Ubuntu 14.04 LTS

Ubuntu 14.04 — pidgin — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — pidgin — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 February 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3231-1 Related CVEs: CVE-2017-2640 CVE-2016-2365 CVE-2016-2366 CVE-2016-2367 CVE-2016-2368 CVE-2016-2369 CVE-2016-2370 CVE-2016-2371  +12 more Upstream summary: Joseph Bisch discovered that Pidgin incorrectly handled certain xml messages. A remote attacker could use […]

Read more
Ubuntu 14.04 — cups — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — cups — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3842-1 Related CVEs: CVE-2018-4700 CVE-2017-18248 CVE-2018-4180 CVE-2018-4181 CVE-2018-6553 CVE-2017-18190 https://launchpad.net/bugs/1505328 CVE-2015-1158  +6 more Upstream summary: Jann Horn discovered that CUPS incorrectly handled session cookie randomness. A remote attacker could possibly […]

Read more
Ubuntu 14.04 — mailman — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — mailman — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 30 January 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3563-1 Related CVEs: CVE-2018-5950 CVE-2016-6893 CVE-2016-7123 CVE-2015-2775 Upstream summary: It was discovered that Mailman incorrectly handled certain web scripts. An attacker could possibly use this to inject arbitrary code. Table […]

Read more
Ubuntu 14.04 — evince — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — evince — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 January 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3503-1 Related CVEs: CVE-2017-1000159 CVE-2017-1000083 Upstream summary: It was discovered that Evince incorrectly handled printing certain DVI files. If a user were tricked into opening and printing a specially-named DVI […]

Read more
Ubuntu 14.04 — jbigkit — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — jbigkit — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5742-1 Related CVEs: CVE-2017-9937 CVE-2013-6369 Upstream summary: It was discovered that JBIG-KIT incorrectly handled decoding certain large image files. If a user or automated system using JBIG-KIT were tricked into […]

Read more
Ubuntu 14.04 — miniupnpc — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — miniupnpc — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 January 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3562-1 Related CVEs: CVE-2017-1000494 CVE-2017-8798 CVE-2015-6031 CVE-2014-3985 Upstream summary: It was discovered that MiniUPnP incorrectly handled memory. A remote attacker could use this issue to cause a denial of service […]

Read more
Ubuntu 14.04 — gnutls26 — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gnutls26 — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 January 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3318-1 Related CVEs: CVE-2017-7507 CVE-2017-7869 CVE-2016-8610 CVE-2016-7444 CVE-2017-5334 CVE-2017-5335 CVE-2017-5336 CVE-2017-5337  +7 more Upstream summary: Hubert Kario discovered that GnuTLS incorrectly handled decoding a status response TLS extension. A remote […]

Read more
Ubuntu 14.04 — libxdmcp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libxdmcp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 January 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5690-1 Related CVEs: CVE-2017-2625 Upstream summary: It was discovered that libXdmcp was generating weak session keys. A local attacker could possibly use this issue to perform a brute force attack […]

Read more
Ubuntu 14.04 — puppet — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — puppet — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 December 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3567-1 Related CVEs: CVE-2017-10689 CVE-2014-3248 CVE-2017-2295 Upstream summary: It was discovered that Puppet incorrectly handled permissions when unpacking certain tarballs. A local user could possibly use this issue to execute […]

Read more
Ubuntu 14.04 — libxcursor — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libxcursor — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 December 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3729-1 Related CVEs: CVE-2015-9262 CVE-2017-16612 Upstream summary: It was discovered that libxcursor incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. Table […]

Read more
CHAT