Ubuntu 14.04 LTS

Ubuntu 14.04 — less — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — less — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8079-1 Related CVEs: CVE-2022-48624 CVE-2024-32487 Upstream summary: It was discovered that less incorrectly handled certain file names. An attacker could possibly use this issue to cause a denial of service […]

Read more
Ubuntu 14.04 — libvpx — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libvpx — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7249-1 Related CVEs: CVE-2024-5197 CVE-2023-5217 CVE-2020-0034 CVE-2017-13194 CVE-2019-9232 CVE-2019-9433 Upstream summary: Xiantong Hou discovered that libvpx would overflow when attempting to allocate memory for very large images. If an application […]

Read more
Ubuntu 14.04 — unbound — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — unbound — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7080-1 Related CVEs: CVE-2024-8508 CVE-2024-43167 CVE-2024-43168 CVE-2017-15105 CVE-2014-8602 Upstream summary: Toshifumi Sakaguchi discovered that Unbound incorrectly handled name compression for large RRsets, which could lead to excessive CPU usage. An […]

Read more
Ubuntu 14.04 — mosquitto — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — mosquitto — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 15 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7441-1 Related CVEs: CVE-2024-10525 CVE-2024-3935 Upstream summary: It was discovered that Eclipse Mosquitto client incorrectly handled memory when receiving a SUBACK packet. An attacker with a malicious broker could possibly […]

Read more
Ubuntu 14.04 — linux-aws — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — linux-aws — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8274-1 Related CVEs: CVE-2022-49033 CVE-2024-27388 CVE-2024-49938 CVE-2024-50008 CVE-2024-50142 CVE-2021-47142 CVE-2021-47145 CVE-2021-47254  +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]

Read more
Ubuntu 14.04 — libspreadsheet-parseexcel-perl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libspreadsheet-parseexcel-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6781-1 Related CVEs: CVE-2023-7101 Upstream summary: Le Dinh Hai discovered that Spreadsheet::ParseExcel was passing unvalidated input from a file into a string-type "eval". An attacker could craft a malicious file […]

Read more
Ubuntu 14.04 — wpa — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — wpa — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 June 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6945-1 Related CVEs: CVE-2024-5290 https://launchpad.net/bugs/2067613 CVE-2021-27803 CVE-2020-12695 CVE-2021-0326 CVE-2019-16275 CVE-2019-11555 CVE-2016-10743  +12 more Upstream summary: Rory McNamara discovered that wpa_supplicant could be made to load arbitrary shared objects by unprivileged […]

Read more
Ubuntu 14.04 — yajl — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — yajl — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 June 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6233-1 Related CVEs: CVE-2017-16516 CVE-2022-24795 CVE-2023-33460 Upstream summary: It was discovered that YAJL was not properly performing bounds checks when decoding a string with escape sequences. If a user or […]

Read more
Ubuntu 14.04 — znc — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — znc — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 June 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6990-1 Related CVEs: CVE-2024-39844 Upstream summary: Johannes Kuhn (DasBrain) discovered that znc incorrectly handled user input under certain operations. An attacker could possibly use this issue to execute arbitrary code […]

Read more
Ubuntu 14.04 — pam — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — pam — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 June 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6588-2 Related CVEs: CVE-2024-22365 CVE-2022-28321 https://launchpad.net/bugs/2006073 https://launchpad.net/bugs/1558114 CVE-2013-7041 CVE-2014-2583 CVE-2015-3238 Upstream summary: USN-6588-1 fixed a vulnerability in PAM. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 […]

Read more
CHAT