Ubuntu 16.04

Ubuntu 16.04 — linux-firmware — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — linux-firmware — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4351-1 Related CVEs: CVE-2018-5383 CVE-2017-13080 CVE-2017-13081 Upstream summary: Eli Biham and Lior Neumann discovered that certain Bluetooth devices incorrectly validated key exchange parameters. An attacker could possibly use this issue […]

Read more
Ubuntu 16.04 — mbedtls — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — mbedtls — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4267-1 Related CVEs: CVE-2017-18187 CVE-2018-0487 CVE-2018-0488 CVE-2018-0497 CVE-2018-0498 Upstream summary: It was discovered that mbedtls has a bounds-check bypass through an integer overflow that can be used by an attacked […]

Read more
Ubuntu 16.04 — ocaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ocaml — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 December 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4778-1 Related CVEs: CVE-2015-8869 CVE-2018-9838 Upstream summary: It was discovered that OCaml mishandled sign extensions. A remote attacker could use this vulnerability to steal sensitive information, cause a denial of […]

Read more
Ubuntu 16.04 — lighttpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — lighttpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 December 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4775-1 Related CVEs: CVE-2015-3200 CVE-2018-19052 Upstream summary: It was discovered that Lighttpd did not properly sanitized the string used in basic HTTP authentication method. A remote attacker could use this […]

Read more
Ubuntu 16.04 — nvidia-graphics-drivers-384 — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — nvidia-graphics-drivers-384 — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3662-1 Related CVEs: CVE-2018-6249 CVE-2018-6253 CVE-2017-5753 CVE-2017-6257 CVE-2017-6259 CVE-2017-6266 CVE-2017-6267 CVE-2017-6272 Upstream summary: It was discovered that the NVIDIA graphics drivers contained flaws in the kernel mode layer. A local […]

Read more
Ubuntu 16.04 — network-manager — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — network-manager — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3807-1 Related CVEs: CVE-2018-15688 Upstream summary: Felix Wilhelm discovered that the NetworkManager internal DHCPv6 client incorrectly handled certain DHCPv6 messages. In non-default configurations where the internal DHCP client is enabled, […]

Read more
Ubuntu 16.04 — leptonlib — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — leptonlib — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 October 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4819-1 Related CVEs: CVE-2017-18196 CVE-2018-3836 CVE-2018-7186 Upstream summary: It was discovered that Leptonica incorrectly handled path names. An attacker could possibly use this issue to obtain sensitive information. This issue […]

Read more
Ubuntu 16.04 — mongodb — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — mongodb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 October 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8064-1 Related CVEs: CVE-2018-20802 Upstream summary: Eliot Horowitz discovered that MongoDB may fail to validate some instances of malformed BSON. A remote attacker could possibly use this issue to cause […]

Read more
Ubuntu 16.04 — gnome-keyring — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — gnome-keyring — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 September 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3894-1 Related CVEs: CVE-2018-20781 Upstream summary: It was discovered that GNOME Keyring incorrectly cleared out credentials supplied to the PAM module. A local attacker could possibly use this issue to […]

Read more
Ubuntu 16.04 — libvorbis — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libvorbis — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 August 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5420-1 Related CVEs: CVE-2017-14160 CVE-2018-10392 CVE-2018-10393 CVE-2018-5146 CVE-2017-14632 CVE-2017-14633 Upstream summary: It was discovered that Vorbis incorrectly handled certain files. An attacker could possibly use this issue to cause a […]

Read more
CHAT