This bug was fixed in the package linux - 2.6.32-50.112
--------------- linux (2.6.32-50.112) lucid; urgency=low
[Brad Figg]
* Release Tracking Bug - LP: #1199494
[ Upstream Kernel Changes ]
* block: do not pass disk names as format strings - LP: #1189832 - CVE-2013-2851 * drivers/cdrom/cdrom.c: use kzalloc() for failing hardware - LP: #1191463 - CVE-2013-2164 * ipv6: ip6_sk_dst_check() must not assume ipv6 dst - LP: #1198293 - CVE-2013-2232 * af_key: fix info leaks in notify messages - LP: #1198294 - CVE-2013-2234 * af_key: initialize satype in key_notify_policy_flush() - LP: #1198296 - CVE-2013-2237 -- Brad Figg <email address hidden> Tue, 09 Jul 2013 13:10:40 -0700
This bug was fixed in the package linux - 2.6.32-50.112
---------------
linux (2.6.32-50.112) lucid; urgency=low
[Brad Figg]
* Release Tracking Bug
- LP: #1199494
[ Upstream Kernel Changes ]
* block: do not pass disk names as format strings cdrom/cdrom. c: use kzalloc() for failing hardware policy_ flush()
- LP: #1189832
- CVE-2013-2851
* drivers/
- LP: #1191463
- CVE-2013-2164
* ipv6: ip6_sk_dst_check() must not assume ipv6 dst
- LP: #1198293
- CVE-2013-2232
* af_key: fix info leaks in notify messages
- LP: #1198294
- CVE-2013-2234
* af_key: initialize satype in key_notify_
- LP: #1198296
- CVE-2013-2237
-- Brad Figg <email address hidden> Tue, 09 Jul 2013 13:10:40 -0700