LWN.net Logo

Ubuntu alert USN-1391-1 (linux-mvl-dove)

From:  John Johansen <john.johansen@canonical.com>
To:  ubuntu-security-announce@lists.ubuntu.com
Subject:  [USN-1391-1] Linux kernel (Marvell DOVE) vulnerability
Date:  Wed, 07 Mar 2012 08:16:19 -0800
Message-ID:  <4F5789D3.90801@canonical.com>
Archive-link:  Article, Thread

========================================================================== Ubuntu Security Notice USN-1391-1 March 07, 2012 linux-mvl-dove vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 10.10 Summary: The system could be made to crash or run programs as an administrator. Software Description: - linux-mvl-dove: Linux kernel for DOVE Details: A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 10.10: linux-image-2.6.32-423-dove 2.6.32-423.42 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well. References: http://www.ubuntu.com/usn/usn-1391-1 CVE-2012-0038 Package Information: https://launchpad.net/ubuntu/+source/linux-mvl-dove/2.6.3... -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds