Ubuntu CVE: CVE-2016-0758 & CVE-2016-3713 - Kernel vulnerabilities

[Robert C Jennings]

CPC Partner Notification of a critical CVE: Canonical is aware of this CVE and actively working on a resolution. Depending upon previously agreed upon image publishing guidelines the new images will be published automatically or to your image repository. Please monitor this bug for status updates.

The Ubuntu Security Team has asked for a new release of Ubuntu Cloud images in relation to CVE-2016-0758 & CVE-2016-3713. These issues affects all kernels for trusty, wily, and xenial, as well as the trusty HWE kernel in precise.

Additional details can be found in here -
 http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-3713.html
 http://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-0758.html

[Robert C Jennings (rcj)]

Updated images which address this CVE will be published to https://cloud-images.ubuntu.com as they become available. Images already in use will require an update of the kernel from the archive and a reboot for that kernel with fixes to be effective.

Ubuntu Security Notifications are available @ http://www.ubuntu.com/usn/ and detail the kernel package versions which address theses CVEs for each affected release.