Hello and welcome to Linux Security Weekly for August 5, 2012. Linux Security Weekly is the audio podcast which covers current and important security vulnerabilities in Linux and open source software for the past week.

Linux Security Weekly | 011 - 05 August 2012 Play Now | Play in Popup | Download

Show Notes:

Privilege escalation vulnerability in the NVidia proprietary driver

http://lwn.net/Articles/509131/

http://seclists.org/fulldisclosure/2012/Aug/4

Edit: Fixed! http://nvidia.custhelp.com/app/answers/detail/a_id/3140


Chrome Stable 21

http://chrome.blogspot.com/2012/07/new-senses-for-web.html

http://googlechromereleases.blogspot.com/2012/07/stable-channel-release.html

http://code.google.com/p/address-sanitizer/

PacketFence 3.5.0

http://www.packetfence.org/news/2012/article/packetfence-350-released.html

Apache Deltacloud 1.0

http://deltacloud.apache.org/

https://blogs.apache.org/foundation/entry/the_apache_software_foundation_announces30

Red Hat

bind, red hat 5 CVE-2012-3817

http://rhn.redhat.com/errata/RHSA-2012-1122.html

bind, red hat 5 and 6 CVE-2012-3817

http://rhn.redhat.com/errata/RHSA-2012-1123.html

kernel updates, red hat 6.2 EUS CVE-2011-1083 CVE-2012-2744

http://rhn.redhat.com/errata/RHSA-2012-1129.html

xen, red hat 5 CVE-2012-2625

http://rhn.redhat.com/errata/RHSA-2012-1130.html

kerberos, red hat 6 CVE-2012-1013 CVE-2012-1015

http://rhn.redhat.com/errata/RHSA-2012-1131.html

icedtea (java web plugin) red hat 6 CVE-2012-3422 CVE-2012-3423

http://rhn.redhat.com/errata/RHSA-2012-1132.html

bind-dyndb-ldap red hat 6 CVE-2012-3429

http://rhn.redhat.com/errata/RHSA-2012-1139.html

dhcp red hat 5 CVE-2012-3571

http://rhn.redhat.com/errata/RHSA-2012-1140.html

dhcp red hat 6 CVE-2012-3571 CVE-2012-3954

http://rhn.redhat.com/errata/RHSA-2012-1141.html

Ubuntu


kerberos 10.04-12.04 CVE-2012-1012, CVE-2012-1013, CVE-2012-1014, CVE-2012-1015

http://www.ubuntu.com/usn/usn-1520-1/

icedtea 10.04-12.04 CVE-2012-3422, CVE-2012-3423

http://www.ubuntu.com/usn/usn-1521-1/

Debian


bind CVE-2012-3817

http://www.debian.org/security/2012/dsa-2517

kerberos CVE-2012-1014, CVE-2012-1015

http://www.debian.org/security/2012/dsa-2518

libxml2 CVE-2012-2807

http://www.debian.org/security/2012/dsa-2521