Details:
Tim Brown and Darron Burton discovered that KDE-Runtime incorrectly handled
input validation. An attacker could possibly use this issue to execute
arbitrary javascript.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
kde-runtime 4:4.8.5-0ubuntu0.3
After a standard system update you need to restart your session to make
all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-2414-1
CVE-2014-8600
Package Information:
https://launchpad.net/ubuntu/+source/kde-runtime/4:4.8.5-0ubuntu0.3
Version: GnuPG v1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=UEcg
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2414-1
November 24, 2014
kde-runtime vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 LTS
Summary:
KDE-Runtime could be made to run arbitrary javascript.
Software Description:
- kde-runtime: runtime components from the official KDE release
Details:
Tim Brown and Darron Burton discovered that KDE-Runtime incorrectly handled
input validation. An attacker could possibly use this issue to execute
arbitrary javascript.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
kde-runtime 4:4.8.5-0ubuntu0.3
After a standard system update you need to restart your session to make
all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-2414-1
CVE-2014-8600
Package Information:
https://launchpad.net/ubuntu/+source/kde-runtime/4:4.8.5-0ubuntu0.3
Subscribe to:
Posts (Atom)