==========================================================================
Ubuntu Security Notice USN-1651-1
November 30, 2012

linux vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 10.04 LTS

Summary:

The system could be made to crash under certain conditions.

Software Description:
- linux: Linux kernel

Details:

Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois
congestion control algorithm. A local attacker could use this to cause a
denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  linux-image-2.6.32-45-386       2.6.32-45.100
  linux-image-2.6.32-45-generic   2.6.32-45.100
  linux-image-2.6.32-45-generic-pae  2.6.32-45.100
  linux-image-2.6.32-45-ia64      2.6.32-45.100
  linux-image-2.6.32-45-lpia      2.6.32-45.100
  linux-image-2.6.32-45-powerpc   2.6.32-45.100
  linux-image-2.6.32-45-powerpc-smp  2.6.32-45.100
  linux-image-2.6.32-45-powerpc64-smp  2.6.32-45.100
  linux-image-2.6.32-45-preempt   2.6.32-45.100
  linux-image-2.6.32-45-server    2.6.32-45.100
  linux-image-2.6.32-45-sparc64   2.6.32-45.100
  linux-image-2.6.32-45-sparc64-smp  2.6.32-45.100
  linux-image-2.6.32-45-versatile  2.6.32-45.100
  linux-image-2.6.32-45-virtual   2.6.32-45.100

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.

References:
  http://www.ubuntu.com/usn/usn-1651-1
  CVE-2012-4565

Package Information:
  https://launchpad.net/ubuntu/+source/linux/2.6.32-45.100

Review: Logging and Log Management

Posted on 22 May 2013.  |  Every security practitioner should be aware of the overwhelming advantages of logging and perusing logs for discovering system intrusions. But logging and log management comes with its own set of difficulties.

Experts highlight top data breach vulnerabilities

Posted on 22 May 2013.  |  Hidden vulnerabilities lie in everyday activities that can expose personal information and lead to data breach, including buying gas with a credit card or wearing a pacemaker.

A closer look at Mega cloud storage

Posted on 21 May 2013.  |  Once a novelty, nowadays many cloud storage services are fighting for their piece of the market in the virtual world. Mega offers 50GB of free space with great pricing on Pro accounts.

The CSO perspective on healthcare security and compliance

Posted on 20 May 2013.  |  Randall Gamby is the CSO of the Medicaid Information Service Center of New York. In this interview he discusses healthcare security and compliance challenges and offers a variety of tips.

Cyber espionage campaign uses professionally-made malware

Posted on 20 May 2013.  |  A massive cyber espionage campaign has been hitting government ministries, IT companies, academic research institutions, and more.