USN-1337-1: Linux kernel (Natty backport) vulnerabilities
Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. (CVE-2011-1162) Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. (CVE-2011-2203) A flaw was found in how the Linux kernel handles user-defined key types. An unprivileged local user could exploit this to crash the system. (CVE-2011-4110)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-1337-1?
The severity of USN-1337-1 is assessed as medium due to the potential information leak affecting local unprivileged users.
How do I fix USN-1337-1?
To fix USN-1337-1, you need to upgrade the affected packages to version 2.6.38-13.54~lucid1 or later.
Which Ubuntu versions are affected by USN-1337-1?
USN-1337-1 affects Ubuntu version 10.04.
What types of attackers can exploit the vulnerabilities in USN-1337-1?
Local attackers with unprivileged access can exploit the vulnerabilities described in USN-1337-1.
What packages are specifically affected by USN-1337-1?
The packages specifically affected by USN-1337-1 include linux-image-2.6.38-13-virtual, linux-image-2.6.38-13-server, linux-image-2.6.38-13-generic-pae, and linux-image-2.6.38-13-generic.