chris

Ubuntu 14.04 — xdelta3 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — xdelta3 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 May 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2901-1 Related CVEs: CVE-2014-9765 Upstream summary: It was discovered that xdelta3 incorrectly handled certain files. If a user or automated system were tricked into processing a specially-crafted file, a remote […]

Read more
Ubuntu 14.04 — coreutils — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — coreutils — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 May 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2473-1 Related CVEs: CVE-2009-4135 CVE-2014-9471 Upstream summary: It was discovered that the distcheck rule in dist-check.mk in GNU coreutils allows local users to gain privileges via a symlink attack on […]

Read more
Ubuntu 14.04 — liblwp-protocol-https-perl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — liblwp-protocol-https-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 April 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2292-1 Related CVEs: CVE-2014-3230 Upstream summary: It was discovered that the LWP::Protocol::https perl module incorrectly disabled peer certificate verification completely when only hostname verification was requested to be disabled. If […]

Read more
CHAT