Softpedia
 

NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home > News > Linux

November 28th, 2011, 18:31 GMT · By

More Kernel Vulnerabilities Found in Ubuntu OSes

SHARE:

Adjust text size:


The Ubuntu operating system
Enlarge picture
Several more security vulnerabilities were recently discovered in the Linux kernel packages, affecting the Natty and Maverick backport, and EC2 Linux kernels of Ubuntu 10.04 LTS, and the OMAP4 Linux kernels of Ubuntu 10.10 and Ubuntu 11.04 operating systems.

The following vulnerabilities affect the Ubuntu 10.04 LTS (Lucid Lynx) Linux kernel backport from Natty: CVE-2011-2183, CVE-2011-2491, CVE-2011-2494, CVE-2011-2495, CVE-2011-2517, CVE-2011-2905, and CVE-2011-2909.

The following vulnerabilities affect the Ubuntu 10.04 LTS (Lucid Lynx) Linux kernel backport from Maverick: CVE-2011-1585, CVE-2011-2183, CVE-2011-2491, CVE-2011-2496, and CVE-2011-2517.

The following vulnerabilities affect the Ubuntu 10.04 LTS (Lucid Lynx) EC2 Linux kernel: CVE-2011-2491, CVE-2011-2496, CVE-2011-2517, and CVE-2011-2525.

The following vulnerabilities affect the Ubuntu 10.10 (Maverick Meerkat) Linux kernel for OMAP4: CVE-2011-1585 and CVE-2011-2496.

The following Linux kernel vulnerabilities affect the Ubuntu 11.04 (Natty Narwhal) operating system: CVE-2011-2183, CVE-2011-2479, CVE-2011-2491, CVE-2011-2494, CVE-2011-2495, CVE-2011-2496, CVE-2011-2517, CVE-2011-2905, CVE-2011-2909, and CVE-2011-3363.

As usual, you can click on each one to see how it affects your system, or go here, here, here, here and here for in-depth descriptions of the Linux kernel vulnerabilities.

The security flaws can be fixed if you upgrade your system(s) to the:

linux-image-2.6.38-13 (2.6.38-13.52~lucid1) package for Ubuntu 10.04 LTS Linux kernel backport from Natty;
linux-image-2.6.35-31 (2.6.35-31.62~lucid1) package for Ubuntu 10.04 LTS Linux kernel backport from Maverick;
linux-image-2.6.32-340-ec2 (2.6.32-340.40) package for Ubuntu 10.04 LTS EC2 kernel;
linux-image-2.6.35-903-omap4 (2.6.35-903.27) package for Ubuntu 10.10 OMAP4 kernel;
linux-image-2.6.38-1209-omap4 (2.6.38-1209.17) package for Ubuntu 11.04 OMAP4 kernel.

Don't forget to reboot your computer after the upgrade!

ATTENTION: Due to an unavoidable ABI change, the kernel packages have a new version number, which will force you to reinstall and recompile all third-party kernel modules you might have installed. Moreover, if you use the linux-restricted-modules package, you have to update it as well to get modules which work with the new Linux kernel version.

TELL US WHAT YOU THINK:

4,795 hits · 4 comments · Link to this article · Print article · Send to friend · Subscribe to news

MUST-READ RELATED ARTICLES:


CrunchBang Linux 10 R20111125 Available for Download

Download CRUX 2.7.1 With Linux Kernel 2.6.39.4

Softpedia Linux Weekly, Issue 175

GNOME 3.3.2 Development Release Is Here

KDE SC 4.8 Beta 1 Is Available for Testing

READER COMMENTS:


Comment #1 by: werch on 29 Nov 2011, 18:29 UTC reply to this comment

ubuntu isn t safer then windows.get use to it

Comment #1.1 by: Ravi on 01 Dec 2011, 07:35 GMT

@werch : Ubuntu is safer than windows. At least I don't have to install a antivirus and worry about any viruses. Not all OS are said to be perfect, so vulnerabilities will surely exist. And yeah security vulnerabilities also exists in windows that's why you have to download the fixes from the Windows Update. Don't fool peoples saying that "ubuntu isn t safer then windows" . Actually it is more secure,reliable and faster than windows!!


Comment #2 by: presidentDuck on 02 Dec 2011, 01:51 UTC reply to this comment

I WAS using Ubuntu dual boot with Windows 7. Now just use Mint 12 and will dual boot with Ubuntu 11.10 next to it. I use Virtual Box to use Magic Jack phone and the Slingbox broadcast my relative has for cable tv. Those only run on Windows for now so I only need to run Windows in the Virtual Box. I'm content without Windows and find Linux safer. Even though you can develop attacks at any OS, you can still get Anti-Virus for MAC/Linux from ESET Nod 32. I Tested the Linux version for 30 days. Runs perfect, doesn't slow the machine down. I had NOD32 on Windows side till it ran out of paid status. Of course you can find weaknesses in anything. But I'm safer for now on Linux.


Comment #3 by: hebintn on 26 Dec 2011, 17:04 UTC reply to this comment

I preface with... I ain't a computer geek. That said, I hate what Windows has become... a vehicle to hawk crap. So, I did the CD download version of Ubuntu 11.04 on my old Dell laptop that had so many Windows problems that I formatted over it. What I see in 11.04 I really liked, BUT I could never get online with it. Not being able to access the internet severely limited what I was able to do. Priority one for the developers should be a "wizard" that gets us computer zeros online. At least then we could try to make things work. The folks at the forum tried to help me, but soon got frustrated with another newbie trying to get something for nothing. I love the concept of open source, but you can bet that when it becomes popular enough to garner a significant following the evil hackers out there would turn their attention to OS and we'd be back to square one.

Copyright © 2001-2012 Softpedia. Contact/Tip us at

WindowsGamesDriversMacLinuxScriptsMobileHandheldNews

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   UPDATE YOUR SOFTWARE   |   ROMANIAN FORUM