ubuntu

Ubuntu 16.04 — sensible-utils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — sensible-utils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 December 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3584-1 Related CVEs: CVE-2017-17512 Upstream summary: Gabriel Corona discovered that sensible-utils incorrectly validated strings when launcher a browser with the sensible-browser tool. A remote attacker could possibly use this issue […]

Read more
Ubuntu 14.04 — gst-plugins-good1.0 — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gst-plugins-good1.0 — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 2 December 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3245-1 Related CVEs: CVE-2016-10198 CVE-2016-10199 CVE-2017-5840 CVE-2017-5841 CVE-2017-5845 https://launchpad.net/bugs/1643901 Upstream summary: Hanno Böck discovered that GStreamer Good Plugins did not correctly handle certain malformed media files. If a user were […]

Read more
Ubuntu 16.04 — gcc-5 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — gcc-5 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5770-1 Related CVEs: CVE-2017-11671 Upstream summary: Todd Eisenberger discovered that certain versions of GNU Compiler Collection (GCC) could be made to clobber the status flag of RDRAND and RDSEED with […]

Read more
Ubuntu 14.04 — root-system — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — root-system — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 24 November 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4801-1 Related CVEs: CVE-2017-1000203 Upstream summary: It was discovered that ROOT incorrectly handled certain input arguments. An attacker could possibly use this issue to execute arbitrary code. Table of contents […]

Read more
Ubuntu 14.04 — freeradius — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — freeradius — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 November 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3369-1 Related CVEs: CVE-2017-10978 CVE-2017-10979 CVE-2017-10980 CVE-2017-10981 CVE-2017-10982 CVE-2017-10983 CVE-2017-10984 CVE-2017-10985  +2 more Upstream summary: Guido Vranken discovered that FreeRADIUS incorrectly handled memory when decoding packets. A remote attacker could […]

Read more
Ubuntu 14.04 — gimp — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — gimp — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 November 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3539-1 Related CVEs: CVE-2017-17784 CVE-2017-17785 CVE-2017-17786 CVE-2017-17787 CVE-2017-17788 CVE-2017-17789 CVE-2016-4994 Upstream summary: It was discovered that GIMP incorrectly handled certain images. If a user were tricked into opening a specially […]

Read more
Ubuntu 16.04 — libxcursor — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libxcursor — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 November 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3729-1 Related CVEs: CVE-2015-9262 CVE-2017-16612 Upstream summary: It was discovered that libxcursor incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. Table […]

Read more
Ubuntu 14.04 — amd64-microcode — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — amd64-microcode — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 November 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3690-2 Related CVEs: https://launchpad.net/bugs/1779092 CVE-2017-5715 Upstream summary: USN-3690-1 provided updated microcode for AMD processors to address CVE-2017-5715 (aka Spectre). Unfortunately, the update caused some systems to fail to boot. This […]

Read more
Ubuntu 16.04 — varnish — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — varnish — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 30 October 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4824-1 Related CVEs: CVE-2017-8807 Upstream summary: It was discovered that Varnish incorrectly handled certain inputs. A remote attacker could possibly use this issue to obtain sensitive information. Table of contents […]

Read more
Ubuntu 16.04 — libzip — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libzip — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 October 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4811-1 Related CVEs: CVE-2017-14107 Upstream summary: It was discovered that libzip mishandled certain malformed ZIP archives. A remote attacker could use this vulnerability to cause a denial of service. Table […]

Read more
CHAT