[ubuntu/lucid-proposed] linux 2.6.32-69.136 (Accepted)

Adam Conrad adconrad at 0c3.net
Tue Nov 25 22:10:42 UTC 2014


linux (2.6.32-69.136) lucid; urgency=low

  [ Brad Figg ]

  * Release Tracking Bug
    - LP: #1395827

  [ Upstream Kernel Changes ]

  * net: sctp: fix skb_over_panic when receiving malformed ASCONF chunks
    - LP: #1386367
    - CVE-2014-3673
  * net: sctp: fix panic on duplicate ASCONF chunks
    - LP: #1386392
    - CVE-2014-3687
  * net: sctp: fix remote memory pressure from excessive queueing
    - LP: #1386393
    - CVE-2014-3688
  * mac80211: fix fragmentation code, particularly for encryption
    - LP: #1392013
    - CVE-2014-8709
  * ttusb-dec: buffer overflow in ioctl
    - LP: #1395187
    - CVE-2014-8884
  * net: sctp: fix NULL pointer dereference in af->from_addr_param on
    malformed packet
    - LP: #1392820
    - CVE-2014-7841

Date: 2014-11-24 21:11:12.465904+00:00
Changed-By: Brad Figg <brad.figg at canonical.com>
Signed-By: Adam Conrad <adconrad at 0c3.net>
https://launchpad.net/ubuntu/+source/linux/2.6.32-69.136
-------------- next part --------------
Sorry, changesfile not available.


More information about the Lucid-changes mailing list