Ubuntu 16.04

Ubuntu 16.04 — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 April 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5331-1 Related CVEs: CVE-2018-16301 CVE-2020-8037 CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463  +12 more Upstream summary: It was discovered that tcpdump incorrectly handled certain inputs. An attacker could possibly use this […]

Read more
Ubuntu 16.04 — libxmlrpc3-java — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libxmlrpc3-java — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 April 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4496-1 Related CVEs: CVE-2019-17570 Upstream summary: It was discovered that Apache XML-RPC (aka ws-xmlrpc) does not properly deserialize untrusted data. An attacker could possibly use this issue to execute arbitrary […]

Read more
How To Protect Your Server Against the Dirty COW Linux Vulnerability — step-by-step Linux tutorial on Progressive Robot

How To Protect Your Server Against the Dirty COW Linux Vulnerability

On October 21, 2016, a privilege escalation vulnerability in the Linux kernel was disclosed. The bug is nicknamed Dirty COW because the underlying issue was a race condition in the way kernel handles copy-on-write (COW). Exploiting this bug means that a regular, unprivileged user on your server can gain write access to any file they can read, and can therefore increase their privileges on the system. This tutorial explains how to protect your server from this vulnerability.

Read more
Ubuntu 16.04 — json-c — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — json-c — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 March 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4360-4 Related CVEs: CVE-2020-12762 https://launchpad.net/bugs/1878723 Upstream summary: USN-4360-1 fixed a vulnerability in json-c. The security fix introduced a memory leak that was reverted in USN-4360-2 and USN-4360-3. This update provides […]

Read more
Common Problems 118419

Ubuntu 16.04 LTS Netplan Migration Error Leaves Host Offline

🟠 High   ⏱ 5–30 min  Last verified: 24 March 2020 Affected versions: 16.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & […]

Read more
Common Problems 118576

Ubuntu 16.04 LTS – SSH public key authentication fails

🟠 High   ⏱ 5–30 min  Last verified: 23 March 2020 Affected versions: Ubuntu 16.04 LTS Ubuntu 16.04 Ubuntu 16.04.7 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention […]

Read more
Ubuntu 16.04 — ruby-loofah — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ruby-loofah — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4498-1 Related CVEs: CVE-2019-15587 Upstream summary: It was discovered that Loofah does not properly sanitize JavaScript in sanitized output. An attacker could possibly use this issue to perform XSS attacks. […]

Read more
Ubuntu 16.04 — gthumb — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — gthumb — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 March 2020 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5681-1 Related CVEs: CVE-2018-18718 CVE-2019-20326 CVE-2020-36427 Upstream summary: It was discovered that gThumb did not properly managed memory under certain circumstances. An attacker could possibly use this issue to cause […]

Read more
Common Problems 118616

Ubuntu 16.04 LTS locale warnings: Perl locale not supported

🟡 Medium   ⏱ 5–30 min  Last verified: 17 March 2020 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
CHAT