How to fix CVE-2016-5195 on ubuntu-server 14.04.2 LTS - Ask Ubuntu


there problem bug cve-2016-5195 fixed following this guide , used commands:

sudo apt-get update sudo apt-get upgrade sudo apt-get dist-upgrade

after that,i rebooted server, , version of system ubuntu 14.04.5 lts.

then, followed this guide test bug, found bug still exists.

how mitigate this?

here output kernel version:

root@ubuntu:~# uname -r 3.16.0-30-generic

as suspected , comments confirm, you're using old "hwe" update hasn't been supported long time. need upgrade.

in case you're not sure i'm rambling on about, long term support (lts) releases of ubuntu have update packs add new hardware support bundling kernel , x stack of newer ubuntu releases.

in case linux 3.16 in utopic (14.10). bundled 14.04.2. was supported long main release of utopic, means it's been end-of-life since july 2015. erk.

you have few options:

  1. upgrade the latest hwe 14.04, 14.04.5, based on 16.04 xenial , supported until april 2019. that's using newer kernel may not work on hardware. installing simple:

    sudo apt-get install --install-recommends linux-generic-lts-xenial

  2. you downgrade kernel shipped 14.04.1. based on initial release of 14.04 , supported april 2019 too. because it's older might not support hardware. testing ;)

  3. if #1 works, might want consdier upgrading 16.04 proper. next lts after 14.04 , supported 2020. update other stuff. biggest change server users init system has changed upstart systemd. takes getting used if have custom startup scripts.


Comments

Post a Comment

Popular posts from this blog

download - Firefox cannot save files (most of the time), how to solve? - Super User

this not full duplicate of this question or this question , though base question same. however, questions have no answers. for on half year have problems downloading files firefox. when click on download link, download dialog opened asking me do, save or open it. immediately, there error/warning pop-up (twice, can see 1 @ first) ok button. looks this message : "c:\users\%user%\appdata\local\temp\wbbdv9k8.zip.part not saved because source file not read. try again later or contact server administrator." replace '%user%' name of user trying download. after closing pop-up, download dialog disappears , have minimize firefox , open again, see other pop-up. downloading exact same file internet explorer work, not desired. i tried solutions here . tried solutions here . tried disabling extensions. tried fixing permissions on temp folder. tried making files , folder in profile directory non-readonly. tried running firefox administrator. tried
Read more

windows - "-2146893807 NTE_NOT_FOUND" when repair certificate store - Super User

i try repair certificate store in windows 10 doing c:\windows\system32>certutil -store -user ‎330000019dba8d5dddb98062a900000000019d "personal" certutil: -store command failed: 0x80090011 (-2146893807 nte_not_found) certutil: object not found. i have double check mmc, certificate details serial number of certificate. still fail repair certificate store. can please help? i getting same error when trying export pfx. turns out had export c:\cert.pfx instead of cert.pfx (it trying export file cert store ( cert:\localmachine\my ).
Read more

sql server - "Configuration file does not exist", Event ID 274 - Super User

sql server 2014 standard in server 2012 r2 i installed sql server 2014 in drive d: i following error: microsoft ssis service: registry setting specifying configuration file not exist. attempting load default config file. simply add c:\program files\microsoft sql server\1?0\dts\binn\msdtssrvr.ini.xml to default reg_sz value in: hkey_local_machine\software\microsoft\microsoft sql server\1?0\ssis\serviceconfigfile where ? replaced matching sql server version
Read more