1. Ubuntu Security Notices
  2. USN-1001-1

USN-1001-1: LVM2 vulnerability

Publication date

6 October 2010

Overview

Releases

Packages

Details

The cluster logical volume manager daemon (clvmd) in LVM2 did not correctly
validate credentials. A local user could use this flaw to manipulate
logical volumes without root privileges and cause a denial of service in
the cluster.

The cluster logical volume manager daemon (clvmd) in LVM2 did not correctly
validate credentials. A local user could use this flaw to manipulate
logical volumes without root privileges and cause a denial of service in
the cluster.

Update instructions

In general, a standard system update will make all the necessary changes. In a clustering environment, you need to restart clvmd after the update.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
9.10 karmic clvm –  2.02.39-0ubuntu11.1
9.04 jaunty clvm –  2.02.39-0ubuntu9.1
8.04 hardy clvm –  2.02.26-1ubuntu9.1
6.06 dapper clvm –  2.02.02-1ubuntu1.6
10.04 lucid clvm –  2.02.54-1ubuntu4.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›