Ubuntu 16.04

Ubuntu 16.04 — ubuntu-release-upgrader — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ubuntu-release-upgrader — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 December 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3623-1 Related CVEs: https://launchpad.net/bugs/1174007 Upstream summary: It was discovered that ubuntu-release-upgrader did not correctly drop permissions before opening a browser to view the release notes. This update fixes the issue. […]

Read more
Ubuntu 16.04 — libxfixes — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libxfixes — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 December 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5437-1 Related CVEs: CVE-2016-7944 Upstream summary: Tobias Stoeckmann discovered that libXfixes incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly […]

Read more
Ubuntu 16.04 — node-minimatch — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — node-minimatch — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 December 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4783-1 Related CVEs: CVE-2016-10540 Upstream summary: It was discovered that minimatch did not perform necessary bounds checking on regular expressions. An attacker could use this vulnerability to cause a denial […]

Read more
Ubuntu 16.04 — libxrandr — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libxrandr — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5428-1 Related CVEs: CVE-2016-7947 CVE-2016-7948 Upstream summary: Tobias Stoeckmann discovered that libXrandr incorrectly handled certain responses. An attacker could possibly use this issue to cause a denial of service, or […]

Read more
Ubuntu 16.04 — ecryptfs-utils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ecryptfs-utils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3032-1 Related CVEs: CVE-2016-6224 Upstream summary: It was discovered that eCryptfs incorrectly configured the encrypted swap partition for certain drive types. An attacker could use this issue to discover sensitive […]

Read more
Ubuntu 16.04 — ubuntu-core-launcher — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ubuntu-core-launcher — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2956-1 Related CVEs: CVE-2016-1580 Upstream summary: Zygmunt Krynicki discovered that ubuntu-core-launcher did not properly sanitize its input and contained a logic error when determining the mountpoint of bind mounts when […]

Read more
Ubuntu 16.04 — man-db — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — man-db — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5334-1 Related CVEs: CVE-2015-1336 Upstream summary: It was discovered that man-db incorrectly handled permission changing operations in its daily cron job, and was therefore affected by a race condition. An […]

Read more
Ubuntu 16.04 — util-linux — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — util-linux — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 October 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5478-1 Related CVEs: CVE-2016-5011 Upstream summary: Christian Moch and Michael Gruhn discovered that the libblkid library of util-linux did not properly manage memory under certain circumstances. A local attacker could […]

Read more
Ubuntu 16.04 — nspr — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — nspr — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 October 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3028-1 Related CVEs: CVE-2016-1951 Upstream summary: It was discovered that NSPR incorrectly handled memory allocation. A remote attacker could use this issue to cause NSPR to crash, resulting in a […]

Read more
Ubuntu 16.04 — libimobiledevice — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libimobiledevice — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3026-1 Related CVEs: CVE-2016-5104 Upstream summary: It was discovered that libimobiledevice incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to […]

Read more
CHAT