[월:] 2017년 10월

USN-3461-1: NVIDIA graphics drivers vulnerabilities Ubuntu Security Notice USN-3461-1 23rd October, 2017 nvidia-graphics-drivers-384 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary NVIDIA graphics drivers could be made to crash or run programs as an administrator. Software description nvidia-graphics-drivers-384 – Transitional package for libcuda1-384 Details It was discovered that the NVIDIA graphics drivers contained flaws in thekernel mode layer. A local attacker could use these issues to cause adenial of service or potentially escalate their privileges on the system. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: nvidia-384 384.90-0ubuntu0.17.04.1 Ubuntu 16.04 LTS: nvidia-384 384.90-0ubuntu0.16.04.1 Ubuntu 14.04 LTS: nvidia-384 384.90-0ubuntu0.14.04.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system update you need to reboot your [ more… ]

USN-3458-1: ICU vulnerability Ubuntu Security Notice USN-3458-1 23rd October, 2017 icu vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 17.04 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary ICU could be made to crash or run arbitrary code as your login if it received specially crafted input. Software description icu – International Components for Unicode library Details It was discovered that ICU incorrectly handled certain inputs. If anapplication using ICU processed crafted data, a remote attacker couldpossibly cause it to crash or potentially execute arbitrary code withthe privileges of the user invoking the program. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.10: libicu57 57.1-6ubuntu0.2 Ubuntu 17.04: libicu57 57.1-5ubuntu0.2 Ubuntu 16.04 LTS: libicu55 55.1-7ubuntu0.3 Ubuntu 14.04 LTS: libicu52 52.1-3ubuntu0.7 To update your system, please follow [ more… ]

USN-3460-1: WebKitGTK+ vulnerabilities Ubuntu Security Notice USN-3460-1 23rd October, 2017 webkit2gtk vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.04 LTS Summary Several security issues were fixed in WebKitGTK+. Software description webkit2gtk – Web content engine library for GTK+ Details A large number of security issues were discovered in the WebKitGTK+ Web andJavaScript engines. If a user were tricked into viewing a maliciouswebsite, a remote attacker could exploit a variety of issues related to webbrowser security, including cross-site scripting attacks, denial of serviceattacks, and arbitrary code execution. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: libwebkit2gtk-4.0-37 2.18.0-0ubuntu0.17.04.2 libjavascriptcoregtk-4.0-18 2.18.0-0ubuntu0.17.04.2 Ubuntu 16.04 LTS: libwebkit2gtk-4.0-37 2.18.0-0ubuntu0.16.04.2 libjavascriptcoregtk-4.0-18 2.18.0-0ubuntu0.16.04.2 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. This update uses a new upstream release, which [ more… ]