==========================================================================
Ubuntu Security Notice USN-6413-1
October 04, 2023
binutils vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS (Available with Ubuntu Pro)
- Ubuntu 16.04 LTS (Available with Ubuntu Pro)
- Ubuntu 14.04 LTS (Available with Ubuntu Pro)
Summary:
Several security issues were fixed in GNU binutils.
Software Description:
- binutils: GNU assembler, linker and binary utilities
Details:
It was discovered that GNU binutils was not properly performing checks
when dealing with memory allocation operations, which could lead to
excessive memory consumption. An attacker could possibly use this issue
to cause a denial of service. This issue only affected Ubuntu 14.04 LTS.
(CVE-2017-17122, CVE-2017-8421)
It was discovered that GNU binutils was not properly performing bounds
checks when processing debug sections with objdump, which could lead to
an overflow. An attacker could possibly use this issue to cause a denial
of service or execute arbitrary code. This issue only affected Ubuntu
14.04 LTS. (CVE-2018-20671, CVE-2018-6543)
It was discovered that GNU binutils contained a reachable assertion, which
could lead to an intentional assertion failure when processing certain
crafted DWARF files. An attacker could possibly use this issue to cause a
denial of service. This issue only affected Ubuntu 18.04 LTS.
(CVE-2022-35205)
It was discovered that GNU binutils incorrectly handled memory management
operations in several of its functions, which could lead to excessive
memory consumption due to memory leaks. An attacker could possibly use
these issues to cause a denial of service.
(CVE-2022-47007, CVE-2022-47008, CVE-2022-47010, CVE-2022-47011)
It was discovered that GNU binutils was not properly performing bounds
checks when dealing with memory allocation operations, which could lead
to excessive memory consumption. An attacker could possibly use this issue
to cause a denial of service. (CVE-2022-48063)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 18.04 LTS (Available with Ubuntu Pro):
binutils 2.30-21ubuntu1~18.04.9+esm3
binutils-multiarch 2.30-21ubuntu1~18.04.9+esm3
Ubuntu 16.04 LTS (Available with Ubuntu Pro):
binutils 2.26.1-1ubuntu1~16.04.8+esm9
binutils-multiarch 2.26.1-1ubuntu1~16.04.8+esm9
Ubuntu 14.04 LTS (Available with Ubuntu Pro):
binutils 2.24-5ubuntu14.2+esm5
binutils-multiarch 2.24-5ubuntu14.2+esm5
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6413-1
CVE-2017-17122, CVE-2017-8421, CVE-2018-20671, CVE-2018-6543,
CVE-2022-35205, CVE-2022-47007, CVE-2022-47008, CVE-2022-47010,
CVE-2022-47011, CVE-2022-48063
Wednesday, October 4, 2023
[USN-6412-1] Linux kernel vulnerabilities
-----BEGIN PGP SIGNATURE-----
wsB5BAABCAAjFiEEYrygdx1GDec9TV8EZ0GeRcM5nt0FAmUdmYAFAwAAAAAACgkQZ0GeRcM5nt1/
bgf/aUNLuRuGMhUKHxcDltuJcvuAIXeQwz1+tzgFXBY4b6/JfEoVjIAWggt8D/hVCuz37MbEJ9q6
HwlQnmiJe7KeQEPefdjoUpXJ6XhPGL0RetPMpMb3OqcqmfNyXbNoTBlrKCh5iYv6CHuU/UVEIZ17
Zp5HSsxeOULMH16T2czoWJ89kNOb7lkhAGHQYsBeddBkduHi0qMpBwbg105SfHL/iTGF+uCVGlq9
A/nYK9ca19rDM7kRihohpE59vlW7R9to4uIooFgWzIrRt66HmqhS8TFMqvrIcwCJ5CBTYSkxElMy
UJ4P2kTvmWCDHtEU0OWheUCFZ04au1Baq7vBULQyXA==
=2PSX
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6412-1
October 04, 2023
linux, linux-aws, linux-aws-6.2, linux-azure, linux-azure-6.2,
linux-azure-fde-6.2, linux-gcp, linux-gcp-6.2, linux-hwe-6.2, linux-kvm,
linux-lowlatency, linux-lowlatency-hwe-6.2, linux-oracle, linux-raspi,
linux-starfive vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux: Linux kernel
- linux-aws: Linux kernel for Amazon Web Services (AWS) systems
- linux-azure: Linux kernel for Microsoft Azure Cloud systems
- linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems
- linux-kvm: Linux kernel for cloud environments
- linux-lowlatency: Linux low latency kernel
- linux-oracle: Linux kernel for Oracle Cloud systems
- linux-raspi: Linux kernel for Raspberry Pi systems
- linux-starfive: Linux kernel for StarFive processors
- linux-aws-6.2: Linux kernel for Amazon Web Services (AWS) systems
- linux-azure-6.2: Linux kernel for Microsoft Azure cloud systems
- linux-azure-fde-6.2: Linux kernel for Microsoft Azure CVM cloud systems
- linux-gcp-6.2: Linux kernel for Google Cloud Platform (GCP) systems
- linux-hwe-6.2: Linux hardware enablement (HWE) kernel
- linux-lowlatency-hwe-6.2: Linux low latency kernel
Details:
Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel
contained a race condition during device removal, leading to a use-after-
free vulnerability. A physically proximate attacker could use this to cause
a denial of service (system crash) or possibly execute arbitrary code.
(CVE-2022-45886, CVE-2022-45919)
Hyunwoo Kim discovered that the Technotrend/Hauppauge USB DEC driver in the
Linux kernel did not properly handle device removal events. A physically
proximate attacker could use this to cause a denial of service (system
crash). (CVE-2022-45887)
It was discovered that the NTFS file system implementation in the Linux
kernel did not properly validate MFT flags in certain situations. An
attacker could use this to construct a malicious NTFS image that, when
mounted and operated on, could cause a denial of service (system crash).
(CVE-2022-48425)
It was discovered that the IPv6 implementation in the Linux kernel
contained a high rate of hash collisions in connection lookup table. A
remote attacker could use this to cause a denial of service (excessive CPU
consumption). (CVE-2023-1206)
Daniel Trujillo, Johannes Wikner, and Kaveh Razavi discovered that some AMD
processors utilising speculative execution and branch prediction may allow
unauthorised memory reads via a speculative side-channel attack. A local
attacker could use this to expose sensitive information, including kernel
memory. (CVE-2023-20569)
It was discovered that the IPv6 RPL protocol implementation in the Linux
kernel did not properly handle user-supplied data. A remote attacker could
use this to cause a denial of service (system crash). (CVE-2023-2156)
Yang Lan discovered that the GFS2 file system implementation in the Linux
kernel could attempt to dereference a null pointer in some situations. An
attacker could use this to construct a malicious GFS2 image that, when
mounted and operated on, could cause a denial of service (system crash).
(CVE-2023-3212)
It was discovered that the KSMBD implementation in the Linux kernel did not
properly validate buffer sizes in certain operations, leading to an integer
underflow and out-of-bounds read vulnerability. A remote attacker could use
this to cause a denial of service (system crash) or possibly expose
sensitive information. (CVE-2023-38427)
Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel
did not properly validate packet header sizes in certain situations,
leading to an out-of-bounds read vulnerability. A remote attacker could use
this to cause a denial of service (system crash) or possibly expose
sensitive information. (CVE-2023-38431)
Andy Nguyen discovered that the KVM implementation for AMD processors in
the Linux kernel with Secure Encrypted Virtualization (SEV) contained a
race condition when accessing the GHCB page. A local attacker in a SEV
guest VM could possibly use this to cause a denial of service (host system
crash). (CVE-2023-4155)
It was discovered that the TUN/TAP driver in the Linux kernel did not
properly initialize socket data. A local attacker could use this to cause a
denial of service (system crash). (CVE-2023-4194)
Maxim Suhanov discovered that the exFAT file system implementation in the
Linux kernel did not properly check a file name length, leading to an out-
of-bounds write vulnerability. An attacker could use this to construct a
malicious exFAT image that, when mounted and operated on, could cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2023-4273)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
linux-image-6.2.0-1006-starfive 6.2.0-1006.7
linux-image-6.2.0-1013-aws 6.2.0-1013.13
linux-image-6.2.0-1013-oracle 6.2.0-1013.13
linux-image-6.2.0-1014-azure 6.2.0-1014.14
linux-image-6.2.0-1014-kvm 6.2.0-1014.14
linux-image-6.2.0-1014-lowlatency 6.2.0-1014.14
linux-image-6.2.0-1014-lowlatency-64k 6.2.0-1014.14
linux-image-6.2.0-1014-raspi 6.2.0-1014.16
linux-image-6.2.0-1016-gcp 6.2.0-1016.18
linux-image-6.2.0-34-generic 6.2.0-34.34
linux-image-6.2.0-34-generic-64k 6.2.0-34.34
linux-image-6.2.0-34-generic-lpae 6.2.0-34.34
linux-image-aws 6.2.0.1013.14
linux-image-azure 6.2.0.1014.14
linux-image-gcp 6.2.0.1016.16
linux-image-generic 6.2.0.34.34
linux-image-generic-64k 6.2.0.34.34
linux-image-generic-lpae 6.2.0.34.34
linux-image-kvm 6.2.0.1014.14
linux-image-lowlatency 6.2.0.1014.14
linux-image-lowlatency-64k 6.2.0.1014.14
linux-image-oracle 6.2.0.1013.13
linux-image-raspi 6.2.0.1014.17
linux-image-raspi-nolpae 6.2.0.1014.17
linux-image-starfive 6.2.0.1006.9
linux-image-virtual 6.2.0.34.34
Ubuntu 22.04 LTS:
linux-image-6.2.0-1013-aws 6.2.0-1013.13~22.04.1
linux-image-6.2.0-1014-azure 6.2.0-1014.14~22.04.1
linux-image-6.2.0-1014-azure-fde 6.2.0-1014.14~22.04.1.1
linux-image-6.2.0-1014-lowlatency 6.2.0-1014.14~22.04.1
linux-image-6.2.0-1014-lowlatency-64k 6.2.0-1014.14~22.04.1
linux-image-6.2.0-1016-gcp 6.2.0-1016.18~22.04.1
linux-image-6.2.0-34-generic 6.2.0-34.34~22.04.1
linux-image-6.2.0-34-generic-64k 6.2.0-34.34~22.04.1
linux-image-6.2.0-34-generic-lpae 6.2.0-34.34~22.04.1
linux-image-aws 6.2.0.1013.13~22.04.1
linux-image-azure 6.2.0.1014.14~22.04.1
linux-image-azure-fde 6.2.0.1014.14~22.04.1.11
linux-image-gcp 6.2.0.1016.18~22.04.1
linux-image-generic-64k-hwe-22.04 6.2.0.34.34~22.04.11
linux-image-generic-hwe-22.04 6.2.0.34.34~22.04.11
linux-image-generic-lpae-hwe-22.04 6.2.0.34.34~22.04.11
linux-image-lowlatency-64k-hwe-22.04 6.2.0.1014.14~22.04.11
linux-image-lowlatency-hwe-22.04 6.2.0.1014.14~22.04.11
linux-image-virtual-hwe-22.04 6.2.0.34.34~22.04.11
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-6412-1
CVE-2022-45886, CVE-2022-45887, CVE-2022-45919, CVE-2022-48425,
CVE-2023-1206, CVE-2023-20569, CVE-2023-2156, CVE-2023-3212,
CVE-2023-38427, CVE-2023-38431, CVE-2023-4155, CVE-2023-4194,
CVE-2023-4273
Package Information:
https://launchpad.net/ubuntu/+source/linux/6.2.0-34.34
https://launchpad.net/ubuntu/+source/linux-aws/6.2.0-1013.13
https://launchpad.net/ubuntu/+source/linux-azure/6.2.0-1014.14
https://launchpad.net/ubuntu/+source/linux-gcp/6.2.0-1016.18
https://launchpad.net/ubuntu/+source/linux-kvm/6.2.0-1014.14
https://launchpad.net/ubuntu/+source/linux-lowlatency/6.2.0-1014.14
https://launchpad.net/ubuntu/+source/linux-oracle/6.2.0-1013.13
https://launchpad.net/ubuntu/+source/linux-raspi/6.2.0-1014.16
https://launchpad.net/ubuntu/+source/linux-starfive/6.2.0-1006.7
https://launchpad.net/ubuntu/+source/linux-aws-6.2/6.2.0-1013.13~22.04.1
https://launchpad.net/ubuntu/+source/linux-azure-6.2/6.2.0-1014.14~22.04.1
https://launchpad.net/ubuntu/+source/linux-azure-fde-6.2/6.2.0-1014.14~22.04.1.1
https://launchpad.net/ubuntu/+source/linux-gcp-6.2/6.2.0-1016.18~22.04.1
https://launchpad.net/ubuntu/+source/linux-hwe-6.2/6.2.0-34.34~22.04.1
https://launchpad.net/ubuntu/+source/linux-lowlatency-hwe-6.2/6.2.0-1014.14~22.04.1
wsB5BAABCAAjFiEEYrygdx1GDec9TV8EZ0GeRcM5nt0FAmUdmYAFAwAAAAAACgkQZ0GeRcM5nt1/
bgf/aUNLuRuGMhUKHxcDltuJcvuAIXeQwz1+tzgFXBY4b6/JfEoVjIAWggt8D/hVCuz37MbEJ9q6
HwlQnmiJe7KeQEPefdjoUpXJ6XhPGL0RetPMpMb3OqcqmfNyXbNoTBlrKCh5iYv6CHuU/UVEIZ17
Zp5HSsxeOULMH16T2czoWJ89kNOb7lkhAGHQYsBeddBkduHi0qMpBwbg105SfHL/iTGF+uCVGlq9
A/nYK9ca19rDM7kRihohpE59vlW7R9to4uIooFgWzIrRt66HmqhS8TFMqvrIcwCJ5CBTYSkxElMy
UJ4P2kTvmWCDHtEU0OWheUCFZ04au1Baq7vBULQyXA==
=2PSX
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6412-1
October 04, 2023
linux, linux-aws, linux-aws-6.2, linux-azure, linux-azure-6.2,
linux-azure-fde-6.2, linux-gcp, linux-gcp-6.2, linux-hwe-6.2, linux-kvm,
linux-lowlatency, linux-lowlatency-hwe-6.2, linux-oracle, linux-raspi,
linux-starfive vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux: Linux kernel
- linux-aws: Linux kernel for Amazon Web Services (AWS) systems
- linux-azure: Linux kernel for Microsoft Azure Cloud systems
- linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems
- linux-kvm: Linux kernel for cloud environments
- linux-lowlatency: Linux low latency kernel
- linux-oracle: Linux kernel for Oracle Cloud systems
- linux-raspi: Linux kernel for Raspberry Pi systems
- linux-starfive: Linux kernel for StarFive processors
- linux-aws-6.2: Linux kernel for Amazon Web Services (AWS) systems
- linux-azure-6.2: Linux kernel for Microsoft Azure cloud systems
- linux-azure-fde-6.2: Linux kernel for Microsoft Azure CVM cloud systems
- linux-gcp-6.2: Linux kernel for Google Cloud Platform (GCP) systems
- linux-hwe-6.2: Linux hardware enablement (HWE) kernel
- linux-lowlatency-hwe-6.2: Linux low latency kernel
Details:
Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel
contained a race condition during device removal, leading to a use-after-
free vulnerability. A physically proximate attacker could use this to cause
a denial of service (system crash) or possibly execute arbitrary code.
(CVE-2022-45886, CVE-2022-45919)
Hyunwoo Kim discovered that the Technotrend/Hauppauge USB DEC driver in the
Linux kernel did not properly handle device removal events. A physically
proximate attacker could use this to cause a denial of service (system
crash). (CVE-2022-45887)
It was discovered that the NTFS file system implementation in the Linux
kernel did not properly validate MFT flags in certain situations. An
attacker could use this to construct a malicious NTFS image that, when
mounted and operated on, could cause a denial of service (system crash).
(CVE-2022-48425)
It was discovered that the IPv6 implementation in the Linux kernel
contained a high rate of hash collisions in connection lookup table. A
remote attacker could use this to cause a denial of service (excessive CPU
consumption). (CVE-2023-1206)
Daniel Trujillo, Johannes Wikner, and Kaveh Razavi discovered that some AMD
processors utilising speculative execution and branch prediction may allow
unauthorised memory reads via a speculative side-channel attack. A local
attacker could use this to expose sensitive information, including kernel
memory. (CVE-2023-20569)
It was discovered that the IPv6 RPL protocol implementation in the Linux
kernel did not properly handle user-supplied data. A remote attacker could
use this to cause a denial of service (system crash). (CVE-2023-2156)
Yang Lan discovered that the GFS2 file system implementation in the Linux
kernel could attempt to dereference a null pointer in some situations. An
attacker could use this to construct a malicious GFS2 image that, when
mounted and operated on, could cause a denial of service (system crash).
(CVE-2023-3212)
It was discovered that the KSMBD implementation in the Linux kernel did not
properly validate buffer sizes in certain operations, leading to an integer
underflow and out-of-bounds read vulnerability. A remote attacker could use
this to cause a denial of service (system crash) or possibly expose
sensitive information. (CVE-2023-38427)
Chih-Yen Chang discovered that the KSMBD implementation in the Linux kernel
did not properly validate packet header sizes in certain situations,
leading to an out-of-bounds read vulnerability. A remote attacker could use
this to cause a denial of service (system crash) or possibly expose
sensitive information. (CVE-2023-38431)
Andy Nguyen discovered that the KVM implementation for AMD processors in
the Linux kernel with Secure Encrypted Virtualization (SEV) contained a
race condition when accessing the GHCB page. A local attacker in a SEV
guest VM could possibly use this to cause a denial of service (host system
crash). (CVE-2023-4155)
It was discovered that the TUN/TAP driver in the Linux kernel did not
properly initialize socket data. A local attacker could use this to cause a
denial of service (system crash). (CVE-2023-4194)
Maxim Suhanov discovered that the exFAT file system implementation in the
Linux kernel did not properly check a file name length, leading to an out-
of-bounds write vulnerability. An attacker could use this to construct a
malicious exFAT image that, when mounted and operated on, could cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2023-4273)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
linux-image-6.2.0-1006-starfive 6.2.0-1006.7
linux-image-6.2.0-1013-aws 6.2.0-1013.13
linux-image-6.2.0-1013-oracle 6.2.0-1013.13
linux-image-6.2.0-1014-azure 6.2.0-1014.14
linux-image-6.2.0-1014-kvm 6.2.0-1014.14
linux-image-6.2.0-1014-lowlatency 6.2.0-1014.14
linux-image-6.2.0-1014-lowlatency-64k 6.2.0-1014.14
linux-image-6.2.0-1014-raspi 6.2.0-1014.16
linux-image-6.2.0-1016-gcp 6.2.0-1016.18
linux-image-6.2.0-34-generic 6.2.0-34.34
linux-image-6.2.0-34-generic-64k 6.2.0-34.34
linux-image-6.2.0-34-generic-lpae 6.2.0-34.34
linux-image-aws 6.2.0.1013.14
linux-image-azure 6.2.0.1014.14
linux-image-gcp 6.2.0.1016.16
linux-image-generic 6.2.0.34.34
linux-image-generic-64k 6.2.0.34.34
linux-image-generic-lpae 6.2.0.34.34
linux-image-kvm 6.2.0.1014.14
linux-image-lowlatency 6.2.0.1014.14
linux-image-lowlatency-64k 6.2.0.1014.14
linux-image-oracle 6.2.0.1013.13
linux-image-raspi 6.2.0.1014.17
linux-image-raspi-nolpae 6.2.0.1014.17
linux-image-starfive 6.2.0.1006.9
linux-image-virtual 6.2.0.34.34
Ubuntu 22.04 LTS:
linux-image-6.2.0-1013-aws 6.2.0-1013.13~22.04.1
linux-image-6.2.0-1014-azure 6.2.0-1014.14~22.04.1
linux-image-6.2.0-1014-azure-fde 6.2.0-1014.14~22.04.1.1
linux-image-6.2.0-1014-lowlatency 6.2.0-1014.14~22.04.1
linux-image-6.2.0-1014-lowlatency-64k 6.2.0-1014.14~22.04.1
linux-image-6.2.0-1016-gcp 6.2.0-1016.18~22.04.1
linux-image-6.2.0-34-generic 6.2.0-34.34~22.04.1
linux-image-6.2.0-34-generic-64k 6.2.0-34.34~22.04.1
linux-image-6.2.0-34-generic-lpae 6.2.0-34.34~22.04.1
linux-image-aws 6.2.0.1013.13~22.04.1
linux-image-azure 6.2.0.1014.14~22.04.1
linux-image-azure-fde 6.2.0.1014.14~22.04.1.11
linux-image-gcp 6.2.0.1016.18~22.04.1
linux-image-generic-64k-hwe-22.04 6.2.0.34.34~22.04.11
linux-image-generic-hwe-22.04 6.2.0.34.34~22.04.11
linux-image-generic-lpae-hwe-22.04 6.2.0.34.34~22.04.11
linux-image-lowlatency-64k-hwe-22.04 6.2.0.1014.14~22.04.11
linux-image-lowlatency-hwe-22.04 6.2.0.1014.14~22.04.11
linux-image-virtual-hwe-22.04 6.2.0.34.34~22.04.11
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-6412-1
CVE-2022-45886, CVE-2022-45887, CVE-2022-45919, CVE-2022-48425,
CVE-2023-1206, CVE-2023-20569, CVE-2023-2156, CVE-2023-3212,
CVE-2023-38427, CVE-2023-38431, CVE-2023-4155, CVE-2023-4194,
CVE-2023-4273
Package Information:
https://launchpad.net/ubuntu/+source/linux/6.2.0-34.34
https://launchpad.net/ubuntu/+source/linux-aws/6.2.0-1013.13
https://launchpad.net/ubuntu/+source/linux-azure/6.2.0-1014.14
https://launchpad.net/ubuntu/+source/linux-gcp/6.2.0-1016.18
https://launchpad.net/ubuntu/+source/linux-kvm/6.2.0-1014.14
https://launchpad.net/ubuntu/+source/linux-lowlatency/6.2.0-1014.14
https://launchpad.net/ubuntu/+source/linux-oracle/6.2.0-1013.13
https://launchpad.net/ubuntu/+source/linux-raspi/6.2.0-1014.16
https://launchpad.net/ubuntu/+source/linux-starfive/6.2.0-1006.7
https://launchpad.net/ubuntu/+source/linux-aws-6.2/6.2.0-1013.13~22.04.1
https://launchpad.net/ubuntu/+source/linux-azure-6.2/6.2.0-1014.14~22.04.1
https://launchpad.net/ubuntu/+source/linux-azure-fde-6.2/6.2.0-1014.14~22.04.1.1
https://launchpad.net/ubuntu/+source/linux-gcp-6.2/6.2.0-1016.18~22.04.1
https://launchpad.net/ubuntu/+source/linux-hwe-6.2/6.2.0-34.34~22.04.1
https://launchpad.net/ubuntu/+source/linux-lowlatency-hwe-6.2/6.2.0-1014.14~22.04.1
[USN-6411-1] Exim vulnerabilities
==========================================================================
Ubuntu Security Notice USN-6411-1
October 04, 2023
exim4 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS (Available with Ubuntu Pro)
- Ubuntu 16.04 LTS (Available with Ubuntu Pro)
- Ubuntu 14.04 LTS (Available with Ubuntu Pro)
Summary:
Several security issues were fixed in Exim.
Software Description:
- exim4: Exim is a mail transport agent
Details:
It was discovered that Exim incorrectly handled certain challenge requests.
A remote attacker could possibly use this issue to perform out-of-bounds
reads, resulting in information leakage. (CVE-2023-42114)
It was discovered that Exim incorrectly handled validation of user-supplied
data. A remote attacker could possibly use this issue to perform
out-of-bounds writes, resulting in arbitrary code execution. This issue
only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.04.
(CVE-2023-42115)
It was discovered that Exim incorrectly handled certain challenge requests.
A remote attacker could possibly use this issue to perform out-of-bounds
writes, resulting in arbitrary code execution. (CVE-2023-42116)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
exim4 4.96-14ubuntu1.2
exim4-base 4.96-14ubuntu1.2
exim4-daemon-heavy 4.96-14ubuntu1.2
exim4-daemon-light 4.96-14ubuntu1.2
eximon4 4.96-14ubuntu1.2
Ubuntu 22.04 LTS:
exim4 4.95-4ubuntu2.3
exim4-base 4.95-4ubuntu2.3
exim4-daemon-heavy 4.95-4ubuntu2.3
exim4-daemon-light 4.95-4ubuntu2.3
eximon4 4.95-4ubuntu2.3
Ubuntu 20.04 LTS:
exim4 4.93-13ubuntu1.8
exim4-base 4.93-13ubuntu1.8
exim4-daemon-heavy 4.93-13ubuntu1.8
exim4-daemon-light 4.93-13ubuntu1.8
eximon4 4.93-13ubuntu1.8
Ubuntu 18.04 LTS (Available with Ubuntu Pro):
exim4 4.90.1-1ubuntu1.10+esm1
exim4-base 4.90.1-1ubuntu1.10+esm1
exim4-daemon-heavy 4.90.1-1ubuntu1.10+esm1
exim4-daemon-light 4.90.1-1ubuntu1.10+esm1
eximon4 4.90.1-1ubuntu1.10+esm1
Ubuntu 16.04 LTS (Available with Ubuntu Pro):
exim4 4.86.2-2ubuntu2.6+esm4
exim4-base 4.86.2-2ubuntu2.6+esm4
exim4-daemon-heavy 4.86.2-2ubuntu2.6+esm4
exim4-daemon-light 4.86.2-2ubuntu2.6+esm4
eximon4 4.86.2-2ubuntu2.6+esm4
Ubuntu 14.04 LTS (Available with Ubuntu Pro):
exim4 4.82-3ubuntu2.4+esm6
exim4-base 4.82-3ubuntu2.4+esm6
exim4-daemon-heavy 4.82-3ubuntu2.4+esm6
exim4-daemon-light 4.82-3ubuntu2.4+esm6
eximon4 4.82-3ubuntu2.4+esm6
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6411-1
CVE-2023-42114, CVE-2023-42115, CVE-2023-42116
Package Information:
https://launchpad.net/ubuntu/+source/exim4/4.96-14ubuntu1.2
https://launchpad.net/ubuntu/+source/exim4/4.95-4ubuntu2.3
https://launchpad.net/ubuntu/+source/exim4/4.93-13ubuntu1.8
Ubuntu Security Notice USN-6411-1
October 04, 2023
exim4 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS (Available with Ubuntu Pro)
- Ubuntu 16.04 LTS (Available with Ubuntu Pro)
- Ubuntu 14.04 LTS (Available with Ubuntu Pro)
Summary:
Several security issues were fixed in Exim.
Software Description:
- exim4: Exim is a mail transport agent
Details:
It was discovered that Exim incorrectly handled certain challenge requests.
A remote attacker could possibly use this issue to perform out-of-bounds
reads, resulting in information leakage. (CVE-2023-42114)
It was discovered that Exim incorrectly handled validation of user-supplied
data. A remote attacker could possibly use this issue to perform
out-of-bounds writes, resulting in arbitrary code execution. This issue
only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 23.04.
(CVE-2023-42115)
It was discovered that Exim incorrectly handled certain challenge requests.
A remote attacker could possibly use this issue to perform out-of-bounds
writes, resulting in arbitrary code execution. (CVE-2023-42116)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
exim4 4.96-14ubuntu1.2
exim4-base 4.96-14ubuntu1.2
exim4-daemon-heavy 4.96-14ubuntu1.2
exim4-daemon-light 4.96-14ubuntu1.2
eximon4 4.96-14ubuntu1.2
Ubuntu 22.04 LTS:
exim4 4.95-4ubuntu2.3
exim4-base 4.95-4ubuntu2.3
exim4-daemon-heavy 4.95-4ubuntu2.3
exim4-daemon-light 4.95-4ubuntu2.3
eximon4 4.95-4ubuntu2.3
Ubuntu 20.04 LTS:
exim4 4.93-13ubuntu1.8
exim4-base 4.93-13ubuntu1.8
exim4-daemon-heavy 4.93-13ubuntu1.8
exim4-daemon-light 4.93-13ubuntu1.8
eximon4 4.93-13ubuntu1.8
Ubuntu 18.04 LTS (Available with Ubuntu Pro):
exim4 4.90.1-1ubuntu1.10+esm1
exim4-base 4.90.1-1ubuntu1.10+esm1
exim4-daemon-heavy 4.90.1-1ubuntu1.10+esm1
exim4-daemon-light 4.90.1-1ubuntu1.10+esm1
eximon4 4.90.1-1ubuntu1.10+esm1
Ubuntu 16.04 LTS (Available with Ubuntu Pro):
exim4 4.86.2-2ubuntu2.6+esm4
exim4-base 4.86.2-2ubuntu2.6+esm4
exim4-daemon-heavy 4.86.2-2ubuntu2.6+esm4
exim4-daemon-light 4.86.2-2ubuntu2.6+esm4
eximon4 4.86.2-2ubuntu2.6+esm4
Ubuntu 14.04 LTS (Available with Ubuntu Pro):
exim4 4.82-3ubuntu2.4+esm6
exim4-base 4.82-3ubuntu2.4+esm6
exim4-daemon-heavy 4.82-3ubuntu2.4+esm6
exim4-daemon-light 4.82-3ubuntu2.4+esm6
eximon4 4.82-3ubuntu2.4+esm6
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6411-1
CVE-2023-42114, CVE-2023-42115, CVE-2023-42116
Package Information:
https://launchpad.net/ubuntu/+source/exim4/4.96-14ubuntu1.2
https://launchpad.net/ubuntu/+source/exim4/4.95-4ubuntu2.3
https://launchpad.net/ubuntu/+source/exim4/4.93-13ubuntu1.8
[USN-6401-1] FreeRDP vulnerabilities
-----BEGIN PGP SIGNATURE-----
wsF5BAABCAAjFiEEKQtTo2MNG44yJq/lXjZQcrWpV2YFAmUdUc8FAwAAAAAACgkQXjZQcrWpV2as
DQ/9Fzm3zbE4XFCHHn2UNK0vK55BAAt2cFLfgDzrm9Bp6+o0BhExmSkenZdj0wSLHcklfG0cSbf3
3e1QDzZzErXcsc2ytuojXTZV+dSXnJF8igODhPJibfeSWbiSB4K3sUxsBBNWw83/XqvxQngLcZcJ
P0vPzUmOQ7cIcnJ47WfLE3OyNJ/n8zzXsgf5aE5wx62znOPZQ99q0V7UDdQQpwi+Fv4cjr03/sc0
DvQuAyklk50/zzaLaJ5nzPJszNpHAdlhZ5udC+8/hTSy/mz9CtFpa++9jQmg3uNQTK4joMMLqOAw
DJf59g8QoEvjmjvDZbRmp96KGlUE3V2U+D6P1R0wkY3MhQAmFMoFLDpKV8Uy4+qUrtBEAmEwsdeN
hf+523cb/SxqEfWajDCgIKxLKM2GoXmMWEPwPIv3BIHx4dJ+q6ZVW2leUO+4eJkE600AiNerYyvC
+7e7VpEAShfVT53dea2Z7kG6B2jP3C+zpkGoGLcS+i6f1Mdrm73p/U5QQWqzCsbNUscdb00wXI4G
Xv9Elg9X7IX8zkY83EQkraz4BFnfvm/lWjCx5RHyCN+zaSjZR7U/JdgSPh0bwww8YSXN1zCEipm7
UlA4ivHjtVVyshI+oy0MN+EbnzYkL9bQC+cjE9csiitMmSOyMHmPHFP/55x+2h0ozkUdrBjViPVL
EU8=
=EYfu
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6401-1
October 04, 2023
freerdp2 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS (Available with Ubuntu Pro)
Summary:
Several security issues were fixed in FreeRDP.
Software Description:
- freerdp2: RDP client for Windows Terminal Services
Details:
It was discovered that FreeRDP did not properly manage certain inputs. A
malicious server could use this issue to cause FreeRDP clients to crash,
resulting in a denial of service, or possibly obtain sensitive
information. (cve-2023-39350, cve-2023-39351, CVE-2023-39353,
CVE-2023-39354, CVE-2023-40181, CVE-2023-40188, CVE-2023-40589)
It was discovered that FreeRDP did not properly manage certain inputs. A
malicious server could use this issue to cause FreeRDP clients to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(cve-2023-40186 CVE-2023-40567, CVE-2023-40569)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
libfreerdp2-2 2.10.0+dfsg1-1ubuntu0.2
Ubuntu 22.04 LTS:
libfreerdp2-2 2.6.1+dfsg1-3ubuntu2.4
libwinpr2-2 2.6.1+dfsg1-3ubuntu2.4
libwinpr2-dev 2.6.1+dfsg1-3ubuntu2.4
Ubuntu 20.04 LTS:
libfreerdp2-2 2.2.0+dfsg1-0ubuntu0.20.04.5
libwinpr2-2 2.2.0+dfsg1-0ubuntu0.20.04.5
libwinpr2-dev 2.2.0+dfsg1-0ubuntu0.20.04.5
Ubuntu 18.04 LTS (Available with Ubuntu Pro):
libfreerdp2-2 2.2.0+dfsg1-0ubuntu0.18.04.4+esm1
libwinpr2-2 2.2.0+dfsg1-0ubuntu0.18.04.4+esm1
libwinpr2-dev 2.2.0+dfsg1-0ubuntu0.18.04.4+esm1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6401-1
CVE-2023-39350, CVE-2023-39351, CVE-2023-39353, CVE-2023-39354,
CVE-2023-40181, CVE-2023-40186, CVE-2023-40188, CVE-2023-40567,
CVE-2023-40569, CVE-2023-40589
Package Information:
https://launchpad.net/ubuntu/+source/freerdp2/2.10.0+dfsg1-1ubuntu0.2
https://launchpad.net/ubuntu/+source/freerdp2/2.6.1+dfsg1-3ubuntu2.4
https://launchpad.net/ubuntu/+source/freerdp2/2.2.0+dfsg1-0ubuntu0.20.04.5
wsF5BAABCAAjFiEEKQtTo2MNG44yJq/lXjZQcrWpV2YFAmUdUc8FAwAAAAAACgkQXjZQcrWpV2as
DQ/9Fzm3zbE4XFCHHn2UNK0vK55BAAt2cFLfgDzrm9Bp6+o0BhExmSkenZdj0wSLHcklfG0cSbf3
3e1QDzZzErXcsc2ytuojXTZV+dSXnJF8igODhPJibfeSWbiSB4K3sUxsBBNWw83/XqvxQngLcZcJ
P0vPzUmOQ7cIcnJ47WfLE3OyNJ/n8zzXsgf5aE5wx62znOPZQ99q0V7UDdQQpwi+Fv4cjr03/sc0
DvQuAyklk50/zzaLaJ5nzPJszNpHAdlhZ5udC+8/hTSy/mz9CtFpa++9jQmg3uNQTK4joMMLqOAw
DJf59g8QoEvjmjvDZbRmp96KGlUE3V2U+D6P1R0wkY3MhQAmFMoFLDpKV8Uy4+qUrtBEAmEwsdeN
hf+523cb/SxqEfWajDCgIKxLKM2GoXmMWEPwPIv3BIHx4dJ+q6ZVW2leUO+4eJkE600AiNerYyvC
+7e7VpEAShfVT53dea2Z7kG6B2jP3C+zpkGoGLcS+i6f1Mdrm73p/U5QQWqzCsbNUscdb00wXI4G
Xv9Elg9X7IX8zkY83EQkraz4BFnfvm/lWjCx5RHyCN+zaSjZR7U/JdgSPh0bwww8YSXN1zCEipm7
UlA4ivHjtVVyshI+oy0MN+EbnzYkL9bQC+cjE9csiitMmSOyMHmPHFP/55x+2h0ozkUdrBjViPVL
EU8=
=EYfu
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6401-1
October 04, 2023
freerdp2 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS (Available with Ubuntu Pro)
Summary:
Several security issues were fixed in FreeRDP.
Software Description:
- freerdp2: RDP client for Windows Terminal Services
Details:
It was discovered that FreeRDP did not properly manage certain inputs. A
malicious server could use this issue to cause FreeRDP clients to crash,
resulting in a denial of service, or possibly obtain sensitive
information. (cve-2023-39350, cve-2023-39351, CVE-2023-39353,
CVE-2023-39354, CVE-2023-40181, CVE-2023-40188, CVE-2023-40589)
It was discovered that FreeRDP did not properly manage certain inputs. A
malicious server could use this issue to cause FreeRDP clients to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(cve-2023-40186 CVE-2023-40567, CVE-2023-40569)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
libfreerdp2-2 2.10.0+dfsg1-1ubuntu0.2
Ubuntu 22.04 LTS:
libfreerdp2-2 2.6.1+dfsg1-3ubuntu2.4
libwinpr2-2 2.6.1+dfsg1-3ubuntu2.4
libwinpr2-dev 2.6.1+dfsg1-3ubuntu2.4
Ubuntu 20.04 LTS:
libfreerdp2-2 2.2.0+dfsg1-0ubuntu0.20.04.5
libwinpr2-2 2.2.0+dfsg1-0ubuntu0.20.04.5
libwinpr2-dev 2.2.0+dfsg1-0ubuntu0.20.04.5
Ubuntu 18.04 LTS (Available with Ubuntu Pro):
libfreerdp2-2 2.2.0+dfsg1-0ubuntu0.18.04.4+esm1
libwinpr2-2 2.2.0+dfsg1-0ubuntu0.18.04.4+esm1
libwinpr2-dev 2.2.0+dfsg1-0ubuntu0.18.04.4+esm1
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6401-1
CVE-2023-39350, CVE-2023-39351, CVE-2023-39353, CVE-2023-39354,
CVE-2023-40181, CVE-2023-40186, CVE-2023-40188, CVE-2023-40567,
CVE-2023-40569, CVE-2023-40589
Package Information:
https://launchpad.net/ubuntu/+source/freerdp2/2.10.0+dfsg1-1ubuntu0.2
https://launchpad.net/ubuntu/+source/freerdp2/2.6.1+dfsg1-3ubuntu2.4
https://launchpad.net/ubuntu/+source/freerdp2/2.2.0+dfsg1-0ubuntu0.20.04.5
Tuesday, October 3, 2023
[USN-6410-1] GRUB2 vulnerabilities
-----BEGIN PGP PUBLIC KEY BLOCK-----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=3tFx
-----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP SIGNATURE-----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=5dmc
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6410-1
October 04, 2023
grub2-signed, grub2-unsigned vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Summary:
Several security issues were fixed in GRUB2.
Software Description:
- grub2-signed: GRand Unified Bootloader
- grub2-unsigned: GRand Unified Bootloader
Details:
It was discovered that a specially crafted file system image could cause a
heap-based out-of-bounds write. A local attacker could potentially use this
to perform arbitrary code execution bypass and bypass secure boot
protections. (CVE-2023-4692)
It was discovered that a specially crafted file system image could cause an
out-of-bounds read. A physically-present attacker could possibly use this
to leak sensitive information to the GRUB pager. (CVE-2023-4693)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
grub-efi-amd64 2.06-2ubuntu17.2
grub-efi-amd64-bin 2.06-2ubuntu17.220:32
grub-efi-amd64-signed 1.193.2+2.06-2ubuntu17.2
grub-efi-arm64 2.06-2ubuntu17.2
grub-efi-arm64-bin 2.06-2ubuntu17.2
grub-efi-arm64-signed 1.193.2+2.06-2ubuntu17.2
Ubuntu 22.04 LTS:
grub-efi-amd64 2.06-2ubuntu14.4
grub-efi-amd64-bin 2.06-2ubuntu14.4
grub-efi-amd64-signed 1.187.6+2.06-2ubuntu14.4
grub-efi-arm64 2.06-2ubuntu14.4
grub-efi-arm64-bin 2.06-2ubuntu14.4
grub-efi-arm64-signed 1.187.6+2.06-2ubuntu14.4
Ubuntu 20.04 LTS:
grub-efi-amd64-signed 1.187.6~20.04.1+2.06-2ubuntu14.4
grub-efi-arm64-signed 1.187.6~20.04.1+2.06-2ubuntu14.4
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6410-1
CVE-2023-4692, CVE-2023-4693
Package Information:
https://launchpad.net/ubuntu/+source/grub2-signed/1.193.2
https://launchpad.net/ubuntu/+source/grub2-unsigned/2.06-2ubuntu17.2
https://launchpad.net/ubuntu/+source/grub2-signed/1.187.6
https://launchpad.net/ubuntu/+source/grub2-unsigned/2.06-2ubuntu14.4
https://launchpad.net/ubuntu/+source/grub2-signed/1.187.6~20.04.1
xsFNBGJo5iQBEADBDrePgICrxsoCWxlAiEKAgZgqeX1XhHxhDCkprNwOA9ZEU7G9
77BEHgYLSrAh3LraWYK+piBXBuHdg8KCUppUmEC4GtiHg+KxtxRjgZn/tjLD6vgZ
kwZYs0KXQVCK2bhSL0paEA78Xcx1B6xa8JArnjk87VoNl6RCjJESXkwlqGtQTEOp
bNxBy5Pd0T33xYeKcOz0GWY5ndkU1gD7NtMZdWZ8vcQclLquQO5OE33OhK78cU4Z
k4xFL5I5R4rBhlrOsw002bbD0+QI6wUKQByHfvcAz59eHS/wJOrAY/1p+IKql/4f
sRQQSRPSc+3CqELdxzF2s+AG0PciQms3RVYT6czH28Ce9C9BDAENga28FvQDf5Zi
STUeXZm0XJ9g+dLg+6FBPHp9wX+ybfAmIRXQlV4D6DledQAWjoBy3j09JOGQGSH0
S3EbQ68Qn2xyGBlYeFCZbMlKDN8NrpVCx9Jf6dDb3Qv2Do1yIIRu5x0vwKlNsQG0
NffMryLCQ0tVBNNiwqrHIbmZEhSUEmKf6u+zZsx1JMewe6fRw3hf3VOzENH5tGpZ
Z1Yg8m3E2yiXmPJ9cX3iZD0l7/L8CEiuMWt/q/NEDnKsGovi9N1r04Yxxo5lWoHr
+4taaOnC2C7YEHICIWx3lEU0lm24PbNG4QBJCJ8ctwG2rV3AMILCVSzW0QARAQAB
zSVNYXJrIEVzbGVyIDxtYXJrLmVzbGVyQGNhbm9uaWNhbC5jb20+wsGUBBMBCgA+
FiEELTsQ/oZuJMqL99Qt1guDyQUTvU8FAmJo5iQCGwMFCQPCZwAFCwkIBwIGFQoJ
CAsCBBYCAwECHgECF4AACgkQ1guDyQUTvU/Gqw/9F5ko+KS9CRXXcp4SkdhHB6aG
tD9rEJycEywPymmI+OwCJppmbQBzzwW7QGLHi8TTiWnWMSeikhSh0p9pPCc9rhLt
tYDlGZwoxXPt7PwS0k9JjITNviTNZD6uHIoYmFMxS65qdh7s7OSQj4+nTij1b+dV
qzaG4krGB/pav2D2adt4k02KfqIkPiLY0Jo+o8hKOx2HRh8xqEU/eySRtVvIx55c
D4Qh63KQv465Afz+QuKsbxuqA2iboUP/srYtMQtFi8TCF7/5gLwDbGDgOAYhIxyf
vgAH5dbBFB8lIMPjIeTbP0lE+xMHUmQsKhtYICnjhnGRJeT6vBlDFuUar5DYA3fI
m9LEAf1T1eMK4FBUSCv+cULlT9+rsHDbG6tiZU/BDp/mkKFs2Ax9W68+fgXy7bor
ixrgDhfSCsYWaxLsXW/GEmyCbp30PZlLr6kvfQq7CMEjeE79FEsef7/ppRH/t+mv
6p2xhb+DDbvqzcQZ7LQn3+PLxkR37spQRvevPxpx000CqTO5gV19w/2ZSPydm2Zd
44XSranzwDdD4o5ZsMXAPuCNlVAVzxAhxNj2QQL7xh9bdDDmM9Z7qBPwFX42n7mw
ryjBHqMtrSCSI8hupSh2B/bQSRyWd3/KQ2vlJMoq7H5EJiJYpb3blvb4tfoSfEag
PqYV1jJEcKImOGs988rOwU0EYmjmJAEQAL0wGwC8P1qj0fuLaFpPKBAFtxBqnJJc
c+63DjQ17/QJrYpKwGGkW6fz/Nn0nUDf88FdrHd7t6a9c3m82/gvsr8VjAD4SISp
DjPIpfCj5gWGAuhATWB0pwjWRsgFkIThaa0px6ZJFGdU9lJmi633Xsk4s9bws8kZ
pnwtk+StRueqcSElfLw1/gbu6EhcEH62iBb2qlRhgtntgy1dcnqDEQhcdccWSgna
+ZlDIo3Z75RWoIXxrtzUe9PDdG4Ou+k/H96mS7pZdmU6elbQlcDGYegYGH6OTYjv
Zyl81ACN9Y3Fcmc+luBMeuyQndHFnG6rjOwHr6iM9ZKRBq03QiAAp4vooPyLqG9n
ZmoeLH0Q7L2pVIwroVtsJvnjws5z3DujguZcLYCeA/WEXj8p0lYy9WVGrfJ7LyLp
+Uj7AdXFB6msED51Swb6QkpWrcC7V2COKZmfYGXFy7PdIwWeqgYjJ0zqEldHGDTD
V0yTuuER2bJ/T1WBVy9U46/KRUXYevgCZFGPbyO/vKLwKVbrbkimULMFcPJpKinF
PQs0ch7HA6PPog0wbux5Bm9O78lzYo/WFlvofFKTzfGEsnifCVXkcsu0Qp8m6DQZ
yeFO8SH3DHaHFaPKc3JYEFTdmP0PdvH8aqb5TVTb8G+hvxktDkCuCrlaoFVSCNhI
WfJ6rAxxYGuNABEBAAHCwXwEGAEKACYWIQQtOxD+hm4kyov31C3WC4PJBRO9TwUC
YmjmJAIbDAUJA8JnAAAKCRDWC4PJBRO9T3SnEACEprj9LsxvhbM6A/aLk3la8UD9
MYtLSmbl+KPGEvP0r7viPftolgV8O+tRG09Z7Wd/63WsHjA2Psgwdm49BziL8tCf
ONfVXCojPxR/uyL5ykPHSE/yC+mz3DTPWcncGCdteil6Cw43MHNCm2oYJ38VXAwV
9pikHeO5Pj5xukmc/bQr3v3NrDQI+AQpNbWs2r4vw+y01IidmMh12RkuGi2UYOga
jvfDeoSSEF7VJ6Qlij9UjatkbZpSHjn2rf+B9DdlkRNr5Vfd9/xaSFQoazdgNS/Q
HqOeZ+9HqNrUlHTH9BUaTkmV6MDXtEjVGfROXxXPw/q29QUzZUZE3agqmuxB3yar
PjW24mNu5Kd22rb06blTfBO0o7DOX9UwOVLfFLejfWAYANuXilcju9/3dHRsv6o9
9tGfRxJIMOPVY6JgswYISB7CwdA+Uda6UvU+qwYCRi7B8L13H3uhDKzA5sgRZnz2
oQw+bOB/ErZv78NVnhrdy9LAkLk0U8RVvH8sWPco4ZjQVou6wDMEsKaIlioU8x6n
YOi8LBpijWpaKEpCbU4nRdV/4d3eWr7tu1MWGcm70C6mrjypxI6TVCPg+gimjM4D
7LOpJKZJVGQg9JYPUhccp27Nn/3L2/Y9F3tKUfCTPHanOzHg4KNRRUr8CQD8qi+8
nWqztY9OeZjz0vagYM7BTQRiaOZoARAA6bzogRYAMYdwU2BsWFurvrghzEbqjguN
XwBiQ/90kXb3exYZvGXTCxdrV5FRjPU6eeX2TAyZRt6XnK6nyrZFlRAcXeWCeo05
d+mdK6fv4iOc/T0JeMZCrNm4BDjcGNOr7KImVQTNuoN9nVieVQSK/hRpSFPkNLbn
1oemHqZitxoI5HCBAVQrKR8d0REzn9Y1jdCHkhgSNaEcAww6CgF2Mlsw5txhmIh9
IZircfAzGU6lI1MgjPkDOFPDdwIoc8xtuAJB/G6gT8Ot9FQ3EMaV2zPTL7Jd1ZQR
hOrs75gjLlhOyYYb5Y3isaMKzUMYKQDFWrCws/sGEm2TwbD5gI6ipa2r71DcGijj
GJQITAQsS+rdUKBts+DPKfZR4nlLq41/utA4LJL2y33SFXeqylyIoKPs1FJ0JZyM
VXiWQyxAuPjYJPZbcSh8exj6rct/QVZgztSuvKxeaEqZ/xwkQ/uHWZxQy7lZxBbw
LCVH8HxVApD/tc3/U/jQjtQSblX3KnMia5rHjX+p9tYSSeLNPA99KNrqwLdDh9Mz
/Rm131NUHwlOEIpSeqDfs1+jQYy0QdZnxDHrIVnpIz6M8IVFRBo4LQmi0sPkzzEZ
A29s3+IzofztGXf+b+vZAmnOrQEgNPjdIVHfvQJVqcm1JdOzyuHEvN8IiV/90RAP
r2NqNrtRjQMAEQEAAcLBfAQYAQoAJhYhBC07EP6GbiTKi/fULdYLg8kFE71PBQJi
aOZoAhsgBQkDwmcAAAoJENYLg8kFE71PE2wQAK2ntrQ0902+a3KC/Ak7VhOTV0c0
my8e7mqesYRGXB158P7UJZS1grU6MjBbMsArFdshTRquSmEOnAB6ahnD+JNq+Jzf
9QKknvekzkjlC11FxTHMGncKnScsu8Vont+rFBA66JYLrh7my5CpzijTVTYC9HcA
SbnW0IzzJl90cVh5tC9S+m6Dh3kNcujWyJ8D+ceaEhwYE2LgbbDUSJa2p1tBiXQ6
SGu6nX0nyXL5p7zzRhAl/ao5cZ/FTijvdQe1Vzm7qArKj6A3ir5YOWzSnaCbfbSm
J2pPgZZCNybzStmcoZ73GgBJxIh89vixfBRLTJVECePLTw2gBmoxR1ziqs0pKW3H
y3VKBb+QMJAVmRwRlonMTgT5gHa8bCL8U7Qvx9jOrApOEqFee3dytIOoVsCUkNh0
vOKmlLuqrIopdbJm8F58qOV/eR5chfxax9jOSHkZ812LyMyxr8y6wn3d26XF4Ho1
tGRAYDI77qaLxaPbzIFas1t9X/+U+sz3Bg0exmi9/mp9wwvLJh3XOC+2MaHzBXGl
x+MvgOYIvEtZXVvfwjay19rhJRvn0D497VaVrhw7md5IbKY42h5qUCCzlHsqHEe5
YDxswWadH4fZhy+cEatf29lYJ2BaK+PIsmp22bxbxdGdoZ2cbqQXIko+3XxaiVp5
z7V5USx9zNkfsrbz
=3tFx
-----END PGP PUBLIC KEY BLOCK-----
-----BEGIN PGP SIGNATURE-----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=5dmc
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6410-1
October 04, 2023
grub2-signed, grub2-unsigned vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Summary:
Several security issues were fixed in GRUB2.
Software Description:
- grub2-signed: GRand Unified Bootloader
- grub2-unsigned: GRand Unified Bootloader
Details:
It was discovered that a specially crafted file system image could cause a
heap-based out-of-bounds write. A local attacker could potentially use this
to perform arbitrary code execution bypass and bypass secure boot
protections. (CVE-2023-4692)
It was discovered that a specially crafted file system image could cause an
out-of-bounds read. A physically-present attacker could possibly use this
to leak sensitive information to the GRUB pager. (CVE-2023-4693)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
grub-efi-amd64 2.06-2ubuntu17.2
grub-efi-amd64-bin 2.06-2ubuntu17.220:32
grub-efi-amd64-signed 1.193.2+2.06-2ubuntu17.2
grub-efi-arm64 2.06-2ubuntu17.2
grub-efi-arm64-bin 2.06-2ubuntu17.2
grub-efi-arm64-signed 1.193.2+2.06-2ubuntu17.2
Ubuntu 22.04 LTS:
grub-efi-amd64 2.06-2ubuntu14.4
grub-efi-amd64-bin 2.06-2ubuntu14.4
grub-efi-amd64-signed 1.187.6+2.06-2ubuntu14.4
grub-efi-arm64 2.06-2ubuntu14.4
grub-efi-arm64-bin 2.06-2ubuntu14.4
grub-efi-arm64-signed 1.187.6+2.06-2ubuntu14.4
Ubuntu 20.04 LTS:
grub-efi-amd64-signed 1.187.6~20.04.1+2.06-2ubuntu14.4
grub-efi-arm64-signed 1.187.6~20.04.1+2.06-2ubuntu14.4
In general, a standard system update will make all the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6410-1
CVE-2023-4692, CVE-2023-4693
Package Information:
https://launchpad.net/ubuntu/+source/grub2-signed/1.193.2
https://launchpad.net/ubuntu/+source/grub2-unsigned/2.06-2ubuntu17.2
https://launchpad.net/ubuntu/+source/grub2-signed/1.187.6
https://launchpad.net/ubuntu/+source/grub2-unsigned/2.06-2ubuntu14.4
https://launchpad.net/ubuntu/+source/grub2-signed/1.187.6~20.04.1
FreeBSD Security Advisory FreeBSD-SA-23:14.smccc
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
=============================================================================
FreeBSD-SA-23:14.smccc Security Advisory
The FreeBSD Project
Topic: arm64 boot CPUs may lack speculative execution protections
Category: core
Module: arm64
Announced: 2023-10-03
Affects: FreeBSD 13.2
Corrected: 2023-09-25 12:13:47 UTC (stable/13, 13.2-STABLE)
2023-10-03 21:29:11 UTC (releng/13.2, 13.2-RELEASE-p4)
CVE Name: CVE-2023-5370
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:https://security.FreeBSD.org/>.
I. Background
To mitigate speculative execution side channel attacks on some AArch64
hardware the kernel can call into the boot firmware using the Secure Monitor
Call Calling Convention (SMCCC) mechanism.
To decide if the kernel needs to use the SMCCC mitigation on a given CPU it
can query the firmware if the SMCCC workaround is present.
II. Problem Description
On CPU 0 the check for the SMCCC workaround is called before SMCCC support
has been initialized.
III. Impact
No speculative execution workarounds are installed on CPU 0.
IV. Workaround
No workaround is available. Not all AArch64 CPUs are affected.
Systems where CPU 0 has the CSV2 and PSTATE.SSBS processor
features are unaffected by the speculative execution attacks.
The kernel will print the following under CPU 0 on unaffected
CPUs:
Processor Features 0 = <...CVS2...>
Processor Features 1 = <...PSTATE.SSBS...>
The Arm Cortex-A35, Cortex-A53, and Cortex-A55 CPUs are
unaffected.
V. Solution
Upgrade your vulnerable system to a supported FreeBSD stable or
release / security branch (releng) dated after the correction date
and reboot.
Perform one of the following:
1) To update your vulnerable system via a binary patch:
Systems running a RELEASE version of FreeBSD on the amd64, i386, or
(on FreeBSD 13 and later) arm64 platforms can be updated via the
freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
# shutdown -r +10min "Rebooting for a security update"
2) To update your vulnerable system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
# fetch https://security.FreeBSD.org/patches/SA-23:14/smccc.patch
# fetch https://security.FreeBSD.org/patches/SA-23:14/smccc.patch.asc
# gpg --verify smccc.patch.asc
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
# patch < /path/to/patch
c) Recompile your kernel as described in
<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the
system.
VI. Correction details
This issue is corrected by the corresponding Git commit hash or Subversion
revision number in the following stable and release branches:
Branch/path Hash Revision
- -------------------------------------------------------------------------
stable/13/ 4df1447f2c76 stable/13-n256420
releng/13.2/ 485912e051bb releng/13.2-n254637
- -------------------------------------------------------------------------
Run the following command to see which files were modified by a
particular commit:
# git show --stat <commit hash>
Or visit the following URL, replacing NNNNNN with the hash:
<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>
To determine the commit count in a working tree (for comparison against
nNNNNNN in the table above), run:
# git rev-list --count --first-parent HEAD
VII. References
<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5370>
The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-23:14.smccc.asc>
-----BEGIN PGP SIGNATURE-----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=lOTX
-----END PGP SIGNATURE-----
Hash: SHA512
=============================================================================
FreeBSD-SA-23:14.smccc Security Advisory
The FreeBSD Project
Topic: arm64 boot CPUs may lack speculative execution protections
Category: core
Module: arm64
Announced: 2023-10-03
Affects: FreeBSD 13.2
Corrected: 2023-09-25 12:13:47 UTC (stable/13, 13.2-STABLE)
2023-10-03 21:29:11 UTC (releng/13.2, 13.2-RELEASE-p4)
CVE Name: CVE-2023-5370
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:https://security.FreeBSD.org/>.
I. Background
To mitigate speculative execution side channel attacks on some AArch64
hardware the kernel can call into the boot firmware using the Secure Monitor
Call Calling Convention (SMCCC) mechanism.
To decide if the kernel needs to use the SMCCC mitigation on a given CPU it
can query the firmware if the SMCCC workaround is present.
II. Problem Description
On CPU 0 the check for the SMCCC workaround is called before SMCCC support
has been initialized.
III. Impact
No speculative execution workarounds are installed on CPU 0.
IV. Workaround
No workaround is available. Not all AArch64 CPUs are affected.
Systems where CPU 0 has the CSV2 and PSTATE.SSBS processor
features are unaffected by the speculative execution attacks.
The kernel will print the following under CPU 0 on unaffected
CPUs:
Processor Features 0 = <...CVS2...>
Processor Features 1 = <...PSTATE.SSBS...>
The Arm Cortex-A35, Cortex-A53, and Cortex-A55 CPUs are
unaffected.
V. Solution
Upgrade your vulnerable system to a supported FreeBSD stable or
release / security branch (releng) dated after the correction date
and reboot.
Perform one of the following:
1) To update your vulnerable system via a binary patch:
Systems running a RELEASE version of FreeBSD on the amd64, i386, or
(on FreeBSD 13 and later) arm64 platforms can be updated via the
freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
# shutdown -r +10min "Rebooting for a security update"
2) To update your vulnerable system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
# fetch https://security.FreeBSD.org/patches/SA-23:14/smccc.patch
# fetch https://security.FreeBSD.org/patches/SA-23:14/smccc.patch.asc
# gpg --verify smccc.patch.asc
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
# patch < /path/to/patch
c) Recompile your kernel as described in
<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the
system.
VI. Correction details
This issue is corrected by the corresponding Git commit hash or Subversion
revision number in the following stable and release branches:
Branch/path Hash Revision
- -------------------------------------------------------------------------
stable/13/ 4df1447f2c76 stable/13-n256420
releng/13.2/ 485912e051bb releng/13.2-n254637
- -------------------------------------------------------------------------
Run the following command to see which files were modified by a
particular commit:
# git show --stat <commit hash>
Or visit the following URL, replacing NNNNNN with the hash:
<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>
To determine the commit count in a working tree (for comparison against
nNNNNNN in the table above), run:
# git rev-list --count --first-parent HEAD
VII. References
<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5370>
The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-23:14.smccc.asc>
-----BEGIN PGP SIGNATURE-----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=lOTX
-----END PGP SIGNATURE-----
FreeBSD Security Advisory FreeBSD-SA-23:13.capsicum
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
=============================================================================
FreeBSD-SA-23:13.capsicum Security Advisory
The FreeBSD Project
Topic: copy_file_range insufficient capability rights check
Category: core
Module: capsicum
Announced: 2023-10-03
Credits: David Chisnall
Affects: FreeBSD 13.2
Corrected: 2023-10-02 16:00:27 UTC (stable/13, 13.2-STABLE)
2023-10-03 21:24:41 UTC (releng/13.2, 13.2-RELEASE-p4)
CVE Name: CVE-2023-5369
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:https://security.FreeBSD.org/>.
I. Background
Capsicum is a lightweight OS capability and sandbox framework. It provides
two kernel primatives, capability mode and capabilities. Capabilities limit
operations that can be performed on file descriptors.
copy_file_range is a system call that performs a kernel copy of a byte range
from one file to another or within one file. copy_file_range accepts
optional pointers to offsets for the input and output file descriptors.
II. Problem Description
The syscall checked only for the CAP_READ and CAP_WRITE capabilities on the
input and output file descriptors, respectively. Using an offset is
logically equivalent to seeking, and the syscall must additionally require
the CAP_SEEK capability.
III. Impact
A sandboxed process with only read or write but no seek capability on a file
descriptor may be able to read data from or write data to an arbitrary
location within the file corresponding to that file descriptor.
IV. Workaround
No workaround is available.
V. Solution
Upgrade your vulnerable system to a supported FreeBSD stable or
release / security branch (releng) dated after the correction date,
and reboot.
Perform one of the following:
1) To update your vulnerable system via a binary patch:
Systems running a RELEASE version of FreeBSD on the amd64, i386, or
(on FreeBSD 13 and later) arm64 platforms can be updated via the
freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
# shutdown -r +10min "Rebooting for a security update"
2) To update your vulnerable system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
# fetch https://security.FreeBSD.org/patches/SA-23:13/capsicum.patch
# fetch https://security.FreeBSD.org/patches/SA-23:13/capsicum.patch.asc
# gpg --verify capsicum.patch.asc
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
# patch < /path/to/patch
c) Recompile your kernel as described in
<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the
system.
VI. Correction details
This issue is corrected by the corresponding Git commit hash or Subversion
revision number in the following stable and release branches:
Branch/path Hash Revision
- -------------------------------------------------------------------------
stable/13/ 3f0ce63828dc stable/13-n256458
releng/13.2/ 2d23f6c33431 releng/13.2-n254636
- -------------------------------------------------------------------------
Run the following command to see which files were modified by a
particular commit:
# git show --stat <commit hash>
Or visit the following URL, replacing NNNNNN with the hash:
<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>
To determine the commit count in a working tree (for comparison against
nNNNNNN in the table above), run:
# git rev-list --count --first-parent HEAD
VII. References
<URL:https://reviews.freebsd.org/D41967>
<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5369>
The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-23:13.capsicum.asc>
-----BEGIN PGP SIGNATURE-----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=lS69
-----END PGP SIGNATURE-----
Hash: SHA512
=============================================================================
FreeBSD-SA-23:13.capsicum Security Advisory
The FreeBSD Project
Topic: copy_file_range insufficient capability rights check
Category: core
Module: capsicum
Announced: 2023-10-03
Credits: David Chisnall
Affects: FreeBSD 13.2
Corrected: 2023-10-02 16:00:27 UTC (stable/13, 13.2-STABLE)
2023-10-03 21:24:41 UTC (releng/13.2, 13.2-RELEASE-p4)
CVE Name: CVE-2023-5369
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:https://security.FreeBSD.org/>.
I. Background
Capsicum is a lightweight OS capability and sandbox framework. It provides
two kernel primatives, capability mode and capabilities. Capabilities limit
operations that can be performed on file descriptors.
copy_file_range is a system call that performs a kernel copy of a byte range
from one file to another or within one file. copy_file_range accepts
optional pointers to offsets for the input and output file descriptors.
II. Problem Description
The syscall checked only for the CAP_READ and CAP_WRITE capabilities on the
input and output file descriptors, respectively. Using an offset is
logically equivalent to seeking, and the syscall must additionally require
the CAP_SEEK capability.
III. Impact
A sandboxed process with only read or write but no seek capability on a file
descriptor may be able to read data from or write data to an arbitrary
location within the file corresponding to that file descriptor.
IV. Workaround
No workaround is available.
V. Solution
Upgrade your vulnerable system to a supported FreeBSD stable or
release / security branch (releng) dated after the correction date,
and reboot.
Perform one of the following:
1) To update your vulnerable system via a binary patch:
Systems running a RELEASE version of FreeBSD on the amd64, i386, or
(on FreeBSD 13 and later) arm64 platforms can be updated via the
freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
# shutdown -r +10min "Rebooting for a security update"
2) To update your vulnerable system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
# fetch https://security.FreeBSD.org/patches/SA-23:13/capsicum.patch
# fetch https://security.FreeBSD.org/patches/SA-23:13/capsicum.patch.asc
# gpg --verify capsicum.patch.asc
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
# patch < /path/to/patch
c) Recompile your kernel as described in
<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the
system.
VI. Correction details
This issue is corrected by the corresponding Git commit hash or Subversion
revision number in the following stable and release branches:
Branch/path Hash Revision
- -------------------------------------------------------------------------
stable/13/ 3f0ce63828dc stable/13-n256458
releng/13.2/ 2d23f6c33431 releng/13.2-n254636
- -------------------------------------------------------------------------
Run the following command to see which files were modified by a
particular commit:
# git show --stat <commit hash>
Or visit the following URL, replacing NNNNNN with the hash:
<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>
To determine the commit count in a working tree (for comparison against
nNNNNNN in the table above), run:
# git rev-list --count --first-parent HEAD
VII. References
<URL:https://reviews.freebsd.org/D41967>
<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5369>
The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-23:13.capsicum.asc>
-----BEGIN PGP SIGNATURE-----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=lS69
-----END PGP SIGNATURE-----
FreeBSD Security Advisory FreeBSD-SA-23:12.msdosfs
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
=============================================================================
FreeBSD-SA-23:12.msdosfs Security Advisory
The FreeBSD Project
Topic: msdosfs data disclosure
Category: core
Module: msdosfs (FAT) file system driver
Announced: 2023-10-03
Credits: Maxim Suhanov
Affects: All supported versions of FreeBSD.
Corrected: 2023-07-18 05:46:13 UTC (stable/13, 13.2-STABLE)
2023-10-03 21:23:40 UTC (releng/13.2, 13.2-RELEASE-p4)
2023-09-11 18:51:21 UTC (stable/12, 12.4-STABLE)
2023-10-03 22:15:40 UTC (releng/12.4, 12.4-RELEASE-p6)
CVE Name: CVE-2023-5368
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:https://security.FreeBSD.org/>.
I. Background
The msdosfs driver provides read and write access to MS-DOS (FAT) file
systems. Systems may be configured to allow unprivileged users to have
read and write access to mounted msdosfs file systems.
II. Problem Description
In certain cases using the truncate or ftruncate system call to extend a
file size populates the additional space in the file with unallocated data
from the underlying disk device, rather than zero bytes.
III. Impact
A user with write access to files on a msdosfs file system may be able to
read unintended data (for example, from a previously deleted file).
IV. Workaround
No workaround is available.
V. Solution
Upgrade your vulnerable system to a supported FreeBSD stable or
release / security branch (releng) dated after the correction date,
and reboot.
Perform one of the following:
1) To update your vulnerable system via a binary patch:
Systems running a RELEASE version of FreeBSD on the amd64, i386, or
(on FreeBSD 13 and later) arm64 platforms can be updated via the
freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
# shutdown -r +10min "Rebooting for a security update"
2) To update your vulnerable system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
[FreeBSD 13.2]
# fetch https://security.FreeBSD.org/patches/SA-23:12/msdosfs.13.2.patch
# fetch https://security.FreeBSD.org/patches/SA-23:12/msdosfs.13.2.patch.asc
# gpg --verify msdosfs.13.2.patch.asc
[FreeBSD 12.4]
# fetch https://security.FreeBSD.org/patches/SA-23:12/msdosfs.12.4.patch
# fetch https://security.FreeBSD.org/patches/SA-23:12/msdosfs.12.4.patch.asc
# gpg --verify msdosfs.12.4.patch.asc
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
# patch < /path/to/patch
c) Recompile your kernel as described in
<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the
system.
VI. Correction details
This issue is corrected by the corresponding Git commit hash or Subversion
revision number in the following stable and release branches:
Branch/path Hash Revision
- -------------------------------------------------------------------------
stable/13/ 868f3eadc5e0 stable/13-n255824
releng/13.2/ 7d08a7e6908b releng/13.2-n254635
stable/12/ r373207
releng/12.4/ r373233
- -------------------------------------------------------------------------
For FreeBSD 13 and later:
Run the following command to see which files were modified by a
particular commit:
# git show --stat <commit hash>
Or visit the following URL, replacing NNNNNN with the hash:
<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>
To determine the commit count in a working tree (for comparison against
nNNNNNN in the table above), run:
# git rev-list --count --first-parent HEAD
For FreeBSD 12 and earlier:
Run the following command to see which files were modified by a particular
revision, replacing NNNNNN with the revision number:
# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
Or visit the following URL, replacing NNNNNN with the revision number:
<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>
VII. References
<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5368>
The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-23:12.msdosfs.asc>
-----BEGIN PGP SIGNATURE-----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=T0YO
-----END PGP SIGNATURE-----
Hash: SHA512
=============================================================================
FreeBSD-SA-23:12.msdosfs Security Advisory
The FreeBSD Project
Topic: msdosfs data disclosure
Category: core
Module: msdosfs (FAT) file system driver
Announced: 2023-10-03
Credits: Maxim Suhanov
Affects: All supported versions of FreeBSD.
Corrected: 2023-07-18 05:46:13 UTC (stable/13, 13.2-STABLE)
2023-10-03 21:23:40 UTC (releng/13.2, 13.2-RELEASE-p4)
2023-09-11 18:51:21 UTC (stable/12, 12.4-STABLE)
2023-10-03 22:15:40 UTC (releng/12.4, 12.4-RELEASE-p6)
CVE Name: CVE-2023-5368
For general information regarding FreeBSD Security Advisories,
including descriptions of the fields above, security branches, and the
following sections, please visit <URL:https://security.FreeBSD.org/>.
I. Background
The msdosfs driver provides read and write access to MS-DOS (FAT) file
systems. Systems may be configured to allow unprivileged users to have
read and write access to mounted msdosfs file systems.
II. Problem Description
In certain cases using the truncate or ftruncate system call to extend a
file size populates the additional space in the file with unallocated data
from the underlying disk device, rather than zero bytes.
III. Impact
A user with write access to files on a msdosfs file system may be able to
read unintended data (for example, from a previously deleted file).
IV. Workaround
No workaround is available.
V. Solution
Upgrade your vulnerable system to a supported FreeBSD stable or
release / security branch (releng) dated after the correction date,
and reboot.
Perform one of the following:
1) To update your vulnerable system via a binary patch:
Systems running a RELEASE version of FreeBSD on the amd64, i386, or
(on FreeBSD 13 and later) arm64 platforms can be updated via the
freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
# shutdown -r +10min "Rebooting for a security update"
2) To update your vulnerable system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
[FreeBSD 13.2]
# fetch https://security.FreeBSD.org/patches/SA-23:12/msdosfs.13.2.patch
# fetch https://security.FreeBSD.org/patches/SA-23:12/msdosfs.13.2.patch.asc
# gpg --verify msdosfs.13.2.patch.asc
[FreeBSD 12.4]
# fetch https://security.FreeBSD.org/patches/SA-23:12/msdosfs.12.4.patch
# fetch https://security.FreeBSD.org/patches/SA-23:12/msdosfs.12.4.patch.asc
# gpg --verify msdosfs.12.4.patch.asc
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
# patch < /path/to/patch
c) Recompile your kernel as described in
<URL:https://www.FreeBSD.org/handbook/kernelconfig.html> and reboot the
system.
VI. Correction details
This issue is corrected by the corresponding Git commit hash or Subversion
revision number in the following stable and release branches:
Branch/path Hash Revision
- -------------------------------------------------------------------------
stable/13/ 868f3eadc5e0 stable/13-n255824
releng/13.2/ 7d08a7e6908b releng/13.2-n254635
stable/12/ r373207
releng/12.4/ r373233
- -------------------------------------------------------------------------
For FreeBSD 13 and later:
Run the following command to see which files were modified by a
particular commit:
# git show --stat <commit hash>
Or visit the following URL, replacing NNNNNN with the hash:
<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>
To determine the commit count in a working tree (for comparison against
nNNNNNN in the table above), run:
# git rev-list --count --first-parent HEAD
For FreeBSD 12 and earlier:
Run the following command to see which files were modified by a particular
revision, replacing NNNNNN with the revision number:
# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
Or visit the following URL, replacing NNNNNN with the revision number:
<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>
VII. References
<URL:https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5368>
The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-SA-23:12.msdosfs.asc>
-----BEGIN PGP SIGNATURE-----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=T0YO
-----END PGP SIGNATURE-----
FreeBSD Errata Notice FreeBSD-EN-23:12.freebsd-update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
=============================================================================
FreeBSD-EN-23:12.freebsd-update Errata Notice
The FreeBSD Project
Topic: freebsd-update to 14.0 fails
Category: core
Module: freebsd-update
Announced: 2023-10-03
Affects: All supported versions of FreeBSD.
Corrected: 2023-10-01 16:33:03 UTC (stable/13, 13.2-STABLE)
2023-10-03 21:22:19 UTC (releng/13.2, 13.2-RELEASE-p4)
2023-10-01 16:35:16 UTC (stable/12, 12.4-STABLE)
2023-10-03 22:15:37 UTC (releng/12.4, 12.4-RELEASE-p6)
For general information regarding FreeBSD Errata Notices and Security
Advisories, including descriptions of the fields above, security
branches, and the following sections, please visit
<URL:https://security.FreeBSD.org/>.
I. Background
freebsd-update provides binary updates for supported releases of FreeBSD on
amd64, arm64, and i386.
II. Problem Description
freebsd-update was unable to handle the case where a file in the "old"
version changed to a directory in the "new" version. This case occurs with
upgrades to FreeBSD 14.0, as /usr/include/c++/v1/__string exists as a file
in 12.4 and 13.2, and as a directory in FreeBSD 14.0.
III. Impact
Using freebsd-update to upgrade to FreeBSD 14.0 emits errors during install
and results in a system with broken C++ headers.
IV. Workaround
No workaround is available.
V. Solution
Upgrade your system to a supported FreeBSD stable or release / security
branch (releng) dated after the correction date.
Perform one of the following:
1) To update your system via a binary patch:
Systems running a RELEASE version of FreeBSD on the amd64, i386, or
(on FreeBSD 13 and later) arm64 platforms can be updated via the
freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
2) To update your system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
# fetch https://security.FreeBSD.org/patches/EN-23:12/freebsd-update.patch
# fetch https://security.FreeBSD.org/patches/EN-23:12/freebsd-update.patch.asc
# gpg --verify freebsd-update.patch.asc
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
# patch < /path/to/patch
c) Recompile the operating system using buildworld and installworld as
described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.
VI. Correction details
This issue is corrected by the corresponding Git commit hash or Subversion
revision number in the following stable and release branches:
Branch/path Hash Revision
- -------------------------------------------------------------------------
stable/13/ 774cc6348a50 stable/13-n256442
releng/13.2/ cfb624d7e250 releng/13.2-n254634
stable/12/ r373223
releng/12.4/ r373232
- -------------------------------------------------------------------------
For FreeBSD 13 and later:
Run the following command to see which files were modified by a
particular commit:
# git show --stat <commit hash>
Or visit the following URL, replacing NNNNNN with the hash:
<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>
To determine the commit count in a working tree (for comparison against
nNNNNNN in the table above), run:
# git rev-list --count --first-parent HEAD
For FreeBSD 12 and earlier:
Run the following command to see which files were modified by a particular
revision, replacing NNNNNN with the revision number:
# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
Or visit the following URL, replacing NNNNNN with the revision number:
<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>
VII. References
<URL:https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=273661>
The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-12:12.freebsd-update.asc>
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEthUnfoEIffdcgYM7bljekB8AGu8FAmUclUgACgkQbljekB8A
Gu+9fRAArZE0IrnLNZedxplzPbqrhErZAvomp04D+FR/FGiawgSuItfYmmX7sfxG
6MDlnfsIiumrxjWPr7btxN6tD9ouo6M1LLEz2WKRdRJfuhXsghjyP8TqSGb7DBZG
wIThOxz5akSVGLAWF2ShRGe42bloNfSJjnYWos0bkHpKo/m8ljOMbkQU9kjvsLXR
jV6vYvWJAkPanGJ30g4Hu1tucPUReCbnXRUJ66MzsAerQPRCYoCYx7to4ljPnwN2
RBOKSeB+yE5ShVwOSCREcPYlsnE/ah7ayb0P4Vcskfy1CT7bN+yK8+DTfHCdICgr
R4h0FcmSXGls7S7OmewUZYjqnJHkpE6AH3s+fennOGB3Fv06QX7xxrP3l/5jqFgc
ffONEv0mYMDE49PnXTttXZL/trIBLWbqIO8KOGlQneOXciQYokbw4hZnyK0G64mn
M/bszNU2gjwei5BvlcCQLs9n84TgTRhfLPJMR+QFK5bNMlZM/b5/wETYjbqZBEDX
rjUsIuUzkLKAJr9MA4BItCGhRMjkViRJ06WcfLsSOdlNrNF7vBfGtcLbt7BiyWos
P4VPMPVKdt3XBR5c4EAC2y4j0s+On2Ts0SMqBXwmQ5/D+gGlIdPgHLMrq8gbvN0Q
ZF/qdH6EWIFLHAmBcWxYmqRhzmPeV3y8RrHxaPriffb6ko9KW4s=
=SfBw
-----END PGP SIGNATURE-----
Hash: SHA512
=============================================================================
FreeBSD-EN-23:12.freebsd-update Errata Notice
The FreeBSD Project
Topic: freebsd-update to 14.0 fails
Category: core
Module: freebsd-update
Announced: 2023-10-03
Affects: All supported versions of FreeBSD.
Corrected: 2023-10-01 16:33:03 UTC (stable/13, 13.2-STABLE)
2023-10-03 21:22:19 UTC (releng/13.2, 13.2-RELEASE-p4)
2023-10-01 16:35:16 UTC (stable/12, 12.4-STABLE)
2023-10-03 22:15:37 UTC (releng/12.4, 12.4-RELEASE-p6)
For general information regarding FreeBSD Errata Notices and Security
Advisories, including descriptions of the fields above, security
branches, and the following sections, please visit
<URL:https://security.FreeBSD.org/>.
I. Background
freebsd-update provides binary updates for supported releases of FreeBSD on
amd64, arm64, and i386.
II. Problem Description
freebsd-update was unable to handle the case where a file in the "old"
version changed to a directory in the "new" version. This case occurs with
upgrades to FreeBSD 14.0, as /usr/include/c++/v1/__string exists as a file
in 12.4 and 13.2, and as a directory in FreeBSD 14.0.
III. Impact
Using freebsd-update to upgrade to FreeBSD 14.0 emits errors during install
and results in a system with broken C++ headers.
IV. Workaround
No workaround is available.
V. Solution
Upgrade your system to a supported FreeBSD stable or release / security
branch (releng) dated after the correction date.
Perform one of the following:
1) To update your system via a binary patch:
Systems running a RELEASE version of FreeBSD on the amd64, i386, or
(on FreeBSD 13 and later) arm64 platforms can be updated via the
freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
2) To update your system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
# fetch https://security.FreeBSD.org/patches/EN-23:12/freebsd-update.patch
# fetch https://security.FreeBSD.org/patches/EN-23:12/freebsd-update.patch.asc
# gpg --verify freebsd-update.patch.asc
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
# patch < /path/to/patch
c) Recompile the operating system using buildworld and installworld as
described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.
VI. Correction details
This issue is corrected by the corresponding Git commit hash or Subversion
revision number in the following stable and release branches:
Branch/path Hash Revision
- -------------------------------------------------------------------------
stable/13/ 774cc6348a50 stable/13-n256442
releng/13.2/ cfb624d7e250 releng/13.2-n254634
stable/12/ r373223
releng/12.4/ r373232
- -------------------------------------------------------------------------
For FreeBSD 13 and later:
Run the following command to see which files were modified by a
particular commit:
# git show --stat <commit hash>
Or visit the following URL, replacing NNNNNN with the hash:
<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>
To determine the commit count in a working tree (for comparison against
nNNNNNN in the table above), run:
# git rev-list --count --first-parent HEAD
For FreeBSD 12 and earlier:
Run the following command to see which files were modified by a particular
revision, replacing NNNNNN with the revision number:
# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
Or visit the following URL, replacing NNNNNN with the revision number:
<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>
VII. References
<URL:https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=273661>
The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-12:12.freebsd-update.asc>
-----BEGIN PGP SIGNATURE-----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=SfBw
-----END PGP SIGNATURE-----
FreeBSD Errata Notice FreeBSD-EN-23:09.freebsd-update [REVISED]
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
=============================================================================
FreeBSD-EN-23:09.freebsd-update Errata Notice
The FreeBSD Project
Topic: freebsd-update incorrectly merges files on upgrade
Category: core
Module: freebsd-update
Announced: 2023-09-06
Affects: FreeBSD 13.2
Corrected: 2023-05-16 21:34:10 UTC (stable/13, 13.2-STABLE)
2023-09-06 16:56:24 UTC (releng/13.2, 13.2-RELEASE-p3)
2023-09-28 13:42:18 UTC (stable/12, 12.4-STABLE)
2023-10-03 22:15:35 UTC (releng/12.4, 12.4-RELEASE-p6)
For general information regarding FreeBSD Errata Notices and Security
Advisories, including descriptions of the fields above, security
branches, and the following sections, please visit
<URL:https://security.FreeBSD.org/>.
2023-09-06 Initial Revision
2023-10-03 Updated to include the patch for 12.4-RELEASE.
I. Background
freebsd-update provides binary updates for supported releases of FreeBSD on
amd64, arm64, and i386.
II. Problem Description
freebsd-update incorrectly deleted files in /etc/ in the event the file to be
updated matched the new release and was different than the old release. This
has not been an issue previously because the $FreeBSD$ tag expansion from
subversion virtually guaranteed the existing file was going to be different
from the new release. With the conversion to git in the 13.x releases,
$FreeBSD$ is no longer expanded, making it much more likely that a file would
find this issue.
III. Impact
Unmodified files in /etc/ may be deleted on running freebsd-update upgrade.
IV. Workaround
No workaround is available.
V. Solution
Upgrade your system to a supported FreeBSD stable or release / security
branch (releng) dated after the correction date.
Perform one of the following:
1) To update your system via a binary patch:
Systems running a RELEASE version of FreeBSD on the amd64, i386, or
(on FreeBSD 13 and later) arm64 platforms can be updated via the
freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
2) To update your system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
# fetch https://security.FreeBSD.org/patches/EN-23:09/freebsd-update.patch
# fetch https://security.FreeBSD.org/patches/EN-23:09/freebsd-update.patch.asc
# gpg --verify freebsd-update.patch.asc
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
# patch < /path/to/patch
c) Recompile the operating system using buildworld and installworld as
described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.
VI. Correction details
This issue is corrected by the corresponding Git commit hash or Subversion
revision number in the following stable and release branches:
Branch/path Hash Revision
- -------------------------------------------------------------------------
stable/13/ 866e5c6b3ce7 stable/13-n255386
releng/13.2/ 0b39d9de2e71 releng/13.2-n254628
stable/12/ r373221
releng/12.4/ r373231
- -------------------------------------------------------------------------
For FreeBSD 13 and later:
Run the following command to see which files were modified by a
particular commit:
# git show --stat <commit hash>
Or visit the following URL, replacing NNNNNN with the hash:
<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>
To determine the commit count in a working tree (for comparison against
nNNNNNN in the table above), run:
# git rev-list --count --first-parent HEAD
For FreeBSD 12 and earlier:
Run the following command to see which files were modified by a particular
revision, replacing NNNNNN with the revision number:
# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
Or visit the following URL, replacing NNNNNN with the revision number:
<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>
VII. References
<URL:https://reviews.freebsd.org/D39973>
The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-23:09.freebsd-update.asc>
-----BEGIN PGP SIGNATURE-----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=wkOB
-----END PGP SIGNATURE-----
Hash: SHA512
=============================================================================
FreeBSD-EN-23:09.freebsd-update Errata Notice
The FreeBSD Project
Topic: freebsd-update incorrectly merges files on upgrade
Category: core
Module: freebsd-update
Announced: 2023-09-06
Affects: FreeBSD 13.2
Corrected: 2023-05-16 21:34:10 UTC (stable/13, 13.2-STABLE)
2023-09-06 16:56:24 UTC (releng/13.2, 13.2-RELEASE-p3)
2023-09-28 13:42:18 UTC (stable/12, 12.4-STABLE)
2023-10-03 22:15:35 UTC (releng/12.4, 12.4-RELEASE-p6)
For general information regarding FreeBSD Errata Notices and Security
Advisories, including descriptions of the fields above, security
branches, and the following sections, please visit
<URL:https://security.FreeBSD.org/>.
2023-09-06 Initial Revision
2023-10-03 Updated to include the patch for 12.4-RELEASE.
I. Background
freebsd-update provides binary updates for supported releases of FreeBSD on
amd64, arm64, and i386.
II. Problem Description
freebsd-update incorrectly deleted files in /etc/ in the event the file to be
updated matched the new release and was different than the old release. This
has not been an issue previously because the $FreeBSD$ tag expansion from
subversion virtually guaranteed the existing file was going to be different
from the new release. With the conversion to git in the 13.x releases,
$FreeBSD$ is no longer expanded, making it much more likely that a file would
find this issue.
III. Impact
Unmodified files in /etc/ may be deleted on running freebsd-update upgrade.
IV. Workaround
No workaround is available.
V. Solution
Upgrade your system to a supported FreeBSD stable or release / security
branch (releng) dated after the correction date.
Perform one of the following:
1) To update your system via a binary patch:
Systems running a RELEASE version of FreeBSD on the amd64, i386, or
(on FreeBSD 13 and later) arm64 platforms can be updated via the
freebsd-update(8) utility:
# freebsd-update fetch
# freebsd-update install
2) To update your system via a source code patch:
The following patches have been verified to apply to the applicable
FreeBSD release branches.
a) Download the relevant patch from the location below, and verify the
detached PGP signature using your PGP utility.
# fetch https://security.FreeBSD.org/patches/EN-23:09/freebsd-update.patch
# fetch https://security.FreeBSD.org/patches/EN-23:09/freebsd-update.patch.asc
# gpg --verify freebsd-update.patch.asc
b) Apply the patch. Execute the following commands as root:
# cd /usr/src
# patch < /path/to/patch
c) Recompile the operating system using buildworld and installworld as
described in <URL:https://www.FreeBSD.org/handbook/makeworld.html>.
VI. Correction details
This issue is corrected by the corresponding Git commit hash or Subversion
revision number in the following stable and release branches:
Branch/path Hash Revision
- -------------------------------------------------------------------------
stable/13/ 866e5c6b3ce7 stable/13-n255386
releng/13.2/ 0b39d9de2e71 releng/13.2-n254628
stable/12/ r373221
releng/12.4/ r373231
- -------------------------------------------------------------------------
For FreeBSD 13 and later:
Run the following command to see which files were modified by a
particular commit:
# git show --stat <commit hash>
Or visit the following URL, replacing NNNNNN with the hash:
<URL:https://cgit.freebsd.org/src/commit/?id=NNNNNN>
To determine the commit count in a working tree (for comparison against
nNNNNNN in the table above), run:
# git rev-list --count --first-parent HEAD
For FreeBSD 12 and earlier:
Run the following command to see which files were modified by a particular
revision, replacing NNNNNN with the revision number:
# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base
Or visit the following URL, replacing NNNNNN with the revision number:
<URL:https://svnweb.freebsd.org/base?view=revision&revision=NNNNNN>
VII. References
<URL:https://reviews.freebsd.org/D39973>
The latest revision of this advisory is available at
<URL:https://security.FreeBSD.org/advisories/FreeBSD-EN-23:09.freebsd-update.asc>
-----BEGIN PGP SIGNATURE-----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=wkOB
-----END PGP SIGNATURE-----
[USN-6386-3] Linux kernel vulnerabilities
-----BEGIN PGP SIGNATURE-----
wsB5BAABCAAjFiEEYrygdx1GDec9TV8EZ0GeRcM5nt0FAmUcf/0FAwAAAAAACgkQZ0GeRcM5nt3w
Lwf/R+vEv1538lUhFX4T1hh7Ap/ct5jPhqANwH+hpOXuHt57+wEOhrS19K4bDcPkShXkh9IWTpiT
QZ3GPz5vG5nOrhRPoCouc7jV1utnbMMiA9cOWBiH6o2Y132F7cN6wmOEsGrp2KKQYj/obY/Y4Opi
TIJBAMY1Brr7vO4p01MoHF8qkeRbuef64RnnYUyzsil2DExlFp8URb3LWWqGksJJ3rQENu1C0XsD
NrCHArzBw0F58R5Q2Ml+neW7c7MUxai1aJ8eBzgejD0GcOw41sVVdLrso9BFT9zcLaUa8h9BIyQ+
zXqFECKL8Tj6V3XeXBg8VmFwOzKEOkcQwdyoxEhOLw==
=MRtw
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6386-3
October 03, 2023
linux-intel-iotg, linux-intel-iotg-5.15, linux-oracle, linux-oracle-5.15
vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux-intel-iotg: Linux kernel for Intel IoT platforms
- linux-oracle: Linux kernel for Oracle Cloud systems
- linux-intel-iotg-5.15: Linux kernel for Intel IoT platforms
- linux-oracle-5.15: Linux kernel for Oracle Cloud systems
Details:
Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii
Oleksenko discovered that some AMD processors could leak stale data from
division operations in certain situations. A local attacker could possibly
use this to expose sensitive information. (CVE-2023-20588)
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly handle L2CAP socket release, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-40283)
It was discovered that some network classifier implementations in the Linux
kernel contained use-after-free vulnerabilities. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2023-4128)
Lonial Con discovered that the netfilter subsystem in the Linux kernel
contained a memory leak when handling certain element flush operations. A
local attacker could use this to expose sensitive information (kernel
memory). (CVE-2023-4569)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS:
linux-image-5.15.0-1040-intel-iotg 5.15.0-1040.46
linux-image-5.15.0-1044-oracle 5.15.0-1044.50
linux-image-intel-iotg 5.15.0.1040.40
linux-image-oracle 5.15.0.1044.39
linux-image-oracle-lts-22.04 5.15.0.1044.39
Ubuntu 20.04 LTS:
linux-image-5.15.0-1040-intel-iotg 5.15.0-1040.46~20.04.1
linux-image-5.15.0-1044-oracle 5.15.0-1044.50~20.04.1
linux-image-intel 5.15.0.1040.46~20.04.31
linux-image-intel-iotg 5.15.0.1040.46~20.04.31
linux-image-oracle 5.15.0.1044.50~20.04.1
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-6386-3
https://ubuntu.com/security/notices/USN-6386-1
CVE-2023-20588, CVE-2023-40283, CVE-2023-4128, CVE-2023-4569
Package Information:
https://launchpad.net/ubuntu/+source/linux-intel-iotg/5.15.0-1040.46
https://launchpad.net/ubuntu/+source/linux-oracle/5.15.0-1044.50
https://launchpad.net/ubuntu/+source/linux-intel-iotg-5.15/5.15.0-1040.46~20.04.1
https://launchpad.net/ubuntu/+source/linux-oracle-5.15/5.15.0-1044.50~20.04.1
wsB5BAABCAAjFiEEYrygdx1GDec9TV8EZ0GeRcM5nt0FAmUcf/0FAwAAAAAACgkQZ0GeRcM5nt3w
Lwf/R+vEv1538lUhFX4T1hh7Ap/ct5jPhqANwH+hpOXuHt57+wEOhrS19K4bDcPkShXkh9IWTpiT
QZ3GPz5vG5nOrhRPoCouc7jV1utnbMMiA9cOWBiH6o2Y132F7cN6wmOEsGrp2KKQYj/obY/Y4Opi
TIJBAMY1Brr7vO4p01MoHF8qkeRbuef64RnnYUyzsil2DExlFp8URb3LWWqGksJJ3rQENu1C0XsD
NrCHArzBw0F58R5Q2Ml+neW7c7MUxai1aJ8eBzgejD0GcOw41sVVdLrso9BFT9zcLaUa8h9BIyQ+
zXqFECKL8Tj6V3XeXBg8VmFwOzKEOkcQwdyoxEhOLw==
=MRtw
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-6386-3
October 03, 2023
linux-intel-iotg, linux-intel-iotg-5.15, linux-oracle, linux-oracle-5.15
vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux-intel-iotg: Linux kernel for Intel IoT platforms
- linux-oracle: Linux kernel for Oracle Cloud systems
- linux-intel-iotg-5.15: Linux kernel for Intel IoT platforms
- linux-oracle-5.15: Linux kernel for Oracle Cloud systems
Details:
Jana Hofmann, Emanuele Vannacci, Cedric Fournet, Boris Kopf, and Oleksii
Oleksenko discovered that some AMD processors could leak stale data from
division operations in certain situations. A local attacker could possibly
use this to expose sensitive information. (CVE-2023-20588)
It was discovered that the bluetooth subsystem in the Linux kernel did not
properly handle L2CAP socket release, leading to a use-after-free
vulnerability. A local attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2023-40283)
It was discovered that some network classifier implementations in the Linux
kernel contained use-after-free vulnerabilities. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2023-4128)
Lonial Con discovered that the netfilter subsystem in the Linux kernel
contained a memory leak when handling certain element flush operations. A
local attacker could use this to expose sensitive information (kernel
memory). (CVE-2023-4569)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS:
linux-image-5.15.0-1040-intel-iotg 5.15.0-1040.46
linux-image-5.15.0-1044-oracle 5.15.0-1044.50
linux-image-intel-iotg 5.15.0.1040.40
linux-image-oracle 5.15.0.1044.39
linux-image-oracle-lts-22.04 5.15.0.1044.39
Ubuntu 20.04 LTS:
linux-image-5.15.0-1040-intel-iotg 5.15.0-1040.46~20.04.1
linux-image-5.15.0-1044-oracle 5.15.0-1044.50~20.04.1
linux-image-intel 5.15.0.1040.46~20.04.31
linux-image-intel-iotg 5.15.0.1040.46~20.04.31
linux-image-oracle 5.15.0.1044.50~20.04.1
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-6386-3
https://ubuntu.com/security/notices/USN-6386-1
CVE-2023-20588, CVE-2023-40283, CVE-2023-4128, CVE-2023-4569
Package Information:
https://launchpad.net/ubuntu/+source/linux-intel-iotg/5.15.0-1040.46
https://launchpad.net/ubuntu/+source/linux-oracle/5.15.0-1044.50
https://launchpad.net/ubuntu/+source/linux-intel-iotg-5.15/5.15.0-1040.46~20.04.1
https://launchpad.net/ubuntu/+source/linux-oracle-5.15/5.15.0-1044.50~20.04.1
[USN-6409-1] GNU C Library vulnerabilities
==========================================================================
Ubuntu Security Notice USN-6409-1
October 03, 2023
glibc vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in GNU C Library.
Software Description:
- glibc: GNU C Library
Details:
It was discovered that the GNU C Library incorrectly handled the
GLIBC_TUNABLES environment variable. An attacker could possibly use this
issue to perform a privilege escalation attack. (CVE-2023-4911)
It was discovered that the GNU C Library incorrectly handled certain DNS
responses when the system was configured in no-aaaa mode. A remote attacker
could possibly use this issue to cause the GNU C Library to crash,
resulting in a denial of service. This issue only affected Ubuntu 23.04.
(CVE-2023-4527)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
libc6 2.37-0ubuntu2.1
Ubuntu 22.04 LTS:
libc6 2.35-0ubuntu3.4
After a standard system update you need to reboot your computer to make all
the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6409-1
CVE-2023-4527, CVE-2023-4911
Package Information:
https://launchpad.net/ubuntu/+source/glibc/2.37-0ubuntu2.1
https://launchpad.net/ubuntu/+source/glibc/2.35-0ubuntu3.4
Ubuntu Security Notice USN-6409-1
October 03, 2023
glibc vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 23.04
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in GNU C Library.
Software Description:
- glibc: GNU C Library
Details:
It was discovered that the GNU C Library incorrectly handled the
GLIBC_TUNABLES environment variable. An attacker could possibly use this
issue to perform a privilege escalation attack. (CVE-2023-4911)
It was discovered that the GNU C Library incorrectly handled certain DNS
responses when the system was configured in no-aaaa mode. A remote attacker
could possibly use this issue to cause the GNU C Library to crash,
resulting in a denial of service. This issue only affected Ubuntu 23.04.
(CVE-2023-4527)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 23.04:
libc6 2.37-0ubuntu2.1
Ubuntu 22.04 LTS:
libc6 2.35-0ubuntu3.4
After a standard system update you need to reboot your computer to make all
the necessary changes.
References:
https://ubuntu.com/security/notices/USN-6409-1
CVE-2023-4527, CVE-2023-4911
Package Information:
https://launchpad.net/ubuntu/+source/glibc/2.37-0ubuntu2.1
https://launchpad.net/ubuntu/+source/glibc/2.35-0ubuntu3.4
Subscribe to:
Posts (Atom)