ubuntu

Ubuntu 18.04 — opensaml2 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — opensaml2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 September 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7364-1 Related CVEs: https://launchpad.net/bugs/2103420 Upstream summary: Alexander Tan discovered that the OpenSAML C++ library was susceptible to forging of signed SAML messages. An attacker could possibly use this issue to […]

Read more
Ubuntu 14.04 — lighttpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — lighttpd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 September 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4775-1 Related CVEs: CVE-2015-3200 CVE-2018-19052 Upstream summary: It was discovered that Lighttpd did not properly sanitized the string used in basic HTTP authentication method. A remote attacker could use this […]

Read more
Ubuntu 18.04 — mozjs52 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — mozjs52 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 September 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3749-1 Related CVEs: CVE-2018-5188 CVE-2017-7810 CVE-2017-7826 CVE-2018-5089 CVE-2018-5125 CVE-2018-5150 Upstream summary: Multiple memory safety issues were fixed in Spidermonkey. An attacker could potentially exploit these to cause a denial of […]

Read more
Ubuntu 14.04 — transfig — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — transfig — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 August 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3760-1 Related CVEs: CVE-2018-16140 Upstream summary: It was discovered that transfig incorrectly handled certain FIG files. An attacker could possibly use this to execute arbitrary code. Table of contents Symptom […]

Read more
Ubuntu 18.04 — libiberty — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libiberty — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 24 August 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4326-1 Related CVEs: CVE-2018-12641 CVE-2018-12697 CVE-2018-12698 CVE-2018-12934 CVE-2018-17794 CVE-2018-17985 CVE-2018-18483 CVE-2018-18484  +6 more Upstream summary: It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated […]

Read more
Ubuntu 14.04 — lcms2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — lcms2 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 August 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3770-1 Related CVEs: CVE-2016-10165 CVE-2018-16435 CVE-2013-7455 Upstream summary: Ibrahim El-Sayed discovered that Little CMS incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of […]

Read more
Ubuntu 16.04 — libvorbis — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libvorbis — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 August 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5420-1 Related CVEs: CVE-2017-14160 CVE-2018-10392 CVE-2018-10393 CVE-2018-5146 CVE-2017-14632 CVE-2017-14633 Upstream summary: It was discovered that Vorbis incorrectly handled certain files. An attacker could possibly use this issue to cause a […]

Read more
Ubuntu 18.04 — libarchive-zip-perl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libarchive-zip-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 August 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3703-1 Related CVEs: CVE-2018-10860 Upstream summary: It was discovered that the Archive Zip module incorrectly handled certain inputs. An attacker could possibly use this to access sensitive information. Table of […]

Read more
Ubuntu 16.04 — transmission — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — transmission — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 August 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3533-1 Related CVEs: CVE-2018-5702 Upstream summary: It was discovered that Transmission incorrectly handled certain POST requests to the RPC server and allowed DNS rebinding attack. An attacker could possibly use […]

Read more
Ubuntu 18.04 — lxc — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — lxc — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 August 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3730-1 Related CVEs: CVE-2018-6556 Upstream summary: Matthias Gerstner discovered that LXC incorrectly handled the lxc-user-nic utility. A local attacker could possibly use this issue to open arbitrary files. Table of […]

Read more
CHAT