ubuntu

Ubuntu 14.04 — libtirpc — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libtirpc — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 June 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3759-1 Related CVEs: CVE-2016-4429 CVE-2017-8779 CVE-2018-14622 Upstream summary: Aldy Hernandez discovered that libtirpc incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. […]

Read more
Ubuntu 16.04 — tcpflow — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — tcpflow — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3955-1 Related CVEs: CVE-2018-14938 CVE-2018-18409 Upstream summary: It was discovered that tcpflow incorrectly handled certain malformed network packets. A remote attacker could send these packets to a target system, causing […]

Read more
Ubuntu 16.04 — libplist — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libplist — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 June 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3429-1 Related CVEs: CVE-2017-7982 Upstream summary: Wang Junjie discovered that Libplist incorrectly handled certain files. If a user were tricked into opening a crafted file, an attacker could possibly use […]

Read more
Ubuntu 14.04 — gnome-keyring — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gnome-keyring — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 June 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3894-1 Related CVEs: CVE-2018-20781 Upstream summary: It was discovered that GNOME Keyring incorrectly cleared out credentials supplied to the PAM module. A local attacker could possibly use this issue to […]

Read more
Ubuntu 18.04 — glusterfs — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — glusterfs — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 June 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4770-1 Related CVEs: CVE-2014-3619 CVE-2018-10841 CVE-2018-1088 CVE-2018-10904 CVE-2018-10907 CVE-2018-10911 CVE-2018-10913 CVE-2018-10914  +12 more Upstream summary: It was discovered that GlusterFS incorrectly handled network requests. An attacker could possibly use this […]

Read more
Ubuntu 14.04 — soundtouch — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — soundtouch — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 June 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4826-1 Related CVEs: CVE-2017-9258 CVE-2017-9259 CVE-2017-9260 CVE-2018-1000223 CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 Upstream summary: It was discovered that SoundTouch incorrectly handled certain WAV files. A remote attacker could possibly use this issue […]

Read more
Ubuntu 14.04 — shotwell — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — shotwell — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3379-1 Related CVEs: CVE-2017-1000024 Upstream summary: It was discovered that Shotwell is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext […]

Read more
Ubuntu 18.04 — gettext — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — gettext — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 May 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3815-1 Related CVEs: CVE-2018-18751 Upstream summary: It was discovered that gettext incorrectly handled certain messages. An attacker could possibly use this issue to execute arbitrary code. Table of contents Symptom […]

Read more
Ubuntu 14.04 — procmail — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — procmail — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3483-1 Related CVEs: CVE-2017-16844 CVE-2014-3618 Upstream summary: Jakub Wilk discovered that the formail tool incorrectly handled certain malformed mail messages. An attacker could use this flaw to cause formail to […]

Read more
Ubuntu 14.04 — hdf5 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — hdf5 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 24 May 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5272-1 Related CVEs: CVE-2018-17233 CVE-2018-17234 CVE-2018-17237 CVE-2017-17505 CVE-2017-17506 CVE-2017-17508 Upstream summary: It was discovered that HDF5 incorrectly handled certain inputs. An attacker could possibly use this issue to cause a […]

Read more
CHAT