This bug was fixed in the package linux - 2.6.32-69.136
---------------
linux (2.6.32-69.136) lucid; urgency=low
[ Brad Figg ]
* Release Tracking Bug
- LP: #1395827
[ Upstream Kernel Changes ]
* net: sctp: fix skb_over_panic when receiving malformed ASCONF chunks
- LP: #1386367
- CVE-2014-3673
* net: sctp: fix panic on duplicate ASCONF chunks
- LP: #1386392
- CVE-2014-3687
* net: sctp: fix remote memory pressure from excessive queueing
- LP: #1386393
- CVE-2014-3688
* mac80211: fix fragmentation code, particularly for encryption
- LP: #1392013
- CVE-2014-8709
* ttusb-dec: buffer overflow in ioctl
- LP: #1395187
- CVE-2014-8884
* net: sctp: fix NULL pointer dereference in af->from_addr_param on
malformed packet
- LP: #1392820
- CVE-2014-7841
-- Brad Figg <brad.f...@canonical.com> Mon, 24 Nov 2014 10:45:44 -0800
** Changed in: linux (Ubuntu Lucid)
Status: Fix Committed => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3673
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-3688
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-7841
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-8709
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-8884
** Changed in: linux-ec2 (Ubuntu Lucid)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1386392
Title:
CVE-2014-3687
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1386392/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
