Nuovi aggiornamenti sulla sicurezza per Ubuntu 9.04 Jaunty Jackalope

In data odierna Canonical ha reso pubblici nuovi aggiornamenti per la sicurezza relativi all'ultima release di casa Ubuntu: Ubuntu 9.04 Jaunty Jackalope:

• Versione 2.6.28-13.45:

[ Upstream Kernel Changes ]

* add some long-missing capabilities to fs_mask
- CVE-2009-1072
* KVM: VMX: Don't allow uninhibited access to EFER on i386
- CVE-2009-1242
* exit_notify: kill the wrong capable(CAP_KILL) check
- CVE-2009-1337
* e1000: add missing length check to e1000 receive routine
- CVE-2009-1385
* Fix memory overwrite when saving nativeFileSystem field during mount
- CVE-2009-1439
* cifs: Increase size of tmp_buf in cifs_readdir to avoid potential
overflows
- CVE-2009-1633
* cifs: Rename cifs_strncpy_to_host and fix buffer size
- CVE-2009-1633
* cifs: fix unicode string area word alignment in session setup
- CVE-2009-1633
* cifs: Fix incorrect destination buffer size in cifs_strncpy_to_host
- CVE-2009-1633
* sparc64: Fix crash with /proc/iomem
- CVE-2009-1914
* splice: fix deadlock in splicing to file
- CVE-2009-1961
* unreached code in selinux_ip_postroute_iptables_compat() (CVE-2009-1184)
- CVE-2009-1184
* agp: zero pages before sending to userspace
- CVE-2009-1192
* af_rose/x25: Sanity check the maximum user frame size
- CVE-2009-1265
* nfs: Fix NFS v4 client handling of MAY_EXEC in nfs_permission.
- CVE-2009-1630
* ipv6: don't use tw net when accounting for recycled tw
- CVE-2009-1360

• Versione 2.6.28-13.45:

		*Promozione valida fino al 30/09/2009 Regolamento
	Vuoi essere tu il fortunato? Registrati subito in Privalia per partecipare al sorteggio del nuovo iPhone 3G. Privalia è un Club Privato on-line che organizza, in esclusiva per i suoi soci, campagne vendita delle migliori marche di moda con sconti fino al 70%. Entra a far parte di Privalia e potrai vincere il cellulare Multimedia più intelligente! Non lasciartelo scappare!

[ Upstream Kernel Changes ]

* add some long-missing capabilities to fs_mask
- CVE-2009-1072
* KVM: VMX: Don't allow uninhibited access to EFER on i386
- CVE-2009-1242
* exit_notify: kill the wrong capable(CAP_KILL) check
- CVE-2009-1337
* e1000: add missing length check to e1000 receive routine
- CVE-2009-1385
* Fix memory overwrite when saving nativeFileSystem field during mount
- CVE-2009-1439
* cifs: Increase size of tmp_buf in cifs_readdir to avoid potential
overflows
- CVE-2009-1633
* cifs: Rename cifs_strncpy_to_host and fix buffer size
- CVE-2009-1633
* cifs: fix unicode string area word alignment in session setup
- CVE-2009-1633
* cifs: Fix incorrect destination buffer size in cifs_strncpy_to_host
- CVE-2009-1633
* sparc64: Fix crash with /proc/iomem
- CVE-2009-1914
* splice: fix deadlock in splicing to file
- CVE-2009-1961
* unreached code in selinux_ip_postroute_iptables_compat() (CVE-2009-1184)
- CVE-2009-1184
* agp: zero pages before sending to userspace
- CVE-2009-1192
* af_rose/x25: Sanity check the maximum user frame size
- CVE-2009-1265
* nfs: Fix NFS v4 client handling of MAY_EXEC in nfs_permission.
- CVE-2009-1630
* ipv6: don't use tw net when accounting for recycled tw
- CVE-2009-1360

• Versione 2.6.28-13.45:

[ Upstream Kernel Changes ]

* add some long-missing capabilities to fs_mask
- CVE-2009-1072
* KVM: VMX: Don't allow uninhibited access to EFER on i386
- CVE-2009-1242
* exit_notify: kill the wrong capable(CAP_KILL) check
- CVE-2009-1337
* e1000: add missing length check to e1000 receive routine
- CVE-2009-1385
* Fix memory overwrite when saving nativeFileSystem field during mount
- CVE-2009-1439
* cifs: Increase size of tmp_buf in cifs_readdir to avoid potential
overflows
- CVE-2009-1633
* cifs: Rename cifs_strncpy_to_host and fix buffer size
- CVE-2009-1633
* cifs: fix unicode string area word alignment in session setup
- CVE-2009-1633
* cifs: Fix incorrect destination buffer size in cifs_strncpy_to_host
- CVE-2009-1633
* sparc64: Fix crash with /proc/iomem
- CVE-2009-1914
* splice: fix deadlock in splicing to file
- CVE-2009-1961
* unreached code in selinux_ip_postroute_iptables_compat() (CVE-2009-1184)
- CVE-2009-1184
* agp: zero pages before sending to userspace
- CVE-2009-1192
* af_rose/x25: Sanity check the maximum user frame size
- CVE-2009-1265
* nfs: Fix NFS v4 client handling of MAY_EXEC in nfs_permission.
- CVE-2009-1630
* ipv6: don't use tw net when accounting for recycled tw
- CVE-2009-1360

• Versione 2.6.28-13.45:

[ Upstream Kernel Changes ]

* add some long-missing capabilities to fs_mask
- CVE-2009-1072
* KVM: VMX: Don't allow uninhibited access to EFER on i386
- CVE-2009-1242
* exit_notify: kill the wrong capable(CAP_KILL) check
- CVE-2009-1337
* e1000: add missing length check to e1000 receive routine
- CVE-2009-1385
* Fix memory overwrite when saving nativeFileSystem field during mount
- CVE-2009-1439
* cifs: Increase size of tmp_buf in cifs_readdir to avoid potential
overflows
- CVE-2009-1633
* cifs: Rename cifs_strncpy_to_host and fix buffer size
- CVE-2009-1633
* cifs: fix unicode string area word alignment in session setup
- CVE-2009-1633
* cifs: Fix incorrect destination buffer size in cifs_strncpy_to_host
- CVE-2009-1633
* sparc64: Fix crash with /proc/iomem
- CVE-2009-1914
* splice: fix deadlock in splicing to file
- CVE-2009-1961
* unreached code in selinux_ip_postroute_iptables_compat() (CVE-2009-1184)
- CVE-2009-1184
* agp: zero pages before sending to userspace
- CVE-2009-1192
* af_rose/x25: Sanity check the maximum user frame size
- CVE-2009-1265
* nfs: Fix NFS v4 client handling of MAY_EXEC in nfs_permission.
- CVE-2009-1630
* ipv6: don't use tw net when accounting for recycled tw
- CVE-2009-1360

Raccomandati anche gli aggiornamenti per cups:

• Versione 1.3.9-17ubuntu3.2:

[ Till Kamppeter ]
* debian/rules: Switch the pdftops filter back to Poppler, as Ghostscript
has a lot of problems in generating PostScript (LP: #382379).
* debian/patches/pdftops-cups-1.4.dpatch: Fixes for the pdftops
filter in Poppler mode: Do not emit PostScript level 3 as it Poppler's
PostScript level 3 output is not compatible with HP's PostScript printers
(LP: #277404); Added support for the new "-origpagesizes" option of
Poppler's pdftops, so that documents with pages of different sizes get
correctly printed (LP: #310575).

[ Martin Pitt ]
* debian/control: Bump poppler-utils dependency to the version which
provides -origpagesizes.

• Versione 1.3.9-17ubuntu3.2:

[ Till Kamppeter ]
* debian/rules: Switch the pdftops filter back to Poppler, as Ghostscript
has a lot of problems in generating PostScript (LP: #382379).
* debian/patches/pdftops-cups-1.4.dpatch: Fixes for the pdftops
filter in Poppler mode: Do not emit PostScript level 3 as it Poppler's
PostScript level 3 output is not compatible with HP's PostScript printers
(LP: #277404); Added support for the new "-origpagesizes" option of
Poppler's pdftops, so that documents with pages of different sizes get
correctly printed (LP: #310575).

[ Martin Pitt ]
* debian/control: Bump poppler-utils dependency to the version which
provides -origpagesizes.

• Versione 1.3.9-17ubuntu3.2:

[ Till Kamppeter ]
* debian/rules: Switch the pdftops filter back to Poppler, as Ghostscript
has a lot of problems in generating PostScript (LP: #382379).
* debian/patches/pdftops-cups-1.4.dpatch: Fixes for the pdftops
filter in Poppler mode: Do not emit PostScript level 3 as it Poppler's
PostScript level 3 output is not compatible with HP's PostScript printers
(LP: #277404); Added support for the new "-origpagesizes" option of
Poppler's pdftops, so that documents with pages of different sizes get
correctly printed (LP: #310575).

[ Martin Pitt ]
* debian/control: Bump poppler-utils dependency to the version which
provides -origpagesizes.

• Versione 1.3.9-17ubuntu3.2:

[ Till Kamppeter ]
* debian/rules: Switch the pdftops filter back to Poppler, as Ghostscript
has a lot of problems in generating PostScript (LP: #382379).
* debian/patches/pdftops-cups-1.4.dpatch: Fixes for the pdftops
filter in Poppler mode: Do not emit PostScript level 3 as it Poppler's
PostScript level 3 output is not compatible with HP's PostScript printers
(LP: #277404); Added support for the new "-origpagesizes" option of
Poppler's pdftops, so that documents with pages of different sizes get
correctly printed (LP: #310575).

[ Martin Pitt ]
* debian/control: Bump poppler-utils dependency to the version which
provides -origpagesizes.

• Versione 1.3.9-17ubuntu3.2:

[ Till Kamppeter ]
* debian/rules: Switch the pdftops filter back to Poppler, as Ghostscript
has a lot of problems in generating PostScript (LP: #382379).
* debian/patches/pdftops-cups-1.4.dpatch: Fixes for the pdftops
filter in Poppler mode: Do not emit PostScript level 3 as it Poppler's
PostScript level 3 output is not compatible with HP's PostScript printers
(LP: #277404); Added support for the new "-origpagesizes" option of
Poppler's pdftops, so that documents with pages of different sizes get
correctly printed (LP: #310575).

[ Martin Pitt ]
* debian/control: Bump poppler-utils dependency to the version which
provides -origpagesizes.

• Versione 1.3.9-17ubuntu3.2:

[ Till Kamppeter ]
* debian/rules: Switch the pdftops filter back to Poppler, as Ghostscript
has a lot of problems in generating PostScript (LP: #382379).
* debian/patches/pdftops-cups-1.4.dpatch: Fixes for the pdftops
filter in Poppler mode: Do not emit PostScript level 3 as it Poppler's
PostScript level 3 output is not compatible with HP's PostScript printers
(LP: #277404); Added support for the new "-origpagesizes" option of
Poppler's pdftops, so that documents with pages of different sizes get
correctly printed (LP: #310575).

[ Martin Pitt ]
* debian/control: Bump poppler-utils dependency to the version which
provides -origpagesizes.

e le librerie poppler:

• Versione 0.10.5-1ubuntu2.2:

* debian/patches/20_pdftops-multiple-page-size-support.patch: Made new
page-size-conserving PostScript output mode working together with Duplex,
(LP: #382379).

• Versione 0.10.5-1ubuntu2.1:

* debian/patches/25_poppler-ps-output-broken-binary-encoding-fix.patch:
Fixed bug in copying ASCII85-encoded binary data from the PDF input
file which produced broken PostScript (LP: #335397).
* debian/patches/20_pdftops-multiple-page-size-support.patch: Added new
output mode to the PostScript output device, so that the original page
sizes of PDF documents with multiple page sizes stay conserved
(LP: #382379).

• Versione 0.10.5-1ubuntu2.2:

* debian/patches/20_pdftops-multiple-page-size-support.patch: Made new
page-size-conserving PostScript output mode working together with Duplex,
(LP: #382379).

• Versione 0.10.5-1ubuntu2.1:

* debian/patches/25_poppler-ps-output-broken-binary-encoding-fix.patch:
Fixed bug in copying ASCII85-encoded binary data from the PDF input
file which produced broken PostScript (LP: #335397).
* debian/patches/20_pdftops-multiple-page-size-support.patch: Added new
output mode to the PostScript output device, so that the original page
sizes of PDF documents with multiple page sizes stay conserved
(LP: #382379).

• Versione 2:1.2.0-1ubuntu1.1:

[ Alberto Milone ]
* debian/patches/101_fix_devicepresence_declaration_cplusplus.diff:
- Use extern "C" in the declaration for DevicePresence (in
XInput.h) so that it can be accessed from C++ (LP: #373711).

• Versione 4.0-0ubuntu0.9.04.1:

* Upgrade to support LSB 4.0. LP: #370066.

• Versione 4.0-0ubuntu0.9.04.1:

* Upgrade to support LSB 4.0. LP: #370066.

• Versione 0.10.5-1ubuntu2.2:

* debian/patches/20_pdftops-multiple-page-size-support.patch: Made new
page-size-conserving PostScript output mode working together with Duplex,
(LP: #382379).

• Versione 0.10.5-1ubuntu2.1:

* debian/patches/25_poppler-ps-output-broken-binary-encoding-fix.patch:
Fixed bug in copying ASCII85-encoded binary data from the PDF input
file which produced broken PostScript (LP: #335397).
* debian/patches/20_pdftops-multiple-page-size-support.patch: Added new
output mode to the PostScript output device, so that the original page
sizes of PDF documents with multiple page sizes stay conserved
(LP: #382379).

Se ti è piaciuto l'articolo , iscriviti al feed cliccando sull'immagine sottostante per tenerti sempre aggiornato sui nuovi contenuti del blog:

Ultimi post pubblicati 28/05 - È stata rilasciata nei giorni scorsi la versione 2.6.29.4 del Kernel Linux 28/05 - Qual è la differenza tra shell interattiva e non interattiva ed altre domande 19/05 - Audex, un'ottimo software specifico per Kde per estrarre e trasformare i nostri cd audio rilascia la versione 0.71 beta2 22/04 - Ubuntu 9.04 Jaunty Jackalope parte alla grande 17/04 - Chiedere i CD di Ubuntu 9.04 Jaunty Jackalope tramite Shipit 16/04 - Nibbles, un gioco di vermi per Gnome 13/04 - Gnometris deriva dal classico gioco dei blocchi che cadono, Tetris 13/04 - Forza 4 è una versione dell'omonimo gioco per il Progetto GNOME 13/04 - Cinque o più, è la versione per GNOME del popolare gioco per Windows chiamato Linee colorate 01/04 - Come installare i repository di Medibuntu in Ubuntu 9.04 Jaunty Jackalope 04/03 - Ubuntu Derivate, “distinte” dal progetto originale
	Universo Linux 05/06 - Per celebrare il rilascio di Galileo Eclipse organizza il DemoCamps 01/06 - 10 comandi utili in Linux da imparare a memoria 21/05 - Gnome vs. KDE: duello tra i due desktop environment più diffusi 19/05 - Gobby, un editor collaborativo che permette condividere documenti, immagini, informazioni e perché no, anche codici 19/05 - Rilasciato Amarok 2.1 beta, uno dei migliori programmi open source per riprodurre e gestire file audio 19/05 - Software Packages in Ubuntu 9.04 "Jaunty Jackalope", Categorìa Librerie Perl, seconda parte 12/05 - Linux nel 50% dei portatili nel 2010 secondo il CEO di Linpus 12/05 - Linux nel 50% dei portatili nel 2010 secondo il CEO di Linpus 12/05 - Ubuntu One, nuovo servizio di sincronizzazione dati targato Canonical