Sappiamo tutti quanto sia importante mantenere aggiornato il proprio sistema operativo, ma è parimenti esperienza comune che spesso siano proprio gli aggiornamenti a introdurre nuovi bug. Ubuntu segue delle linee guida ben precise per gestire questa situazione.La chiave di volta dell’intero discorso è che, una volta rilasciata la release, gli aggiornamenti non si fanno affatto, a meno che non riguardino vulnerabilità di sicurezza o bug particolarmente significativi.
Addirittura, nell’ottica di stabilizzare la release, già durante le ultime fasi di sviluppo l’ingresso di nuovi pacchetti dei vari software è sottoposto ad un controllo particolarmente rigido (una fase nota agli sviluppatori come “Feature Freeze”, appunto).
Gli aggiornamenti proposti a continuazione fanno parte del bollettino di sicurezza settimanale rilasciato da Canonical e riguardano in particolare:
- International Components for Unicode.
- X Window System.
- X.Org X Window System.
- X.Org X Server.
International Components for Unicode.
ICU is a C++ and C library that provides robust and full-featured Unicode and locale support.
This package contains the runtime libraries for ICU.
Modifiche per le versioni:
Versione installata: 4.4.2-2
Versione disponibile: 4.4.2-2ubuntu0.11.10.1
Versione 4.4.2-2ubuntu0.11.10.1:
* SECURITY UPDATE: denial of service and possible code execution via
out of bounds access
- debian/patches/CVE-2011-4599.patch: add bounds checks in
source/common/uloc.c.
- CVE-2011-4599
X Window System.
x11-common contains the filesystem infrastructure required for further installation of the X Window System in any configuration; it does not provide a full installation of clients, servers, libraries, and utilities required to run the X Window System.
A number of terms are used to refer to the X Window System, including "X", "X Version 11", "X11", "X11R6", and "X11R7".
The version of X used in Debian is derived from the version released by the X.Org Foundation, and is thus often also referred to as "X.Org".
All of the preceding quoted terms are functionally interchangeable in an Debian system.
Versione installata: 1:7.6+7ubuntu7
Versione disponibile: 1:7.6+7ubuntu7.1
Versione 1:7.6+7ubuntu7.1:
* SECURITY UPDATE: console requirement bypass (LP: #918332)
- debian/local/xserver-wrapper.c: drop alternative TTY support, and
also reset effective group id. Patch obtained from Debian squeeze
update.
- CVE-2011-4613
X.Org X Window System.
x11-common contains the filesystem infrastructure required for further installation of the X Window System in any configuration; it does not provide a full installation of clients, servers, libraries, and utilities required to run the X Window System.
A number of terms are used to refer to the X Window System, including "X", "X Version 11", "X11", "X11R6", and "X11R7".
The version of X used in Debian is derived from the version released by the X.Org Foundation, and is thus often also referred to as "X.Org".
All of the preceding quoted terms are functionally interchangeable in an Debian system.
Modifiche per le versioni:
Versione installata: 1:7.6+7ubuntu7
Versione disponibile: 1:7.6+7ubuntu7.1
Versione 1:7.6+7ubuntu7.1:
* SECURITY UPDATE: console requirement bypass (LP: #918332)
- debian/local/xserver-wrapper.c: drop alternative TTY support, and
also reset effective group id. Patch obtained from Debian squeeze
update.
- CVE-2011-4613
X.Org X Server.
This package depends on the full suite of the server and drivers for the X.Org X server.
It does not provide the actual server itself.
Modifiche per le versioni:
Versione installata: 1:7.6+7ubuntu7
Versione disponibile: 1:7.6+7ubuntu7.1
Versione 1:7.6+7ubuntu7.1:
* SECURITY UPDATE: console requirement bypass (LP: #918332)
- debian/local/xserver-wrapper.c: drop alternative TTY support, and
also reset effective group id. Patch obtained from Debian squeeze
update.
- CVE-2011-4613
This package contains the runtime libraries for ICU.
Modifiche per le versioni:
Versione installata: 4.4.2-2
Versione disponibile: 4.4.2-2ubuntu0.11.10.1
* SECURITY UPDATE: denial of service and possible code execution via
out of bounds access
- debian/patches/CVE-2011-4599.patch: add bounds checks in
source/common/uloc.c.
- CVE-2011-4599
X Window System.
A number of terms are used to refer to the X Window System, including "X", "X Version 11", "X11", "X11R6", and "X11R7".
The version of X used in Debian is derived from the version released by the X.Org Foundation, and is thus often also referred to as "X.Org".
All of the preceding quoted terms are functionally interchangeable in an Debian system.
Versione installata: 1:7.6+7ubuntu7
Versione disponibile: 1:7.6+7ubuntu7.1
Versione 1:7.6+7ubuntu7.1:
* SECURITY UPDATE: console requirement bypass (LP: #918332)
- debian/local/xserver-wrapper.c: drop alternative TTY support, and
also reset effective group id. Patch obtained from Debian squeeze
update.
- CVE-2011-4613
X.Org X Window System.
x11-common contains the filesystem infrastructure required for further installation of the X Window System in any configuration; it does not provide a full installation of clients, servers, libraries, and utilities required to run the X Window System.
A number of terms are used to refer to the X Window System, including "X", "X Version 11", "X11", "X11R6", and "X11R7".
The version of X used in Debian is derived from the version released by the X.Org Foundation, and is thus often also referred to as "X.Org".
All of the preceding quoted terms are functionally interchangeable in an Debian system.
Modifiche per le versioni:
Versione installata: 1:7.6+7ubuntu7
Versione disponibile: 1:7.6+7ubuntu7.1
Versione 1:7.6+7ubuntu7.1:
* SECURITY UPDATE: console requirement bypass (LP: #918332)
- debian/local/xserver-wrapper.c: drop alternative TTY support, and
also reset effective group id. Patch obtained from Debian squeeze
update.
- CVE-2011-4613
This package depends on the full suite of the server and drivers for the X.Org X server.
It does not provide the actual server itself.
Modifiche per le versioni:
Versione installata: 1:7.6+7ubuntu7
Versione disponibile: 1:7.6+7ubuntu7.1
Versione 1:7.6+7ubuntu7.1:
* SECURITY UPDATE: console requirement bypass (LP: #918332)
- debian/local/xserver-wrapper.c: drop alternative TTY support, and
also reset effective group id. Patch obtained from Debian squeeze
update.
- CVE-2011-4613
Ricerca personalizzata
Se ti è piaciuto l'articolo, iscriviti al feed per tenerti sempre aggiornato sui nuovi contenuti del blog:
Trovato questo articolo interessante? Condividilo sulla tua rete di contatti in Twitter, sulla tua bacheca su Facebook, in Linkedin, Instagram o Pinterest. Diffondere contenuti che trovi rilevanti aiuta questo blog a crescere. Grazie!
