ubuntu

Ubuntu 16.04 — keepalived — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — keepalived — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3995-1 Related CVEs: CVE-2018-19115 Upstream summary: It was discovered that Keepalived incorrectly handled certain HTTP status response codes. A remote attacker could use this issue to cause Keepalived to crash, […]

Read more
Ubuntu 16.04 — graphite2 — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — graphite2 — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5657-1 Related CVEs: CVE-2018-7999 CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774 CVE-2017-7775 CVE-2017-7776 CVE-2017-7777  +1 more Upstream summary: It was discovered that Graphite2 mishandled specially crafted files. An attacker could possibly use this […]

Read more
Ubuntu 16.04 — libsolv — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libsolv — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 26 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4851-1 Related CVEs: CVE-2018-20532 CVE-2018-20533 CVE-2018-20534 Upstream summary: It was discovered that Libsolv incorrectly handled certain malformed input. An attacker could use this issue to cause Libsolv to crash, resulting […]

Read more
Ubuntu 18.04 — libapache2-mod-perl2 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libapache2-mod-perl2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3825-1 Related CVEs: CVE-2011-2767 Upstream summary: Jan Ingvoldstad discovered that mod_perl incorrectly handled configuration options to disable being used by unprivileged users, contrary to the documentation. A local attacker could […]

Read more
Ubuntu 18.04 — neovim — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — neovim — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 23 January 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4862-1 Related CVEs: CVE-2019-12735 Upstream summary: It was discovered that Neovim incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service or execute […]

Read more
Ubuntu 16.04 — ruby-rack-cors — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ruby-rack-cors — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4571-1 Related CVEs: CVE-2019-18978 Upstream summary: It was discovered that rack-cors did not properly handle relative file paths. An attacker could use this vulnerability to access arbitrary files. Table of […]

Read more
Ubuntu 16.04 — python-psutil — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — python-psutil — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4204-1 Related CVEs: CVE-2019-18874 Upstream summary: Riccardo Schirone discovered that psutil incorrectly handled certain reference counting operations. An attacker could use this issue to cause psutil to crash, resulting in […]

Read more
Ubuntu 18.04 — dosbox — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — dosbox — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 January 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5356-1 Related CVEs: CVE-2019-12594 CVE-2019-7165 Upstream summary: Alexandre Bartel discovered that DOSBox incorrectly handled long lines in certain files. An attacker could possibly use this issue to execute arbitrary code. […]

Read more
Ubuntu 16.04 — librsvg — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — librsvg — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4436-2 Related CVEs: https://launchpad.net/bugs/1889206 CVE-2017-11464 CVE-2019-20446 Upstream summary: USN-4436-1 fixed a vulnerability in librsvg. The upstream fix caused a regression when parsing certain SVG files. This update backs out the […]

Read more
Ubuntu 16.04 — ssvnc — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — ssvnc — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4547-2 Related CVEs: CVE-2018-20020 CVE-2018-20021 CVE-2018-20022 CVE-2018-20024 Upstream summary: It was discovered that the LibVNCClient vendored in SSVNC incorrectly handled certain packet lengths. A remote attacker could possibly use this […]

Read more
CHAT