Risks
Advisories
Browse
or
or
Ubuntu Security Notice - linux vulnerability (USN-1660-1)
==========================================================================
Ubuntu Security Notice USN-1660-1
December 11, 2012

linux vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 8.04 LTS

Summary:

The system's firewall could be bypassed by a remote attacker.

Software Description:
- linux: Linux kernel

Details:

Zhang Zuotao discovered a bug in the Linux kernel's handling of overlapping
fragments in ipv6. A remote attacker could exploit this flaw to bypass
firewalls and initial new network connections that should have been blocked
by the firewall.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 8.04 LTS:
  linux-image-2.6.24-32-386       2.6.24-32.107
  linux-image-2.6.24-32-generic   2.6.24-32.107
  linux-image-2.6.24-32-hppa32    2.6.24-32.107
  linux-image-2.6.24-32-hppa64    2.6.24-32.107
  linux-image-2.6.24-32-itanium   2.6.24-32.107
  linux-image-2.6.24-32-lpia      2.6.24-32.107
  linux-image-2.6.24-32-lpiacompat  2.6.24-32.107
  linux-image-2.6.24-32-mckinley  2.6.24-32.107
  linux-image-2.6.24-32-openvz    2.6.24-32.107
  linux-image-2.6.24-32-powerpc   2.6.24-32.107
  linux-image-2.6.24-32-powerpc-smp  2.6.24-32.107
  linux-image-2.6.24-32-powerpc64-smp  2.6.24-32.107
  linux-image-2.6.24-32-rt        2.6.24-32.107
  linux-image-2.6.24-32-server    2.6.24-32.107
  linux-image-2.6.24-32-sparc64   2.6.24-32.107
  linux-image-2.6.24-32-sparc64-smp  2.6.24-32.107
  linux-image-2.6.24-32-virtual   2.6.24-32.107
  linux-image-2.6.24-32-xen       2.6.24-32.107

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  http://www.ubuntu.com/usn/usn-1660-1
  CVE-2012-4444

Package Information:
  https://launchpad.net/ubuntu/+source/linux/2.6.24-32.107




Spotlight

Leveraging network intelligence and deep packet inspection

Posted on 26 November 2014.  |  Tomer Saban, CEO of WireX Systems, talks about how deep packet inspection helps with identifying emerging threats, the role of network intelligence, and more.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Thu, Nov 27th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //