[SECURITY] [DSA 2972-1] linux security update

2014-07-0616:16:14

lists.debian.org

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

0.4%

JSON

Debian Security Advisory DSA-2972-1 [email protected]
http://www.debian.org/security/ Salvatore Bonaccorso
July 06, 2014 http://www.debian.org/security/faq

Package : linux
CVE ID : CVE-2014-4699

Andy Lutomirski discovered that the ptrace syscall was not verifying the
RIP register to be valid in the ptrace API on x86_64 processors. An
unprivileged user could use this flaw to crash the kernel (resulting in
denial of service) or for privilege escalation.

For the stable distribution (wheezy), this problem has been fixed in
version 3.2.60-1+deb7u1. In addition, this update contains several
bugfixes originally targeted for the upcoming Wheezy point release.

For the unstable distribution (sid), this problem will be fixed soon.

We recommend that you upgrade your linux packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian7armelnic-modules-3.2.0-4-versatile-di< 3.2.60-1+deb7u1nic-modules-3.2.0-4-versatile-di_3.2.60-1+deb7u1_armel.deb
Debian7powerpccrypto-modules-3.2.0-4-powerpc64-di< 3.2.60-1+deb7u1crypto-modules-3.2.0-4-powerpc64-di_3.2.60-1+deb7u1_powerpc.deb
Debian7i386acpi-modules-3.2.0-4-486-di< 3.2.60-1+deb7u1acpi-modules-3.2.0-4-486-di_3.2.60-1+deb7u1_i386.deb
Debian7armelmd-modules-3.2.0-4-orion5x-di< 3.2.60-1+deb7u1md-modules-3.2.0-4-orion5x-di_3.2.60-1+deb7u1_armel.deb
Debian7i386scsi-modules-3.2.0-4-686-pae-di< 3.2.60-1+deb7u1scsi-modules-3.2.0-4-686-pae-di_3.2.60-1+deb7u1_i386.deb
Debian7powerpcisofs-modules-3.2.0-4-powerpc64-di< 3.2.60-1+deb7u1isofs-modules-3.2.0-4-powerpc64-di_3.2.60-1+deb7u1_powerpc.deb
Debian7armhfcrc-modules-3.2.0-4-mx5-di< 3.2.60-1+deb7u1crc-modules-3.2.0-4-mx5-di_3.2.60-1+deb7u1_armhf.deb
Debian7armelext2-modules-3.2.0-4-versatile-di< 3.2.60-1+deb7u1ext2-modules-3.2.0-4-versatile-di_3.2.60-1+deb7u1_armel.deb
Debian7mipselnbd-modules-3.2.0-4-loongson-2f-di< 3.2.60-1+deb7u1nbd-modules-3.2.0-4-loongson-2f-di_3.2.60-1+deb7u1_mipsel.deb
Debian7i386btrfs-modules-3.2.0-4-686-pae-di< 3.2.60-1+deb7u1btrfs-modules-3.2.0-4-686-pae-di_3.2.60-1+deb7u1_i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	armel	nic-modules-3.2.0-4-versatile-di	< 3.2.60-1+deb7u1	nic-modules-3.2.0-4-versatile-di_3.2.60-1+deb7u1_armel.deb
Debian	7	powerpc	crypto-modules-3.2.0-4-powerpc64-di	< 3.2.60-1+deb7u1	crypto-modules-3.2.0-4-powerpc64-di_3.2.60-1+deb7u1_powerpc.deb
Debian	7	i386	acpi-modules-3.2.0-4-486-di	< 3.2.60-1+deb7u1	acpi-modules-3.2.0-4-486-di_3.2.60-1+deb7u1_i386.deb
Debian	7	armel	md-modules-3.2.0-4-orion5x-di	< 3.2.60-1+deb7u1	md-modules-3.2.0-4-orion5x-di_3.2.60-1+deb7u1_armel.deb
Debian	7	i386	scsi-modules-3.2.0-4-686-pae-di	< 3.2.60-1+deb7u1	scsi-modules-3.2.0-4-686-pae-di_3.2.60-1+deb7u1_i386.deb
Debian	7	powerpc	isofs-modules-3.2.0-4-powerpc64-di	< 3.2.60-1+deb7u1	isofs-modules-3.2.0-4-powerpc64-di_3.2.60-1+deb7u1_powerpc.deb
Debian	7	armhf	crc-modules-3.2.0-4-mx5-di	< 3.2.60-1+deb7u1	crc-modules-3.2.0-4-mx5-di_3.2.60-1+deb7u1_armhf.deb
Debian	7	armel	ext2-modules-3.2.0-4-versatile-di	< 3.2.60-1+deb7u1	ext2-modules-3.2.0-4-versatile-di_3.2.60-1+deb7u1_armel.deb
Debian	7	mipsel	nbd-modules-3.2.0-4-loongson-2f-di	< 3.2.60-1+deb7u1	nbd-modules-3.2.0-4-loongson-2f-di_3.2.60-1+deb7u1_mipsel.deb
Debian	7	i386	btrfs-modules-3.2.0-4-686-pae-di	< 3.2.60-1+deb7u1	btrfs-modules-3.2.0-4-686-pae-di_3.2.60-1+deb7u1_i386.deb