Ubuntu Security Notice USN-3167-2

11th January, 2017

linux-ti-omap4 vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 12.04 LTS

Summary

Several security issues were fixed in the kernel.

Software description

• linux-ti-omap4
  – Linux kernel for OMAP4

Details

Dmitry Vyukov discovered that the KVM implementation in the Linux kernel
did not properly initialize the Code Segment (CS) in certain error cases. A
local attacker could use this to expose sensitive information (kernel
memory). (CVE-2016-9756)

Baozeng Ding discovered a race condition that could lead to a use-after-
free in the Advanced Linux Sound Architecture (ALSA) subsystem of the Linux
kernel. A local attacker could use this to cause a denial of service
(system crash). (CVE-2016-9794)

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 12.04 LTS:

linux-image-omap4

3.2.0.1498.93

linux-image-3.2.0-1498-omap4

3.2.0-1498.125

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

CVE-2016-9756,

CVE-2016-9794

Ubuntu Security Notice USN-3169-4

11th January, 2017

linux-snapdragon vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.04 LTS

Summary

Several security issues were fixed in the kernel.

Software description

• linux-snapdragon
  – Linux kernel for Snapdragon Processors

Details

Baozeng Ding discovered a race condition that could lead to a use-after-
free in the Advanced Linux Sound Architecture (ALSA) subsystem of the Linux
kernel. A local attacker could use this to cause a denial of service
(system crash). (CVE-2016-9794)

Andrey Konovalov discovered that signed integer overflows existed in the
setsockopt() system call when handling the SO_SNDBUFFORCE and
SO_RCVBUFFORCE options. A local attacker with the CAP_NET_ADMIN capability
could use this to cause a denial of service (system crash or memory
corruption). (CVE-2016-9793)

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.04 LTS:

linux-image-snapdragon

4.4.0.1044.36

linux-image-4.4.0-1044-snapdragon

4.4.0-1044.48

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

CVE-2016-9793,

CVE-2016-9794

Ubuntu Security Notice USN-3169-3

11th January, 2017

linux-raspi2 vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.04 LTS

Summary

Several security issues were fixed in the kernel.

Software description

• linux-raspi2
  – Linux kernel for Raspberry Pi 2

Details

Baozeng Ding discovered a race condition that could lead to a use-after-
free in the Advanced Linux Sound Architecture (ALSA) subsystem of the Linux
kernel. A local attacker could use this to cause a denial of service
(system crash). (CVE-2016-9794)

Andrey Konovalov discovered that signed integer overflows existed in the
setsockopt() system call when handling the SO_SNDBUFFORCE and
SO_RCVBUFFORCE options. A local attacker with the CAP_NET_ADMIN capability
could use this to cause a denial of service (system crash or memory
corruption). (CVE-2016-9793)

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.04 LTS:

linux-image-4.4.0-1040-raspi2

4.4.0-1040.47

linux-image-raspi2

4.4.0.1040.39

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

CVE-2016-9793,

CVE-2016-9794

Ubuntu Security Notice USN-3169-2

11th January, 2017

linux-lts-xenial vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 14.04 LTS

Summary

Several security issues were fixed in the kernel.

Software description

• linux-lts-xenial
  – Linux hardware enablement kernel from Xenial for Trusty

Details

USN-3169-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu
14.04 LTS.

Dmitry Vyukov discovered that the KVM implementation in the Linux kernel
did not properly initialize the Code Segment (CS) in certain error cases. A
local attacker could use this to expose sensitive information (kernel
memory). (CVE-2016-9756)

Andrey Konovalov discovered that signed integer overflows existed in the
setsockopt() system call when handling the SO_SNDBUFFORCE and
SO_RCVBUFFORCE options. A local attacker with the CAP_NET_ADMIN capability
could use this to cause a denial of service (system crash or memory
corruption). (CVE-2016-9793)

Baozeng Ding discovered a race condition that could lead to a use-after-
free in the Advanced Linux Sound Architecture (ALSA) subsystem of the Linux
kernel. A local attacker could use this to cause a denial of service
(system crash). (CVE-2016-9794)

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 14.04 LTS:

linux-image-powerpc-smp-lts-xenial

4.4.0.59.46

linux-image-generic-lpae-lts-xenial

4.4.0.59.46

linux-image-4.4.0-59-powerpc64-smp

4.4.0-59.80~14.04.1

linux-image-4.4.0-59-lowlatency

4.4.0-59.80~14.04.1

linux-image-4.4.0-59-generic

4.4.0-59.80~14.04.1

linux-image-4.4.0-59-powerpc64-emb

4.4.0-59.80~14.04.1

linux-image-4.4.0-59-powerpc-smp

4.4.0-59.80~14.04.1

linux-image-lowlatency-lts-xenial

4.4.0.59.46

linux-image-generic-lts-xenial

4.4.0.59.46

linux-image-4.4.0-59-generic-lpae

4.4.0-59.80~14.04.1

linux-image-4.4.0-59-powerpc-e500mc

4.4.0-59.80~14.04.1

linux-image-powerpc64-smp-lts-xenial

4.4.0.59.46

linux-image-powerpc64-emb-lts-xenial

4.4.0.59.46

linux-image-powerpc-e500mc-lts-xenial

4.4.0.59.46

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

CVE-2016-9756,

CVE-2016-9793,

CVE-2016-9794

Ubuntu Security Notice USN-3170-1

11th January, 2017

linux vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.10

Summary

Several security issues were fixed in the kernel.

Software description

• linux
  – Linux kernel

Details

Dmitry Vyukov discovered that the KVM implementation in the Linux kernel
did not properly initialize the Code Segment (CS) in certain error cases. A
local attacker could use this to expose sensitive information (kernel
memory). (CVE-2016-9756)

Andrey Konovalov discovered that signed integer overflows existed in the
setsockopt() system call when handling the SO_SNDBUFFORCE and
SO_RCVBUFFORCE options. A local attacker with the CAP_NET_ADMIN capability
could use this to cause a denial of service (system crash or memory
corruption). (CVE-2016-9793)

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.10:

linux-image-powerpc-smp

4.8.0.34.43

linux-image-powerpc-e500mc

4.8.0.34.43

linux-image-4.8.0-34-lowlatency

4.8.0-34.36

linux-image-generic

4.8.0.34.43

linux-image-generic-lpae

4.8.0.34.43

linux-image-4.8.0-34-generic-lpae

4.8.0-34.36

linux-image-powerpc64-emb

4.8.0.34.43

linux-image-4.8.0-34-powerpc64-emb

4.8.0-34.36

linux-image-4.8.0-34-generic

4.8.0-34.36

linux-image-4.8.0-34-powerpc-e500mc

4.8.0-34.36

linux-image-lowlatency

4.8.0.34.43

linux-image-4.8.0-34-powerpc-smp

4.8.0-34.36

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

CVE-2016-9756,

CVE-2016-9793

Ubuntu Security Notice USN-3171-1

11th January, 2017

libvncserver vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.10
• Ubuntu 16.04 LTS
• Ubuntu 14.04 LTS
• Ubuntu 12.04 LTS

Summary

Several security issues were fixed in LibVNCServer.

Software description

• libvncserver
  – vnc server library

Details

Josef Gajdusek discovered that the LibVNCServer client library incorrectly
handled certain FrameBufferUpdate messages. If a user were tricked into
connecting to a malicious server, an attacker could use this issue to cause
a denial of service, or possibly execute arbitrary code. (CVE-2016-9941,
CVE-2016-9942)

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.10:

libvncserver1

0.9.10+dfsg-3ubuntu0.16.10.1

libvncclient1

0.9.10+dfsg-3ubuntu0.16.10.1

Ubuntu 16.04 LTS:

libvncserver1

0.9.10+dfsg-3ubuntu0.16.04.1

libvncclient1

0.9.10+dfsg-3ubuntu0.16.04.1

Ubuntu 14.04 LTS:

libvncserver0

0.9.9+dfsg-1ubuntu1.2

Ubuntu 12.04 LTS:

libvncserver0

0.9.8.2-2ubuntu1.2

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary changes.

References

CVE-2016-9941,

CVE-2016-9942

Ubuntu Security Notice USN-3170-2

11th January, 2017

linux-raspi2 vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.10

Summary

Several security issues were fixed in the kernel.

Software description

• linux-raspi2
  – Linux kernel for Raspberry Pi 2

Details

Andrey Konovalov discovered that the ipv6 icmp implementation in the Linux
kernel did not properly check data structures on send. A remote attacker
could use this to cause a denial of service (system crash). (CVE-2016-9919)

Andrey Konovalov discovered that signed integer overflows existed in the
setsockopt() system call when handling the SO_SNDBUFFORCE and
SO_RCVBUFFORCE options. A local attacker with the CAP_NET_ADMIN capability
could use this to cause a denial of service (system crash or memory
corruption). (CVE-2016-9793)

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.10:

linux-image-4.8.0-1022-raspi2

4.8.0-1022.25

linux-image-raspi2

4.8.0.1022.25

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

CVE-2016-9793,

CVE-2016-9919

Ubuntu Security Notice USN-3164-1

5th January, 2017

exim4 vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.10
• Ubuntu 16.04 LTS
• Ubuntu 14.04 LTS
• Ubuntu 12.04 LTS

Summary

Exim could be made to expose private DKIM signing keys.

Software description

• exim4
  – Exim is a mail transport agent

Details

Bjoern Jacke discovered that Exim incorrectly handled DKIM keys. In certain
configurations, private DKIM signing keys could be leaked to the log files.

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.10:

exim4-daemon-heavy

4.87-3ubuntu1.1

exim4-daemon-light

4.87-3ubuntu1.1

Ubuntu 16.04 LTS:

exim4-daemon-heavy

4.86.2-2ubuntu2.1

exim4-daemon-light

4.86.2-2ubuntu2.1

Ubuntu 14.04 LTS:

exim4-daemon-heavy

4.82-3ubuntu2.2

exim4-daemon-light

4.82-3ubuntu2.2

Ubuntu 12.04 LTS:

exim4-daemon-heavy

4.76-3ubuntu3.4

exim4-daemon-light

4.76-3ubuntu3.4

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

In general, a standard system update will make all the necessary changes.

References

CVE-2016-9963

Ubuntu Security Notice USN-3163-1

4th January, 2017

nss vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.10
• Ubuntu 16.04 LTS
• Ubuntu 14.04 LTS
• Ubuntu 12.04 LTS

Summary

Several security issues were fixed in NSS.

Software description

• nss
  – Network Security Service library

Details

It was discovered that NSS incorrectly handled certain invalid
Diffie-Hellman keys. A remote attacker could possibly use this flaw to
cause NSS to crash, resulting in a denial of service. This issue only
applied to Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2016-5285)

Hubert Kario discovered that NSS incorrectly handled Diffie Hellman client
key exchanges. A remote attacker could possibly use this flaw to perform a
small subgroup confinement attack and recover private keys. This issue only
applied to Ubuntu 12.04 LTS, Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
(CVE-2016-8635)

Franziskus Kiefer discovered that NSS incorrectly mitigated certain timing
side-channel attacks. A remote attacker could possibly use this flaw to
recover private keys. (CVE-2016-9074)

This update refreshes the NSS package to version 3.26.2 which includes
the latest CA certificate bundle.

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.10:

libnss3

2:3.26.2-0ubuntu0.16.10.1

Ubuntu 16.04 LTS:

libnss3

2:3.26.2-0ubuntu0.16.04.2

Ubuntu 14.04 LTS:

libnss3

2:3.26.2-0ubuntu0.14.04.3

Ubuntu 12.04 LTS:

libnss3

2:3.26.2-0ubuntu0.12.04.1

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

This update uses a new upstream release, which includes additional bug
fixes. After a standard system update you need to restart any applications
that use NSS, such as Evolution and Chromium, to make all the necessary
changes.

References

CVE-2016-5285,

CVE-2016-8635,

CVE-2016-9074

Ubuntu Security Notice USN-3159-1

20th December, 2016

linux vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 12.04 LTS

Summary

The system could be made to expose sensitive information.

Software description

• linux
  – Linux kernel

Details

It was discovered that a race condition existed in the procfs
environ_read function in the Linux kernel, leading to an integer
underflow. A local attacker could use this to expose sensitive
information (kernel memory).

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 12.04 LTS:

linux-image-3.2.0-119-generic-pae

3.2.0-119.162

linux-image-3.2.0-119-omap

3.2.0-119.162

linux-image-powerpc-smp

3.2.0.119.134

linux-image-3.2.0-119-powerpc-smp

3.2.0-119.162

linux-image-generic-pae

3.2.0.119.134

linux-image-highbank

3.2.0.119.134

linux-image-3.2.0-119-powerpc64-smp

3.2.0-119.162

linux-image-virtual

3.2.0.119.134

linux-image-powerpc64-smp

3.2.0.119.134

linux-image-generic

3.2.0.119.134

linux-image-3.2.0-119-generic

3.2.0-119.162

linux-image-3.2.0-119-virtual

3.2.0-119.162

linux-image-omap

3.2.0.119.134

linux-image-3.2.0-119-highbank

3.2.0-119.162

To update your system, please follow these instructions:
https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

CVE-2016-7916