Stay Secure with the Latest Linux Advisories

security advisorycriticalpackage update

Ubuntu 14.04 LTS USN-2188-1 Critical: elfutils Execution Risk

elfutils could be made to crash or run programs if it processed a specially crafted file.. =========================================================================Ubuntu Security Notice USN-2188-1 April 30, 2014 elfutils vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS - Ubuntu 13.10 - Ubuntu 12.10 Summary: elfutils could be made to crash or run programs if it processed a specially crafted file. Software Description: - elfutils: collection of utilities to handle ELF objects Details: Florian Weimer discovered that the elfutils libdw library incorrectly handled malformed compressed debug sections in ELF files. If a user or automated system were tricked into processing a specially crafted ELF file, applications linked against libdw could be made to crash, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS: libdw1 0.158-0ubuntu5.1 Ubuntu 13.10: libdw1 0.157-1ubuntu1.1 Ubuntu 12.10: libdw1 0.153-1ubuntu1.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2188-1 CVE-2014-0172 Package Information: https://launchpad.net/ubuntu/+source/elfutils/0.158-0ubuntu5.1 https://launchpad.net/ubuntu/+source/elfutils/0.157-1ubuntu1.1 https://launchpad.net/ubuntu/+source/elfutils/0.153-1ubuntu1.1 . Debian Security Notice DSN-1123-2 highlights a critical glibc vulnerability affecting various versions.. elfutils Vulnerability, Code Execution Risk, ELF File Processing. . Severity: Critical. LinuxSecurity.com Team

Apr 30, 2014 •Critical Ubuntu