The Dell Mini Project

Update udev to fix security vulnerability

Bug #374371 reported by Nicola Ferralis on 2009-05-10

256

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	The Dell Mini Project	Fix Released	Undecided	Unassigned

Bug Description

udev has been updated to generic hardy to fix two security vulnerabilities. It should be updated in hardu for the dell-mini. Changelog below.

udev (117-8ubuntu0.2) hardy-security; urgency=low

  * SECURITY UPDATE: root privilege escalation via udev event spoofing.
    - Add debian/patches/81-netlink-owner-check.patch: backport upstream
      fixes (CVE-2009-1185).
  * SECURITY UPDATE: overflow in path name encoding.
    - Add debian/patches/82-encoding-overflow.patch: backport upstream
      fixes (CVE-2009-1186).

-- Kees Cook <email address hidden> Wed, 08 Apr 2009 17:06:57 -0700

CVE References

Nicola Ferralis (feranick) on 2009-05-10

security vulnerability:

no → yes

Brian Chidester (brianchidester) on 2009-05-21

Changed in dell-mini:
status:	New → Confirmed

Nicola Ferralis (feranick) on 2009-06-29

Changed in dell-mini:
status:	Confirmed → Fix Released

Report a bug

This report contains Public Security information

Everyone can see this security related information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.