Ubuntu 14.04 LTS

Ubuntu 14.04 — emacs24 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — emacs24 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3427-1 Related CVEs: CVE-2017-14482 Upstream summary: Charles A. Roelli discovered that Emacs incorrectly handled certain files. If a user were tricked into opening a specially crafted file (e.g., email messages […]

Read more
Ubuntu 14.04 — lxc — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — lxc — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3375-1 Related CVEs: CVE-2016-10124 CVE-2017-5985 CVE-2016-8649 https://launchpad.net/bugs/1501491 https://launchpad.net/bugs/1501310 CVE-2015-1335 CVE-2015-1331 CVE-2015-1334 Upstream summary: It was discovered that LXC incorrectly handled the TIOCSTI ioctl. An attacker could possibly use this issue […]

Read more
Ubuntu 14.04 — apparmor — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — apparmor — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3784-1 Related CVEs: https://launchpad.net/bugs/1788929 https://launchpad.net/bugs/1794848 CVE-2017-6507 CVE-2014-1424 Upstream summary: As a security improvement, this update adjusts the private-files abstraction to disallow writing to thumbnailer configuration files. Additionally adjust the private-files, […]

Read more
Ubuntu 14.04 — augeas — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — augeas — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3400-1 Related CVEs: CVE-2017-7555 Upstream summary: It was discovered that Augeas incorrectly handled certain strings. An attacker could use this issue to cause Augeas to crash, leading to a denial […]

Read more
Ubuntu 14.04 — game-music-emu — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — game-music-emu — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4816-1 Related CVEs: CVE-2017-17446 Upstream summary: It was discovered that game-music-emu mishandled certain crafted input. A remote attacker could use this vulnerability to cause game-music-emu to crash. Table of contents […]

Read more
Ubuntu 14.04 — jasper — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — jasper — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3693-1 Related CVEs: CVE-2015-5203 CVE-2015-5221 CVE-2016-10248 CVE-2016-10250 CVE-2016-8883 CVE-2016-8887 CVE-2016-9262 CVE-2016-9387  +12 more Upstream summary: It was discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user […]

Read more
Ubuntu 14.04 — gtk-vnc — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gtk-vnc — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3203-1 Related CVEs: CVE-2017-5884 CVE-2017-5885 Upstream summary: It was discovered that gtk-vnc incorrectly validated certain data. A malicious server could use this issue to cause gtk-vnc to crash, resulting in […]

Read more
Ubuntu 14.04 — libnl3 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libnl3 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 16 February 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3311-1 Related CVEs: CVE-2017-0553 Upstream summary: It was discovered that libnl incorrectly handled memory when performing certain operations. A local attacker could possibly use this issue to cause libnl to […]

Read more
Ubuntu 14.04 — imlib2 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — imlib2 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 February 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3075-1 Related CVEs: CVE-2011-5326 CVE-2014-9762 CVE-2014-9763 CVE-2014-9764 CVE-2014-9771 CVE-2016-3993 CVE-2016-3994 CVE-2016-4024 Upstream summary: Jakub Wilk discovered an out of bounds read in the GIF loader implementation in Imlib2. An attacker […]

Read more
Ubuntu 14.04 — qpdf — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — qpdf — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3638-1 Related CVEs: CVE-2015-9252 CVE-2017-11624 CVE-2017-11625 CVE-2017-11626 CVE-2017-11627 CVE-2017-12595 CVE-2017-18183 CVE-2017-18184  +6 more Upstream summary: It was discovered that QPDF incorrectly handled certain malformed files. A remote attacker could use […]

Read more
CHAT