Ubuntu 14.04 LTS

Ubuntu 14.04 — texlive-bin — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — texlive-bin — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3788-1 Related CVEs: CVE-2015-5700 CVE-2018-17407 Upstream summary: Jakub Wilk discovered that Tex Live incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. This issue […]

Read more
Ubuntu 14.04 — vtk — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — vtk — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4852-1 Related CVEs: CVE-2018-20843 CVE-2019-15903 Upstream summary: It was discovered that VTK incorrectly handled certain XML files in the embedded Expat library. An attacker could possibly use this issue to […]

Read more
Ubuntu 14.04 — openslp-dfsg — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — openslp-dfsg — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4919-1 Related CVEs: CVE-2019-5544 CVE-2017-17833 CVE-2018-12938 CVE-2012-4428 CVE-2015-5177 Upstream summary: It was discovered that OpenSLP did not properly validate URLs. A remote attacker could use this issue to cause OpenSLP […]

Read more
Ubuntu 14.04 — gnupg2 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gnupg2 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3675-2 Related CVEs: CVE-2018-12020 CVE-2014-3591 CVE-2014-5270 CVE-2015-0837 CVE-2015-1606 CVE-2015-1607 CVE-2014-4617 Upstream summary: USN-3675-1 fixed a vulnerability in GnuPG 2 for Ubuntu 18.04 LTS and Ubuntu 17.10. This update provides the […]

Read more
Ubuntu 14.04 — librelp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — librelp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3612-1 Related CVEs: CVE-2018-1000140 Upstream summary: Bas van Schaik and Kevin Backhouse discovered that librelp incorrectly handled checking certain x509 certificates. A remote attacker able to connect to rsyslog could […]

Read more
Ubuntu 14.04 — node-fstream — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — node-fstream — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4863-1 Related CVEs: CVE-2019-13173 Upstream summary: It was discovered that fstream incorrectly handled certain crafted tarballs. An attacker could use this vulnerability to write arbitrary files to the filesystem. Table […]

Read more
Ubuntu 14.04 — flask — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — flask — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 February 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4378-1 Related CVEs: CVE-2018-1000656 Upstream summary: It was discovered that Flask incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. Table of […]

Read more
Ubuntu 14.04 — lucene-solr — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — lucene-solr — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 February 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7283-1 Related CVEs: CVE-2019-0193 Upstream summary: It was discovered that the Apache Solr DataImportHandler module incorrectly handled certain request parameters in a default configuration. A remote attacker could possibly use […]

Read more
Ubuntu 14.04 — libsoup2.4 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libsoup2.4 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 January 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3701-1 Related CVEs: CVE-2018-12910 CVE-2017-2885 https://launchpad.net/bugs/1573494 Upstream summary: It was discovered that libsoup incorrectly handled certain cookie requests. An attacker could possibly use this to cause a denial of service. […]

Read more
Ubuntu 14.04 — libssh — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libssh — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 January 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3795-3 Related CVEs: https://launchpad.net/bugs/1805348 CVE-2018-10933 CVE-2015-3146 CVE-2016-0739 CVE-2014-8132 Upstream summary: USN-3795-1 and USN-3795-2 fixed a vulnerability in libssh. The upstream fix introduced a regression. This update fixes the problem. Original […]

Read more
CHAT