Ubuntu
linux-lts-backport-natty package

CVE-2011-4087

Bug #887302 reported by Marc Deslauriers on 2011-11-07

258

This bug affects 1 person

	Status	Importance	Assigned to
linux (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Fix Released	Medium	Unassigned
Oneiric	Won't Fix	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
linux-armadaxp (Ubuntu)	Fix Released	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Maverick	Invalid	Undecided	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Quantal	Fix Released	Medium	Unassigned
linux-ec2 (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
linux-fsl-imx51 (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
linux-lts-backport-maverick (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
linux-lts-backport-natty (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Won't Fix	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
linux-lts-backport-oneiric (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Fix Released	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
linux-mvl-dove (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Invalid	Medium	Unassigned
Oneiric	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
linux-ti-omap4 (Ubuntu)	Invalid	Medium	Unassigned
Hardy	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Maverick	Invalid	Medium	Unassigned
Natty	Fix Released	Medium	Andy Whitcroft
Oneiric	Won't Fix	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned

Bug Description

Multiple remote denial of service in Linux bridge networking code 2.6.37-3.0

Break-Fix: 462fb2af9788a82a534f8184abfde31574e1cfa0 f8e9881c2aef1e982e5abc25c046820cd0b7cf64
Break-Fix: 462fb2af9788a82a534f8184abfde31574e1cfa0 66944e1c5797562cebe2d1857d46dff60bf9a69e
Break-Fix: 462fb2af9788a82a534f8184abfde31574e1cfa0 c65353daf137dd41f3ede3baf62d561fca076228

See original description

Tags:

Related branches

lp://staging/ubuntu/natty-proposed/linux-ti-omap4

CVE References

Revision history for this message

Marc Deslauriers (mdeslaur) wrote on 2011-11-07:

CVE-2011-4087

tags:	added: kernel-cve-tracking-bug
security vulnerability:	no → yes
security vulnerability:	no → yes
Changed in linux-ec2 (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Natty):
status:	New → Invalid
Changed in linux-lts-backport-oneiric (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-lts-backport-oneiric (Ubuntu Lucid):
status:	New → Fix Committed
Changed in linux-lts-backport-oneiric (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-backport-oneiric (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-lts-backport-oneiric (Ubuntu Maverick):
status:	New → Invalid
Changed in linux-lts-backport-oneiric (Ubuntu Natty):
status:	New → Invalid
Changed in linux-lts-backport-natty (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-lts-backport-natty (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-backport-natty (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-lts-backport-natty (Ubuntu Maverick):
status:	New → Invalid
Changed in linux-lts-backport-natty (Ubuntu Natty):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Precise):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Maverick):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Natty):
status:	New → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Maverick):
status:	New → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Natty):
status:	New → Invalid
Changed in linux (Ubuntu Oneiric):
status:	New → Fix Committed
Changed in linux (Ubuntu Lucid):
status:	New → Invalid
Changed in linux (Ubuntu Precise):
status:	New → Invalid
Changed in linux (Ubuntu Hardy):
status:	New → Invalid
Changed in linux (Ubuntu Maverick):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Oneiric):
status:	New → Fix Committed
Changed in linux-ti-omap4 (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Maverick):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Maverick):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Natty):
status:	New → Invalid
description:	updated
Changed in linux-ec2 (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Maverick):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux (Ubuntu Maverick):
importance:	Undecided → Medium

Marc Deslauriers (mdeslaur) on 2011-11-07

Changed in linux (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Natty):
importance:	Undecided → Medium

Andy Whitcroft (apw) on 2011-11-21

Changed in linux (Ubuntu Natty):
status:	New → Fix Committed
Changed in linux-lts-backport-natty (Ubuntu Lucid):
status:	New → Fix Committed

John Johansen (jjohansen) on 2011-11-21

description:

updated

Andy Whitcroft (apw) on 2011-11-23

Changed in linux-ti-omap4 (Ubuntu Natty):
assignee:	nobody → Andy Whitcroft (apw)
status:	New → Fix Committed

John Johansen (jjohansen) on 2011-11-30

Changed in linux (Ubuntu Natty):
status:	Fix Committed → Fix Released

John Johansen (jjohansen) on 2011-12-09

Changed in linux-lts-backport-oneiric (Ubuntu Lucid):
status:	Fix Committed → Fix Released

Revision history for this message

Launchpad Janitor (janitor) wrote on 2011-12-12:

This bug was fixed in the package linux-ti-omap4 - 2.6.38-1209.18

---------------
linux-ti-omap4 (2.6.38-1209.18) natty-proposed; urgency=low

* Release Tracking Bug
- LP: #897566

[ Upstream Kernel Changes ]

  * crypto: ghash - Avoid null pointer dereference if no key is set
    - LP: #887299
    - CVE-2011-4081
  * xfs: Fix possible memory corruption in xfs_readlink, CVE-2011-4077
    - LP: #887298
    - CVE-2011-4077
  * jbd/jbd2: validate sb->s_first in journal_get_superblock()
    - LP: #893148
    - CVE-2011-4132
  * inetpeer: reduce stack usage, CVE-2011-4087
    - LP: #887302
    - CVE-2011-4087
  * hfs: add sanity check for file name length, CVE-2011-4330
    - LP: #894374
    - CVE-2011-4330
  * ipv6: udp: fix the wrong headroom check
    - LP: #894373
    - CVE-2011-4326
-- Paolo Pisati <email address hidden> Fri, 02 Dec 2011 13:15:41 +0100

Changed in linux-ti-omap4 (Ubuntu Natty):
status:	Fix Committed → Fix Released

John Johansen (jjohansen) on 2012-05-01

Changed in linux-armadaxp (Ubuntu Maverick):
status:	New → Invalid

John Johansen (jjohansen) on 2012-05-01

Changed in linux-armadaxp (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Oneiric):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Hardy):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Natty):
status:	New → Invalid
importance:	Undecided → Medium

John Johansen (jjohansen) on 2012-05-03

Changed in linux-armadaxp (Ubuntu Precise):
status:	New → Fix Committed

John Johansen (jjohansen) on 2012-05-04

Changed in linux-armadaxp (Ubuntu Quantal):
status:	New → Fix Committed
importance:	Undecided → Medium

Ike Panhc (ikepanhc) on 2012-09-20

Changed in linux-armadaxp (Ubuntu Precise):
status:	Fix Committed → Fix Released
Changed in linux-armadaxp (Ubuntu Quantal):
status:	Fix Committed → Fix Released

Jamie Strandboge (jdstrand) on 2013-05-21

Changed in linux-lts-backport-natty (Ubuntu Lucid):
status:	Fix Committed → Won't Fix
Changed in linux-ti-omap4 (Ubuntu Oneiric):
status:	Fix Committed → Won't Fix

Revision history for this message

Jamie Strandboge (jdstrand) wrote on 2013-07-12:

Thank you for reporting this bug to Ubuntu. oneiric has reached EOL
(End of Life) for this package and is no longer supported. As
a result, this bug against oneiric is being marked "Won't Fix".
Please see https://wiki.ubuntu.com/Releases for currently
supported Ubuntu releases.

Please feel free to report any other bugs you may find.

Changed in linux (Ubuntu Oneiric):
status:	Fix Committed → Won't Fix

Report a bug

This report contains Public Security information

Everyone can see this security related information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux-lts-backport-natty package

CVE-2011-4087

Bug Description

Related branches

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-lts-backport-natty package