libnl could be made to crash or run programs.. =========================================================================Ubuntu Security Notice USN-3311-1 June 06, 2017 libnl3 vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 17.04 - Ubuntu 16.10 - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: libnl could be made to crash or run programs. Software Description: - libnl3: library for dealing with netlink sockets Details: It was discovered that libnl incorrectly handled memory when performing certain operations. A local attacker could possibly use this issue to cause libnl to crash, resulting in a denial of service, or execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 17.04: libnl-3-200 3.2.29-0ubuntu2.1 Ubuntu 16.10: libnl-3-200 3.2.27-1ubuntu0.16.10.1 Ubuntu 16.04 LTS: libnl-3-200 3.2.27-1ubuntu0.16.04.1 Ubuntu 14.04 LTS: libnl-3-200 3.2.21-1ubuntu4.1 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3311-1 CVE-2017-0553 Package Information: https://launchpad.net/ubuntu/+source/libnl3/3.2.29-0ubuntu2.1 https://launchpad.net/ubuntu/+source/libnl3/3.2.27-1ubuntu0.16.10.1 https://launchpad.net/ubuntu/+source/libnl3/3.2.27-1ubuntu0.16.04.1 https://launchpad.net/ubuntu/+source/libnl3/3.2.21-1ubuntu4.1 . Ubuntu Security Notice USN-3312-1 reports on a critical flaw in libcurl that poses threats to various distributions, potentially leading to data leaks.. Ubuntu Security Notice, libnl3, Denial Of Service, Memory Handling Issue. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.