Monday, March 24, 2014

USN-2153-1: initramfs-tools vulnerability

Ubuntu Security Notice USN-2153-1


24th March, 2014


initramfs-tools vulnerability


A security issue affects these releases of Ubuntu and its derivatives:



  • Ubuntu 12.10

  • Ubuntu 12.04 LTS


Summary


initramfs-tools used incorrect mount options.


Software description



  • initramfs-tools - tools for generating an initramfs


Details


Kees Cook discovered that initramfs-tools incorrectly mounted /run without

the noexec option, contrary to expected behaviour.


Update instructions


The problem can be corrected by updating your system to the following package version:



Ubuntu 12.10:

initramfs-tools 0.103ubuntu0.2.2

Ubuntu 12.04 LTS:

initramfs-tools 0.99ubuntu13.5


To update your system, please follow these instructions: http://bit.ly/1aJDvTw.


After a standard system update you need to reboot your computer to make all

the necessary changes.


References


LP: 1152744






via Ubuntu Security Notices http://bit.ly/Q8shUN

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.