Ubuntu 14.04 LTS

Ubuntu 14.04 — openvpn — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — openvpn — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 November 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7340-1 Related CVEs: CVE-2017-12166 CVE-2024-5594 CVE-2022-0547 CVE-2016-6329 CVE-2017-7479 CVE-2017-7508 CVE-2017-7520 CVE-2017-7521  +1 more Upstream summary: It was discovered that OpenVPN did not perform proper input validation when generating a TLS […]

Read more
Ubuntu 14.04 — libsndfile — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libsndfile — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 17 November 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7273-1 Related CVEs: CVE-2021-4156 CVE-2024-50612 CVE-2022-33065 CVE-2021-3246 CVE-2017-12562 CVE-2017-14245 CVE-2017-14246 CVE-2017-14634  +12 more Upstream summary: It was discovered that libsndfile incorrectly handled memory when executing its FLAC codec. If a […]

Read more
Ubuntu 14.04 — php5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — php5 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 October 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7049-3 Related CVEs: CVE-2024-8925 CVE-2024-8927 CVE-2021-21703 CVE-2020-7068 CVE-2020-7071 CVE-2021-21702 CVE-2021-21704 CVE-2021-21705  +12 more Upstream summary: USN-7049-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 14.04 LTS. […]

Read more
Ubuntu 14.04 — postgresql-9.3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — postgresql-9.3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 August 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6968-3 Related CVEs: CVE-2024-7348 CVE-2018-10915 CVE-2018-10925 CVE-2018-1058 https://launchpad.net/bugs/1752271 CVE-2018-1053 CVE-2017-15098 CVE-2017-15099  +12 more Upstream summary: USN-6968-1 fixed CVE-2024-7348 in PostgreSQL-12, PostgreSQL-14, and PostgreSQL-16. This update provides the corresponding updates for […]

Read more
Ubuntu 14.04 — xorg-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — xorg-server — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 14 August 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6721-2 Related CVEs: https://launchpad.net/bugs/2060354 CVE-2024-31080 CVE-2024-31081 CVE-2024-31082 CVE-2024-31083 CVE-2023-6478 CVE-2023-6816 CVE-2024-0229  +12 more Upstream summary: USN-6721-1 fixed vulnerabilities in X.Org X Server. That fix was incomplete resulting in a regression. […]

Read more
Ubuntu 14.04 — twisted — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — twisted — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 13 August 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6988-1 Related CVEs: CVE-2024-41671 CVE-2024-41810 CVE-2022-21716 CVE-2019-12387 CVE-2019-12855 CVE-2020-10108 CVE-2020-10109 CVE-2016-1000111 Upstream summary: Ben Kallus discovered that Twisted incorrectly handled response order when processing multiple HTTP requests. A remote attacker […]

Read more
Ubuntu 14.04 — ceph — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — ceph — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 August 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8045-1 Related CVEs: CVE-2024-31884 CVE-2024-47866 CVE-2018-14662 CVE-2021-3524 CVE-2023-43040 CVE-2016-5009 CVE-2016-7031 CVE-2016-8626  +1 more Upstream summary: Martin Schobert discovered that Ceph did not properly verify SSL certificates when using Pybind for […]

Read more
Ubuntu 14.04 — gpac — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gpac — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7320-1 Related CVEs: CVE-2023-5520 CVE-2024-0321 CVE-2024-0322 Upstream summary: It was discovered that the GPAC MP4Box utility incorrectly handled certain AC3 files, which could lead to an out-of-bounds read. A remote […]

Read more
Ubuntu 14.04 — nano — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — nano — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7064-2 Related CVEs: CVE-2024-5742 Upstream summary: USN-7064-1 fixed a vulnerability in nano. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that nano […]

Read more
Ubuntu 14.04 — commons-io — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — commons-io — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8191-1 Related CVEs: CVE-2024-47554 Upstream summary: It was discovered that Apache Commons IO's XmlStreamReader class could excessively consume CPU resources under certain circumstances. An attacker could possibly use this issue […]

Read more
CHAT