Ubuntu 16.04

Ubuntu 16.04 — ledgersmb — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ledgersmb — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7647-1 Related CVEs: CVE-2021-3693 CVE-2021-3731 CVE-2024-23831 CVE-2021-3882 CVE-2021-3694 Upstream summary: It was discovered that LedgerSMB did not check the origin of HTML fragments. An attacker could possibly use this issue […]

Read more
Ubuntu 16.04 — tinyproxy — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — tinyproxy — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 28 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7190-1 Related CVEs: CVE-2023-49606 CVE-2022-40468 CVE-2017-11747 Upstream summary: It was discovered that Tinyproxy did not properly manage memory during the parsing of HTTP connection headers. An attacker could use this […]

Read more
Ubuntu 16.04 — fdkaac — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — fdkaac — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7660-1 Related CVEs: CVE-2023-34823 CVE-2022-37781 CVE-2022-36148 CVE-2023-34824 Upstream summary: It was discovered that fdkaac did not correctly handle certain input. If a user or automated system were tricked into opening […]

Read more
Ubuntu 16.04 — unbound — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — unbound — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7080-1 Related CVEs: CVE-2024-8508 CVE-2024-43167 CVE-2024-43168 CVE-2017-15105 Upstream summary: Toshifumi Sakaguchi discovered that Unbound incorrectly handled name compression for large RRsets, which could lead to excessive CPU usage. An attacker […]

Read more
Ubuntu 16.04 — smarty3 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — smarty3 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8272-1 Related CVEs: CVE-2023-28447 CVE-2021-21408 CVE-2021-26119 CVE-2021-26120 CVE-2021-29454 Upstream summary: Takuya Aramaki discovered that Smarty did not properly escape JavaScript code. An attacker could possibly use this issue to conduct […]

Read more
Ubuntu 16.04 — docker.io — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — docker.io — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 15 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7161-2 Related CVEs: CVE-2024-29018 CVE-2024-41110 CVE-2021-41089 CVE-2020-15157 CVE-2019-1020014 CVE-2018-15664 CVE-2019-5736 Upstream summary: USN-7161-1 fixed CVE-2024-29018 in Ubuntu 24.04 LTS. This update fixes it for source package docker.io in Ubuntu 16.04 […]

Read more
Ubuntu 16.04 — mosquitto — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — mosquitto — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7441-1 Related CVEs: CVE-2024-10525 CVE-2024-3935 CVE-2017-7655 CVE-2017-7653 CVE-2017-7654 Upstream summary: It was discovered that Eclipse Mosquitto client incorrectly handled memory when receiving a SUBACK packet. An attacker with a malicious […]

Read more
Ubuntu 16.04 — libapache-mod-jk — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libapache-mod-jk — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6826-1 Related CVEs: CVE-2023-41081 Upstream summary: Karl von Randow discovered that mod_jk was vulnerable to an authentication bypass. If the configuration did not provide explicit mounts for all possible proxied […]

Read more
Ubuntu 16.04 — mysql-5.7 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — mysql-5.7 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6583-1 Related CVEs: CVE-2023-22028 CVE-2023-22084 CVE-2023-22015 CVE-2023-22026 CVE-2023-22053 CVE-2023-21912 CVE-2023-21980 CVE-2023-21840  +12 more Upstream summary: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions […]

Read more
Ubuntu 16.04 — needrestart — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — needrestart — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7117-3 Related CVEs: https://launchpad.net/bugs/2091096 https://launchpad.net/bugs/2089193 CVE-2024-10224 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 Upstream summary: USN-7117-1 fixed vulnerabilities in needrestart. The update introduced a regression in needrestart. This update fixes the problem for […]

Read more
CHAT