Ubuntu 18.04

Ubuntu 18.04 — aspell — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — aspell — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5023-1 Related CVEs: CVE-2019-25051 CVE-2019-17544 Upstream summary: It was discovered that Aspell incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code or cause a […]

Read more
Ubuntu 18.04 — bwa — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — bwa — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4087-1 Related CVEs: CVE-2019-10269 Upstream summary: It was discovered that Burrows-Wheeler Aligner (BWA) mishandled certain crafted .alt files. An attacker could use this vulnerability to cause a denial of service […]

Read more
Ubuntu 18.04 — librelp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — librelp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4828-1 Related CVEs: CVE-2018-1000140 Upstream summary: It was discovered that librelp did not properly manage x509 certificates, leading to a stack-based buffer overflow. A remote attacker could possibly use this […]

Read more
Ubuntu 18.04 — mqtt-client — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — mqtt-client — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6685-1 Related CVEs: CVE-2019-0222 Upstream summary: It was discovered that mqtt-client incorrectly handled memory while parsing malformed MQTT frames. An attacker could possibly use this issue to cause a crash, […]

Read more
Ubuntu 18.04 — lftp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — lftp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 February 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3731-1 Related CVEs: CVE-2018-10916 Upstream summary: It was discovered that LFTP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. Table of […]

Read more
Ubuntu 18.04 — irssi — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — irssi — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4046-1 Related CVEs: CVE-2018-7054 CVE-2019-13045 CVE-2019-5882 Upstream summary: It was discovered that Irssi incorrectly handled certain disconnections. An attacker could possibly use this issue to cause a denial of service […]

Read more
Ubuntu 18.04 — log4net — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — log4net — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 February 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4699-1 Related CVEs: CVE-2018-1285 Upstream summary: It was discovered that Apache Log4net incorrectly handled certain configuration files. An attacker could possibly use this issue to expose sensitive information. Table of […]

Read more
Ubuntu 18.04 — rssh — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — rssh — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 February 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3946-1 Related CVEs: CVE-2019-1000018 CVE-2019-3463 CVE-2019-3464 Upstream summary: It was discovered that rssh incorrectly handled certain command-line arguments and environment variables. An authenticated user could bypass rssh's command restrictions, allowing […]

Read more
Ubuntu 18.04 — walinuxagent — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — walinuxagent — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 14 February 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3907-1 Related CVEs: CVE-2019-0804 Upstream summary: It was discovered that WALinuxAgent created swap files with incorrect permissions. A local attacker could possibly use this issue to obtain sensitive information from […]

Read more
Ubuntu 18.04 — rpcbind — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — rpcbind — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4986-3 Related CVEs: https://launchpad.net/bugs/1931507 CVE-2017-8779 Upstream summary: USN-4986-1 fixed a vulnerability in rpcbind. The update caused a regression resulting in rpcbind crashing in certain environments. This update fixes the problem. […]

Read more
CHAT