Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2016.3054
Linux kernel vulnerabilities
21 December 2016
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: kernel
Publisher: Ubuntu
Operating System: Ubuntu
Impact/Access: Access Confidential Data -- Existing Account
Denial of Service -- Existing Account
Resolution: Patch/Upgrade
CVE Names: CVE-2016-7916 CVE-2016-6213
Reference: ASB-2016.0103
ESB-2016.2687
Original Bulletin:
http://www.ubuntu.com/usn/usn-3160-1
http://www.ubuntu.com/usn/usn-3160-2
- --------------------------BEGIN INCLUDED TEXT--------------------
==========================================================================
Ubuntu Security Notice USN-3160-1
December 20, 2016
linux vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- - Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- - linux: Linux kernel
Details:
CAI Qian discovered that shared bind mounts in a mount namespace
exponentially added entries without restriction to the Linux kernel's mount
table. A local attacker could use this to cause a denial of service (system
crash). (CVE-2016-6213)
It was discovered that a race condition existed in the procfs
environ_read function in the Linux kernel, leading to an integer
underflow. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2016-7916)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.04 LTS:
linux-image-3.13.0-106-generic 3.13.0-106.153
linux-image-3.13.0-106-generic-lpae 3.13.0-106.153
linux-image-3.13.0-106-lowlatency 3.13.0-106.153
linux-image-3.13.0-106-powerpc-e500 3.13.0-106.153
linux-image-3.13.0-106-powerpc-e500mc 3.13.0-106.153
linux-image-3.13.0-106-powerpc-smp 3.13.0-106.153
linux-image-3.13.0-106-powerpc64-emb 3.13.0-106.153
linux-image-3.13.0-106-powerpc64-smp 3.13.0-106.153
linux-image-generic 3.13.0.106.114
linux-image-generic-lpae 3.13.0.106.114
linux-image-lowlatency 3.13.0.106.114
linux-image-powerpc-e500 3.13.0.106.114
linux-image-powerpc-e500mc 3.13.0.106.114
linux-image-powerpc-smp 3.13.0.106.114
linux-image-powerpc64-emb 3.13.0.106.114
linux-image-powerpc64-smp 3.13.0.106.114
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
http://www.ubuntu.com/usn/usn-3160-1
CVE-2016-6213, CVE-2016-7916
Package Information:
https://launchpad.net/ubuntu/+source/linux/3.13.0-106.153
==========================================================================
Ubuntu Security Notice USN-3160-2
December 20, 2016
linux-lts-trusty vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- - Ubuntu 12.04 LTS
Summary:
Several security issues were fixed in the kernel.
Software Description:
- - linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise
Details:
USN-3160-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu
12.04 LTS.
CAI Qian discovered that shared bind mounts in a mount namespace
exponentially added entries without restriction to the Linux kernel's mount
table. A local attacker could use this to cause a denial of service (system
crash). (CVE-2016-6213)
It was discovered that a race condition existed in the procfs
environ_read function in the Linux kernel, leading to an integer
underflow. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2016-7916)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 LTS:
linux-image-3.13.0-106-generic 3.13.0-106.153~precise1
linux-image-3.13.0-106-generic-lpae 3.13.0-106.153~precise1
linux-image-generic-lpae-lts-trusty 3.13.0.106.97
linux-image-generic-lts-trusty 3.13.0.106.97
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
http://www.ubuntu.com/usn/usn-3160-2
http://www.ubuntu.com/usn/usn-3160-1
CVE-2016-6213, CVE-2016-7916
Package Information:
https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-106.153~precise1
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967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=yygB
-----END PGP SIGNATURE-----