ubuntu

Ubuntu 16.04 — lftp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — lftp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 May 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3731-1 Related CVEs: CVE-2018-10916 Upstream summary: It was discovered that LFTP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. Table of […]

Read more
Ubuntu 16.04 — openpyxl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — openpyxl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4821-1 Related CVEs: CVE-2017-5992 Upstream summary: It was discovered that openpyxl incorrectly handled certain documents. A remote attacker could possibly use this issue to cause a denial of service or […]

Read more
Ubuntu 14.04 — procps — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — procps — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 4 May 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3658-1 Related CVEs: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 Upstream summary: It was discovered that the procps-ng top utility incorrectly read its configuration file from the current working directory. A local […]

Read more
Ubuntu 18.04 — base-files — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — base-files — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3748-1 Related CVEs: CVE-2018-6557 Upstream summary: Sander Bos discovered that the MOTD update script incorrectly handled temporary files. A local attacker could use this issue to cause a denial of […]

Read more
Ubuntu 14.04 — gst-plugins-good0.10 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gst-plugins-good0.10 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3245-1 Related CVEs: CVE-2016-10198 CVE-2016-10199 CVE-2017-5840 CVE-2017-5841 CVE-2017-5845 https://launchpad.net/bugs/1643901 Upstream summary: Hanno Böck discovered that GStreamer Good Plugins did not correctly handle certain malformed media files. If a user were […]

Read more
Ubuntu 14.04 — liblouis — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — liblouis — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 1 May 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3782-1 Related CVEs: CVE-2018-12085 CVE-2018-17294 CVE-2018-11683 CVE-2018-11684 CVE-2018-11685 CVE-2018-11410 CVE-2018-11440 CVE-2018-11577  +6 more Upstream summary: Henri Salo discovered that Liblouis incorrectly handled certain files. An attacker could possibly use this […]

Read more
Ubuntu 14.04 — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — tcpdump — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 April 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4252-2 Related CVEs: CVE-2017-16808 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465  +12 more Upstream summary: USN-4252-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 12.04 […]

Read more
Ubuntu 16.04 — libxdmcp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libxdmcp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 April 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5690-1 Related CVEs: CVE-2017-2625 Upstream summary: It was discovered that libXdmcp was generating weak session keys. A local attacker could possibly use this issue to perform a brute force attack […]

Read more
Ubuntu 14.04 — libcrypto++ — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libcrypto++ — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2018 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4827-1 Related CVEs: CVE-2017-9434 Upstream summary: It was discovered that Crypto++ mishandled certain input. An attacker could use this vulnerability to leak potentially sensitive information. Table of contents Symptom & […]

Read more
Ubuntu 16.04 — librelp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — librelp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 April 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4828-1 Related CVEs: CVE-2018-1000140 Upstream summary: It was discovered that librelp did not properly manage x509 certificates, leading to a stack-based buffer overflow. A remote attacker could possibly use this […]

Read more
CHAT