ubuntu

Ubuntu 18.04 — aspell — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — aspell — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5023-1 Related CVEs: CVE-2019-25051 CVE-2019-17544 Upstream summary: It was discovered that Aspell incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code or cause a […]

Read more
Ubuntu 18.04 — bwa — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — bwa — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4087-1 Related CVEs: CVE-2019-10269 Upstream summary: It was discovered that Burrows-Wheeler Aligner (BWA) mishandled certain crafted .alt files. An attacker could use this vulnerability to cause a denial of service […]

Read more
Ubuntu 16.04 — webkit2gtk — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — webkit2gtk — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3743-1 Related CVEs: CVE-2018-12911 CVE-2018-4246 CVE-2018-4261 CVE-2018-4262 CVE-2018-4263 CVE-2018-4264 CVE-2018-4265 CVE-2018-4266  +12 more Upstream summary: A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. […]

Read more
Ubuntu 18.04 — librelp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — librelp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4828-1 Related CVEs: CVE-2018-1000140 Upstream summary: It was discovered that librelp did not properly manage x509 certificates, leading to a stack-based buffer overflow. A remote attacker could possibly use this […]

Read more
Ubuntu 14.04 — openslp-dfsg — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — openslp-dfsg — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4919-1 Related CVEs: CVE-2019-5544 CVE-2017-17833 CVE-2018-12938 CVE-2012-4428 CVE-2015-5177 Upstream summary: It was discovered that OpenSLP did not properly validate URLs. A remote attacker could use this issue to cause OpenSLP […]

Read more
Ubuntu 16.04 — sdl-image1.2 — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — sdl-image1.2 — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4238-1 Related CVEs: CVE-2018-3977 CVE-2019-12216 CVE-2019-12217 CVE-2019-12218 CVE-2019-12219 CVE-2019-12220 CVE-2019-12221 CVE-2019-12222  +4 more Upstream summary: It was discovered that SDL_image incorrectly handled certain image files. An attacker could possibly use […]

Read more
Ubuntu 18.04 — mqtt-client — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — mqtt-client — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6685-1 Related CVEs: CVE-2019-0222 Upstream summary: It was discovered that mqtt-client incorrectly handled memory while parsing malformed MQTT frames. An attacker could possibly use this issue to cause a crash, […]

Read more
Ubuntu 14.04 — gnupg2 — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gnupg2 — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3675-2 Related CVEs: CVE-2018-12020 CVE-2014-3591 CVE-2014-5270 CVE-2015-0837 CVE-2015-1606 CVE-2015-1607 CVE-2014-4617 Upstream summary: USN-3675-1 fixed a vulnerability in GnuPG 2 for Ubuntu 18.04 LTS and Ubuntu 17.10. This update provides the […]

Read more
Ubuntu 14.04 — librelp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — librelp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3612-1 Related CVEs: CVE-2018-1000140 Upstream summary: Bas van Schaik and Kevin Backhouse discovered that librelp incorrectly handled checking certain x509 certificates. A remote attacker able to connect to rsyslog could […]

Read more
Ubuntu 14.04 — node-fstream — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — node-fstream — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4863-1 Related CVEs: CVE-2019-13173 Upstream summary: It was discovered that fstream incorrectly handled certain crafted tarballs. An attacker could use this vulnerability to write arbitrary files to the filesystem. Table […]

Read more
CHAT