4 Mar
2016
4 Mar
'16
09:48
apticron report [Fri, 04 Mar 2016 09:48:23 +0100]
========================================================================
apticron has detected that some packages need upgrading on:
hexagon.federez.net
[ 5.39.82.35 2001:41d0:8:9423::1 5.39.82.35 2001:41d0:8:9423::1 ]
The following packages are currently pending an upgrade:
linux-image-3.16.0-4-amd64 3.16.7-ckt20-1+deb8u4
linux-libc-dev 3.16.7-ckt20-1+deb8u4
========================================================================
Package Details:
Lecture des fichiers de modifications (« changelog »)...
--- Modifications pour linux (linux-image-3.16.0-4-amd64 linux-libc-dev) ---
linux (3.16.7-ckt20-1+deb8u4) jessie-security; urgency=high
* fuse: break infinite loop in fuse_fill_write_pages() (CVE-2015-8785)
* aufs: Fix regression due to "mm: make sendfile(2) killable"
(Closes: #812207)
- tiny, extract a new func xino_fwrite_wkq()
- XINO handles EINTR from the dying process
* [x86] mm: Add barriers and document switch_mm()-vs-flush synchronization
(CVE-2016-2069)
* [x86] mm: Improve switch_mm() barrier comments
* pipe: limit the per-user amount of pages allocated in pipes (CVE-2013-4312)
* iw_cxgb3: Fix incorrectly returning error on success (CVE-2015-8812)
* af_unix: Guard against other == sk in unix_dgram_sendmsg
(regression in 3.16.7-ckt20-1+deb8u1)
* Revert "workqueue: make sure delayed work run in local cpu"
(regression in 3.16.7-ckt20)
* ALSA: usb-audio: avoid freeing umidi object twice (CVE-2016-2384)
* unix: correctly track in-flight fds in sending process user_struct
(regression in 3.16.7-ckt20-1+deb8u3) (CVE-2016-2550)
* USB: fix invalid memory access in hub_activate() (CVE-2015-8816)
* ALSA: seq: Fix missing NULL check at remove_events ioctl (CVE-2016-2543)
* ALSA: seq: Fix race at timer setup and close (CVE-2016-2544)
* ALSA: timer: Fix double unlink of active_list (CVE-2016-2545)
* ALSA: timer: Fix race among timer ioctls (CVE-2016-2546)
* ALSA: timer: Harden slave timer list handling (CVE-2016-2547, CVE-2016-2548)
* ALSA: hrtimer: Fix stall by hrtimer_cancel() (CVE-2016-2549)
* AIO: properly check iovec sizes
-- Ben Hutchings <ben(a)decadent.org.uk> Mon, 29 Feb 2016 00:45:11 +0000
========================================================================
You can perform the upgrade by issuing the command:
apt-get dist-upgrade
as root on hexagon.federez.net
--
apticron