Linux

Ubuntu 14.04 — r-base — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — r-base — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 December 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4799-1 Related CVEs: CVE-2016-8714 Upstream summary: It was discovered that a buffer overflow in R causes memory corruption. An attacker could possibly use this to cause a denial of service […]

Read more
Ubuntu 16.04 — libxrandr — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libxrandr — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5428-1 Related CVEs: CVE-2016-7947 CVE-2016-7948 Upstream summary: Tobias Stoeckmann discovered that libXrandr incorrectly handled certain responses. An attacker could possibly use this issue to cause a denial of service, or […]

Read more
Ubuntu 16.04 — ecryptfs-utils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ecryptfs-utils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3032-1 Related CVEs: CVE-2016-6224 Upstream summary: It was discovered that eCryptfs incorrectly configured the encrypted swap partition for certain drive types. An attacker could use this issue to discover sensitive […]

Read more
Ubuntu 14.04 — tomcat6 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — tomcat6 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7242-1 Related CVEs: CVE-2016-8735 Upstream summary: Pierre Ernst discovered that the Tomcat JmxRemoteLifecycleListener did not implement a recommended fix. A remote attacker could possibly use this issue to execute arbitrary […]

Read more
Ubuntu 16.04 — ubuntu-core-launcher — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ubuntu-core-launcher — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2956-1 Related CVEs: CVE-2016-1580 Upstream summary: Zygmunt Krynicki discovered that ubuntu-core-launcher did not properly sanitize its input and contained a logic error when determining the mountpoint of bind mounts when […]

Read more
Ubuntu 16.04 — man-db — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — man-db — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5334-1 Related CVEs: CVE-2015-1336 Upstream summary: It was discovered that man-db incorrectly handled permission changing operations in its daily cron job, and was therefore affected by a race condition. An […]

Read more
SLES 12 — eog — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on SLES 12

SLES 12 — eog — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 November 2016 Affected versions: SLES 12 📖 ~4 min read  •  Source: SUSE advisory SUSE-SU-2016:2532-1 (see also SUSE bugzilla) Related CVEs: CVE-2013-7447 CVE-2016-6855 Upstream summary: Integer overflow in the gdk_cairo_set_source_pixbuf function in gdk/gdkcairo.c in GTK+ before 3.9.8, as used in eom, gnome-photos, eog, gambas3, thunar, pinpoint, […]

Read more
Ubuntu 14.04 — freeipa — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — freeipa — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 October 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4792-1 Related CVEs: CVE-2016-5404 CVE-2016-7030 CVE-2016-9575 Upstream summary: It was discovered that FreeIPA incorrectly handled certificates. An attacker could possibly use this issue to cause a denial of service by […]

Read more
Ubuntu 16.04 — util-linux — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — util-linux — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 October 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5478-1 Related CVEs: CVE-2016-5011 Upstream summary: Christian Moch and Michael Gruhn discovered that the libblkid library of util-linux did not properly manage memory under certain circumstances. A local attacker could […]

Read more
Ubuntu 14.04 — nvidia-graphics-drivers-367 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — nvidia-graphics-drivers-367 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 October 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3122-1 Related CVEs: CVE-2016-7382 CVE-2016-7389 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly gain […]

Read more
CHAT