ubuntu

Ubuntu 16.04 — xmlsec1 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — xmlsec1 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 11 April 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5674-1 Related CVEs: CVE-2017-1000061 Upstream summary: It was discovered that XML Security Library incorrectly handled certain input documents. An attacker could possibly use this issue to obtain sensitive information or […]

Read more
Ubuntu 14.04 — libxml-libxml-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libxml-libxml-perl — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3494-1 Related CVEs: CVE-2017-10672 CVE-2015-3451 Upstream summary: It was discovered that XML::LibXML incorrectly handled memory when processing a replaceChild call. A remote attacker could possibly use this issue to execute […]

Read more
Ubuntu 14.04 — xorg-server-lts-xenial — multiple vulnerabilities (17 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — xorg-server-lts-xenial — multiple vulnerabilities (17 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 April 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3456-1 Related CVEs: CVE-2017-12176 CVE-2017-12177 CVE-2017-12178 CVE-2017-12179 CVE-2017-12180 CVE-2017-12181 CVE-2017-12182 CVE-2017-12183  +9 more Upstream summary: It was discovered that the X.Org X server incorrectly handled certain lengths. An attacker able […]

Read more
Ubuntu 14.04 — swift — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — swift — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 6 April 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3451-1 Related CVEs: CVE-2015-5223 CVE-2016-0737 CVE-2016-0738 CVE-2014-7960 CVE-2015-1856 CVE-2014-3497 Upstream summary: It was discovered that OpenStack Swift incorrectly handled tempurls. A remote authenticated user in possession of a tempurl key […]

Read more
Ubuntu 14.04 — xdg-utils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — xdg-utils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 April 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3650-1 Related CVEs: CVE-2017-18266 Upstream summary: It was discovered that xdg-utils incorrectly handled certain inputs. An attacker could possibly use this to execute arbitrary code. Table of contents Symptom & […]

Read more
Ubuntu 16.04 — nvidia-graphics-drivers-367 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — nvidia-graphics-drivers-367 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3122-1 Related CVEs: CVE-2016-7382 CVE-2016-7389 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly gain […]

Read more
Ubuntu 16.04 — flightgear — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — flightgear — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 28 March 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4588-1 Related CVEs: CVE-2016-9956 Upstream summary: It was discovered that FlightGear could write arbitrary files if received a special nasal script. A remote attacker could exploit this with a crafted […]

Read more
Ubuntu 16.04 — jbigkit — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — jbigkit — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 March 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5742-1 Related CVEs: CVE-2017-9937 Upstream summary: It was discovered that JBIG-KIT incorrectly handled decoding certain large image files. If a user or automated system using JBIG-KIT were tricked into opening […]

Read more
Ubuntu 14.04 — libgit2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libgit2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 March 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4798-1 Related CVEs: CVE-2016-8568 CVE-2016-8569 Upstream summary: It was discovered that libgit2 mishandled certain malformed git objects. A remote attacker could use this vulnerability to cause a denial of service. […]

Read more
Ubuntu 16.04 — nova-lxd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — nova-lxd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 March 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3195-1 Related CVEs: CVE-2017-5936 https://launchpad.net/bugs/1656847 Upstream summary: James Page discovered that Nova-LXD incorrectly set up virtual network devices when creating LXD instances. This could result in an unintended firewall configuration. […]

Read more
CHAT