chris

Ubuntu 14.04 — lzo2 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — lzo2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2300-1 Related CVEs: CVE-2014-4607 Upstream summary: Don A. Bailey discovered that LZO incorrectly handled certain input data. An attacker could use this issue to cause LZO to crash, resulting in […]

Read more
Ubuntu 14.04 — neutron — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — neutron — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2408-1 Related CVEs: CVE-2014-6414 CVE-2014-3555 CVE-2014-4615 CVE-2013-6433 CVE-2014-0187 CVE-2014-4167 Upstream summary: Elena Ezhova discovered that OpenStack Neutron did not properly perform access control checks for attributes. A remote authenticated attacker […]

Read more
Ubuntu 14.04 — devscripts — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — devscripts — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2649-1 Related CVEs: CVE-2014-1833 Upstream summary: It was discovered that the uupdate tool incorrectly handled symlinks. If a user or automated system were tricked into processing specially crafted files, a […]

Read more
Ubuntu 14.04 — python-pycadf — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — python-pycadf — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 July 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2311-1 Related CVEs: CVE-2014-4615 Upstream summary: Zhi Kun Liu discovered that pyCADF incorrectly filtered certain tokens. An attacker could possibly use this issue to obtain authentication tokens used in REST […]

Read more
Ubuntu 14.04 — libapache2-mod-perl2 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libapache2-mod-perl2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 July 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3825-1 Related CVEs: CVE-2011-2767 Upstream summary: Jan Ingvoldstad discovered that mod_perl incorrectly handled configuration options to disable being used by unprivileged users, contrary to the documentation. A local attacker could […]

Read more
Ubuntu 14.04 — pollinate — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — pollinate — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 June 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2709-2 Related CVEs: https://launchpad.net/bugs/1506238 https://launchpad.net/bugs/1483762 https://launchpad.net/bugs/1381359 Upstream summary: USN-2709-1 updated pollinate's certificate for entropy.ubuntu.com but did not include a new certificate authority certificate. This update fixes the problem. We apologize […]

Read more
Ubuntu 14.04 — usb-creator — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — usb-creator — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 June 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2576-1 Related CVEs: https://launchpad.net/bugs/1447396 Upstream summary: Tavis Ormandy discovered that usb-creator was missing an authentication check. A local attacker could use this issue to gain elevated privileges. Table of contents […]

Read more
Ubuntu 14.04 — ubuntu-release-upgrader — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — ubuntu-release-upgrader — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3623-1 Related CVEs: https://launchpad.net/bugs/1174007 Upstream summary: It was discovered that ubuntu-release-upgrader did not correctly drop permissions before opening a browser to view the release notes. This update fixes the issue. […]

Read more
CHAT