Kernel vulnerability in 13,10

[richb]

http://news.softpedia.com/news/New-K...0-422445.shtml

[Buddlespit]

I'm glad you saw that. My wife's computer hasn't had an update done in a week.
All done!

[richb]

I checked this morning and linux-image-3.11.0-15 (3.11.0-15.25) not in the Kubuntu repos yet. It is still at 3.11.0-15,16

[life0riley]

It didn't come out as an update? I get notified when updates are available.

[richb]

It didn't come out as an update? I get notified when updates are available.

Not yet.

[life0riley]

Yikes!

[richb]

I would not worry about it too much. It states "an unprivileged local user" can exploit the flaw. You have any of those sitting around at home.

[life0riley]

Not any that are interested or capable of doing any damage.

[SteveRiley]

I checked this morning and linux-image-3.11.0-15 (3.11.0-15.25) not in the Kubuntu repos yet. It is still at 3.11.0-15,16

Which package(s) is/are you checking? Here...

steve@t520:~$ [B]dpkg -l | grep linux- | cut -c-80[/B]
ii  ladspa-sdk                                1.13-2                            
ii  linux-firmware                            1.116.1                           
ii  linux-generic                             3.11.0.15.16                      
ii  linux-headers-3.11.0-15                   3.11.0-15.25                      
ii  linux-headers-3.11.0-15-generic           3.11.0-15.25                      
ii  linux-headers-3.12-9.dmz.2-liquorix-amd64 3.12-9                            
ii  linux-headers-3.13.1-031301               3.13.1-031301.201401291035        
ii  linux-headers-3.13.1-031301-generic       3.13.1-031301.201401291035        
ii  linux-headers-generic                     3.11.0.15.16                      
ii  linux-headers-liquorix-amd64              3.12-9                            
ii  linux-image-3.11.0-15-generic             3.11.0-15.25                      
ii  linux-image-3.12-9.dmz.2-liquorix-amd64   3.12-9                            
ii  linux-image-3.13.1-031301-generic         3.13.1-031301.201401291035        
ii  linux-image-extra-3.11.0-15-generic       3.11.0-15.25                      
ii  linux-image-generic                       3.11.0.15.16                      
ii  linux-image-liquorix-amd64                3.12-9                            
ii  linux-libc-dev:amd64                      3.11.0-15.25                      
ii  linux-sound-base                          1.0.25+dfsg-0ubuntu4              
ii  syslinux-common                           3:4.05+dfsg-6+deb7u3ubuntu1       
ii  syslinux-legacy                           2:3.63+dfsg-2ubuntu5

The linux-generic, linux-image-generic, and linux-headers-generic metapackages haven't changed version numbers. But the actual kernel image in linux-image-3.11.0-15-generic (and the associated headers) have been updated to 3.11.0-15.25:

steve@t520:~$ [B]apt-cache policy linux-image-3.11.0-15-generic[/B]
linux-image-3.11.0-15-generic:
  Installed: 3.11.0-15.25
  Candidate: 3.11.0-15.25
  Version table:
 *** 3.11.0-15.25 0
        500 http://mirror.pnl.gov/ubuntu/ saucy-updates/main amd64 Packages
        500 http://mirror.pnl.gov/ubuntu/ saucy-proposed/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu/ saucy-security/main amd64 Packages
        100 /var/lib/dpkg/status

[richb]

My bad