10 Kernel Vulnerabilities in Ubuntu 6.06, 8.04, 8.10, 9.04 and 9.10

La passoire Linux a encore sévit, 10 raisons pour que ca "merde
complet"





1. The EXT4 and HFS filesystems merdent complet

2. FUSE (Filesystem in Userspace) merde complet

3. KVM failed to decode various guest instructions. This could lead to
a DoS attack and crash the affected system, by triggering "high
scheduling latency" in the host. The issue affects only Ubuntu 8.04
LTS, 8.10, 9.04 and 9.10 systems. (merde complet)

4. The OHCI firewire driver failed to handle various ioctls. Because of
this, a local attacker could crash the affected system or gain root
(system administrator) privileges. The issue affects only Ubuntu 8.04
LTS, 8.10, 9.04 and 9.10 systems.(merde complet)

5. The Linux kernel failed to handle O_ASYNC on locked files. Because
of this, a local attacker could gain root (system administrator)
privileges. The issue was discovered by Tavis Ormandy and affects only
Ubuntu 9.04 and 9.10 systems. (merde complet)

6. The e1000e and e1000 network drivers for Eee PCs failed to check
Ethernet frames' size. Because of this, a local attacker on the LAN
could crash the affected system or gain root (system administrator)
privileges by sending specially devised traffic. The issue was
discovered by Neil Horman and Eugene Teo, and affects all Ubuntu
systems(merde complet)

7. Random contents of kernel memory could be shown by
"print-fatal-signals" reporting. This could lead to loss of privacy.
The issue affects only Ubuntu 8.04 LTS, 8.10, 9.04 and 9.10
systems.(merde complet)


8. IPv6 failed to handle jumbo frames. This could lead to a DoS attack
and crash the affected system. The issue was discovered by Olli Jarva
and Tuomo Untinen, and affects only Ubuntu 9.04 and 9.10 systems.(merde
complet)

9. The rules of bridging netfilter could be modified by regular users.
This could lead to a DoS attack, by fracturing the network traffic. The
issue was discovered by Florian Westphal and affects all Ubuntu
systems.(merde complet)

10. Linux kernel memory could be leaked by various mremap operations.
This could lead to a DoS attack, by consuming the entire available
memory. The issue was discovered by Al Viro and affects all Ubuntu
systems.(merde complet)






http://news.softpedia.com/news/10-Kernel-Vulnerabilities-in-Ubuntu-6-06-8-04-8-10-9-04-and-9-10-134162.shtml

(Et il est bien écrit à la fin:

Don't forget to reboot your computer after this important kernel
update!

)

C'est foutu pour l'uptime de 12 ans ;>)

--
P4nd1-P4nd4 vous salue, et annonce que le petit ourson possède
désormais son blog
p4nd1-p4nd4.over-blog.com