Monthly Archives: January 2016

Ubuntu

USN-2867-1: libvirt vulnerabilities

Ubuntu Security Notice USN-2867-1

12th January, 2016

libvirt vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

  • Ubuntu 15.10
  • Ubuntu 15.04
  • Ubuntu 14.04 LTS
  • Ubuntu 12.04 LTS

Summary

Several security issues were fixed in libvirt.

Software description

  • libvirt
    – Libvirt virtualization toolkit

Details

It was discovered that libvirt incorrectly handled the firewall rules on
bridge networks when the daemon was restarted. This could result in an
unintended firewall configuration. This issue only applied to Ubuntu 12.04
LTS. (CVE-2011-4600)

Peter Krempa discovered that libvirt incorrectly handled locking when
certain ACL checks failed. A local attacker could use this issue to cause
libvirt to stop responding, resulting in a denial of service. This issue
only applied to Ubuntu 14.04 LTS. (CVE-2014-8136)

Luyao Huang discovered that libvirt incorrectly handled VNC passwords in
shapshot and image files. A remote authenticated user could use this issue
to possibly obtain VNC passwords. This issue only affected Ubuntu 14.04
LTS. (CVE-2015-0236)

Han Han discovered that libvirt incorrectly handled volume creation
failure when used with NFS. A remote authenticated user could use this
issue to cause libvirt to crash, resulting in a denial of service. This
issue only applied to Ubuntu 15.10. (CVE-2015-5247)

Ossi Herrala and Joonas Kuorilehto discovered that libvirt incorrectly
performed storage pool name validation. A remote authenticated user could
use this issue to bypass ACLs and gain access to unintended files. This
issue only applied to Ubuntu 14.04 LTS, Ubuntu 15.04 and Ubuntu 15.10.
(CVE-2015-5313)

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 15.10:
libvirt0

1.2.16-2ubuntu11.15.10.2
libvirt-bin

1.2.16-2ubuntu11.15.10.2
Ubuntu 15.04:
libvirt0

1.2.12-0ubuntu14.4
libvirt-bin

1.2.12-0ubuntu14.4
Ubuntu 14.04 LTS:
libvirt0

1.2.2-0ubuntu13.1.16
libvirt-bin

1.2.2-0ubuntu13.1.16
Ubuntu 12.04 LTS:
libvirt0

0.9.8-2ubuntu17.23
libvirt-bin

0.9.8-2ubuntu17.23

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

CVE-2011-4600,

CVE-2014-8136,

CVE-2015-0236,

CVE-2015-5247,

CVE-2015-5313

US-CERT

ISC Releases Security Updates

Original release date: January 12, 2016

Internet Systems Consortium (ISC) has released security updates to address a vulnerability in the ISC Dynamic Host Configuration Protocol (DHCP) software. Exploitation of this vulnerability may allow a remote attacker to cause a denial-of-service condition.

Available updates include:

  • DHCP version 4.1-ESV-R12-P1
  • DHCP version 4.3.3-P1

Users and administrators are encouraged to review ISC Knowledge Base Article AA-01334 and apply the necessary updates.

This product is provided subject to this Notification and this Privacy & Use policy.

Perl

CVE-2015-8607

The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve the taint attribute of data, which might allow context-dependent attackers to bypass the taint protection mechanism via a crafted string. (CVSS:7.5) (Last Update:2016-01-20)

Python

CVE-2016-1494

The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack. (CVSS:5.0) (Last Update:2016-01-15)