Ubuntu 14.04 LTS

Ubuntu 14.04 — cifs-utils — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — cifs-utils — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 March 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7688-1 Related CVEs: CVE-2022-27239 CVE-2021-20208 CVE-2020-14342 CVE-2022-29869 Upstream summary: Aurélien Aptel discovered that cifs-utils invoked a shell when requesting a password. In certain environments, a local attacker could possibly use […]

Read more
Ubuntu 14.04 — graphicsmagick — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — graphicsmagick — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 February 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5974-1 Related CVEs: CVE-2018-20184 CVE-2018-20189 CVE-2018-5685 CVE-2018-9018 CVE-2019-11006 CVE-2020-12672 CVE-2022-1270 CVE-2019-12921  +4 more Upstream summary: It was discovered that GraphicsMagick was not properly performing bounds checks when processing TGA image […]

Read more
Common Problems 119073

Ubuntu 14.04 LTS swap not activating at boot

🟡 Medium   ⏱ 5–30 min  Last verified: 19 February 2023 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Ubuntu 14.04 — tinyproxy — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — tinyproxy — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 January 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7190-1 Related CVEs: CVE-2023-49606 CVE-2022-40468 CVE-2017-11747 Upstream summary: It was discovered that Tinyproxy did not properly manage memory during the parsing of HTTP connection headers. An attacker could use this […]

Read more
Ubuntu 14.04 — gsasl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gsasl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6169-1 Related CVEs: CVE-2022-2469 Upstream summary: It was discovered that GNU SASL's GSSAPI server could make an out-of-bounds reads if given specially crafted GSS-API authentication data. A remote attacker could […]

Read more
Ubuntu 14.04 — strongswan — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — strongswan — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 January 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5651-2 Related CVEs: CVE-2022-40617 CVE-2021-45079 CVE-2021-41991 CVE-2018-17540 CVE-2018-10811 CVE-2018-16151 CVE-2018-16152 CVE-2018-5388  +6 more Upstream summary: USN-5651-1 fixed a vulnerability in strongSwan. This update provides the corresponding update for Ubuntu 14.04 […]

Read more
Ubuntu 14.04 — unzip — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — unzip — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 January 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5673-1 Related CVEs: CVE-2021-4217 CVE-2022-0529 CVE-2022-0530 https://launchpad.net/bugs/1957077 CVE-2014-9913 CVE-2016-9844 CVE-2018-1000035 CVE-2018-18384  +9 more Upstream summary: It was discovered that unzip did not properly handle unicode strings under certain circumstances. If […]

Read more
Common Problems 119060

Ubuntu 14.04 LTS OpenSSL Handshake Failures with Legacy Ciphers

🟡 Medium   ⏱ 5–30 min  Last verified: 28 December 2022 Affected versions: 14.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Ubuntu 14.04 — snakeyaml — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — snakeyaml — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 December 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7368-1 Related CVEs: CVE-2017-18640 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 Upstream summary: It was discovered that SnakeYAML incorrectly handled recursive entity references. An attacker could possibly use this issue to cause SnakeYAML […]

Read more
Common Problems 119059

Ubuntu 14.04 LTS – kernel panic after package upgrade

🔴 Critical   ⏱ 5–30 min  Last verified: 23 December 2022 Affected versions: Ubuntu 14.04 LTS Ubuntu 14.04 Ubuntu 14.04.6 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]

Read more
CHAT