USN-1660-1: Linux kernel vulnerability

Releases

• Ubuntu 8.04

Packages

• linux - Linux kernel

Details

Zhang Zuotao discovered a bug in the Linux kernel's handling of overlapping
fragments in ipv6. A remote attacker could exploit this flaw to bypass
firewalls and initial new network connections that should have been blocked
by the firewall.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 8.04

• linux-image-2.6.24-32-itanium - 2.6.24-32.107
• linux-image-2.6.24-32-powerpc - 2.6.24-32.107
• linux-image-2.6.24-32-powerpc64-smp - 2.6.24-32.107
• linux-image-2.6.24-32-sparc64 - 2.6.24-32.107
• linux-image-2.6.24-32-server - 2.6.24-32.107
• linux-image-2.6.24-32-openvz - 2.6.24-32.107
• linux-image-2.6.24-32-386 - 2.6.24-32.107
• linux-image-2.6.24-32-hppa32 - 2.6.24-32.107
• linux-image-2.6.24-32-lpiacompat - 2.6.24-32.107
• linux-image-2.6.24-32-mckinley - 2.6.24-32.107
• linux-image-2.6.24-32-lpia - 2.6.24-32.107
• linux-image-2.6.24-32-xen - 2.6.24-32.107
• linux-image-2.6.24-32-hppa64 - 2.6.24-32.107
• linux-image-2.6.24-32-powerpc-smp - 2.6.24-32.107
• linux-image-2.6.24-32-generic - 2.6.24-32.107
• linux-image-2.6.24-32-rt - 2.6.24-32.107
• linux-image-2.6.24-32-virtual - 2.6.24-32.107
• linux-image-2.6.24-32-sparc64-smp - 2.6.24-32.107

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

• CVE-2012-4444

Related notices

• USN-1661-1: linux-image-2.6.32-45-ia64, linux-image-2.6.32-45-preempt, linux-image-2.6.32-45-powerpc64-smp, linux-image-2.6.32-45-lpia, linux-image-2.6.32-45-sparc64-smp, linux-image-2.6.32-45-versatile, linux-image-2.6.32-45-generic, linux, linux-image-2.6.32-45-sparc64, linux-image-2.6.32-45-386, linux-image-2.6.32-45-powerpc-smp, linux-image-2.6.32-45-virtual, linux-image-2.6.32-45-generic-pae, linux-image-2.6.32-45-powerpc, linux-image-2.6.32-45-server
• USN-1664-1: linux-image-2.6.32-350-ec2, linux-ec2