Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Ubuntu 16.04 LTS USN-3241-1 High: OpenSSL Security Vulnerability Alert

ubuntu
Calendar Grey August 5, 2014
Scroller Ubuntu
The advisory USN-2307-1 from Ubuntu addresses a flaw in the OpenSSL library that impacts diverse versions and poses a security concern.
USN-2306-1 introduced a regression in the GNU C Library.

Summary

USN-2306-1 introduced a regression in the GNU C Library.

Software Description:

- eglibc: GNU C Library

Details:

USN-2306-1 fixed vulnerabilities in the GNU C Library. On Ubuntu 10.04 LTS,

the security update cause a regression in certain environments that use

the Name Service Caching Daemon (nscd), such as those configured for LDAP

or MySQL authentication. In these environments, the nscd daemon may need

to be stopped manually for name resolution to resume working so that

updates can be downloaded, including environments configured for unattended

updates.

We apologize for the inconvenience.

Original advisory details:

Maksymilian Arciemowicz discovered that the GNU C Library incorrectly

handled the getaddrinfo() function. An attacker could use this issue to

cause a denial of service. This issue only affected Ubuntu 10.04 LTS.

(CVE-2013-4357)

It was discovered that the GNU C Library incorrectly handled the

getaddrinfo() function. An attacker could...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical issue Ubuntu GNU C Library

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  libc6                           2.11.1-0ubuntu7.15

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2306-2

https://ubuntu.com/security/notices/USN-2306-1

https://bugs.launchpad.net/ubuntu/+source/eglibc/+bug/1352504

August 05, 2014

Topics%20covered

Topics Covered

security advisory denial of service critical issue Ubuntu GNU C Library

Package Information

https://launchpad.net/ubuntu/+source/eglibc/2.11.1-0ubuntu7.15

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.