This bug was fixed in the package linux - 2.6.32-48.110
--------------- linux (2.6.32-48.110) lucid; urgency=low
[Steve Conklin]
* Release Tracking Bug - LP: #1186340
[ Stefan Bader ]
* (config) Import Xen specific config options from ec2 - LP: #1177431 * SAUCE: xen: Send spinlock IPI to all waiters - LP: #1011792, #1177431
[ Upstream Kernel Changes ]
* ax25: fix info leak via msg_name in ax25_recvmsg() - LP: #1172366 - CVE-2013-3223 * Bluetooth: fix possible info leak in bt_sock_recvmsg() - LP: #1172368 - CVE-2013-3224 * tipc: fix info leaks via msg_name in recv_msg/recv_stream - LP: #1172403 - CVE-2013-3235 * rose: fix info leak via msg_name in rose_recvmsg() - LP: #1172394 - CVE-2013-3234 * Bluetooth: RFCOMM - Fix missing msg_namelen update in rfcomm_sock_recvmsg() - LP: #1172369 - CVE-2013-3225 * atm: update msg_namelen in vcc_recvmsg() - LP: #1172365 - CVE-2013-3222 * KVM: Fix bounds checking in ioapic indirect register reads (CVE-2013-1798) - LP: #1158262 - CVE-2013-1798 * llc: Fix missing msg_namelen update in llc_ui_recvmsg() - LP: #1172385 - CVE-2013-3231 * netrom: fix info leak via msg_name in nr_recvmsg() - LP: #1172386 - CVE-2013-3232 * irda: Fix missing msg_namelen update in irda_recvmsg_dgram() - LP: #1172380 - CVE-2013-3228 * iucv: Fix missing msg_namelen update in iucv_sock_recvmsg() - LP: #1172381 - CVE-2013-3229 -- Steve Conklin <email address hidden> Fri, 31 May 2013 12:03:46 -0500
This bug was fixed in the package linux - 2.6.32-48.110
---------------
linux (2.6.32-48.110) lucid; urgency=low
[Steve Conklin]
* Release Tracking Bug
- LP: #1186340
[ Stefan Bader ]
* (config) Import Xen specific config options from ec2
- LP: #1177431
* SAUCE: xen: Send spinlock IPI to all waiters
- LP: #1011792, #1177431
[ Upstream Kernel Changes ]
* ax25: fix info leak via msg_name in ax25_recvmsg() recv_stream sock_recvmsg( ) dgram()
- LP: #1172366
- CVE-2013-3223
* Bluetooth: fix possible info leak in bt_sock_recvmsg()
- LP: #1172368
- CVE-2013-3224
* tipc: fix info leaks via msg_name in recv_msg/
- LP: #1172403
- CVE-2013-3235
* rose: fix info leak via msg_name in rose_recvmsg()
- LP: #1172394
- CVE-2013-3234
* Bluetooth: RFCOMM - Fix missing msg_namelen update in
rfcomm_
- LP: #1172369
- CVE-2013-3225
* atm: update msg_namelen in vcc_recvmsg()
- LP: #1172365
- CVE-2013-3222
* KVM: Fix bounds checking in ioapic indirect register reads
(CVE-2013-1798)
- LP: #1158262
- CVE-2013-1798
* llc: Fix missing msg_namelen update in llc_ui_recvmsg()
- LP: #1172385
- CVE-2013-3231
* netrom: fix info leak via msg_name in nr_recvmsg()
- LP: #1172386
- CVE-2013-3232
* irda: Fix missing msg_namelen update in irda_recvmsg_
- LP: #1172380
- CVE-2013-3228
* iucv: Fix missing msg_namelen update in iucv_sock_recvmsg()
- LP: #1172381
- CVE-2013-3229
-- Steve Conklin <email address hidden> Fri, 31 May 2013 12:03:46 -0500