Ubuntu 16.04

Ubuntu 16.04 — log4net — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — log4net — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 June 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4699-1 Related CVEs: CVE-2018-1285 Upstream summary: It was discovered that Apache Log4net incorrectly handled certain configuration files. An attacker could possibly use this issue to expose sensitive information. Table of […]

Read more
Ubuntu 16.04 — c3p0 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — c3p0 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5293-2 Related CVEs: CVE-2019-5427 Upstream summary: USN-5293-1 fixed a vulnerability in c3p0. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Aaron Massey discovered that c3p0 […]

Read more
Ubuntu 16.04 — openslp-dfsg — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — openslp-dfsg — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 29 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4919-1 Related CVEs: CVE-2019-5544 CVE-2017-17833 CVE-2018-12938 Upstream summary: It was discovered that OpenSLP did not properly validate URLs. A remote attacker could use this issue to cause OpenSLP to crash […]

Read more
Ubuntu 16.04 — python-ecdsa — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — python-ecdsa — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4196-1 Related CVEs: CVE-2019-14853 CVE-2019-14859 Upstream summary: It was discovered that python-ecdsa incorrectly handled certain signatures. A remote attacker could possibly use this issue to cause python-ecdsa to generate unexpected […]

Read more
Ubuntu 16.04 — pyxdg — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — pyxdg — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4700-1 Related CVEs: CVE-2019-12761 Upstream summary: Alexandre D'Hondt discovered that PyXDG did not properly sanitize input. An attacker could exploit this with a crafted .menu file to execute arbitrary code. […]

Read more
Ubuntu 16.04 — bwa — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — bwa — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4857-1 Related CVEs: CVE-2019-10269 Upstream summary: It was discovered that Burrows-Wheeler Aligner (BWA) mishandled certain crafted .alt files. An attacker could use this vulnerability to cause a denial of service […]

Read more
Ubuntu 16.04 — libtomcrypt — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libtomcrypt — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4868-1 Related CVEs: CVE-2019-17362 Upstream summary: It was discovered that LibTomCrypt incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service or read […]

Read more
Ubuntu 16.04 — libjackson-json-java — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libjackson-json-java — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 16 May 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4741-1 Related CVEs: CVE-2017-15095 CVE-2017-7525 CVE-2019-10172 Upstream summary: It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could possibly use this issue to execute arbitrary code. Table of […]

Read more
CHAT