[월:] 2018년 03월

USN-3605-1: Sharutils vulnerability sharutils vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Sharutils could be made to execute arbitrary code if it opened a specially crafted file. Software Description sharutils – shar, unshar, uuencode, uudecode Details It was discovered that Sharutils incorrectly handled certain files. An attacker could possibly use this to execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 17.10 sharutils – 1:4.15.2-2ubuntu0.1 Ubuntu 16.04 LTS sharutils – 1:4.15.2-1ubuntu0.1 Ubuntu 14.04 LTS sharutils – 1:4.14-1ubuntu1.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2018-1000097 Source: USN-3605-1: Sharutils vulnerability

USN-3604-1: libvorbis vulnerability libvorbis vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary libvorbis could be made to crash or run programs as your login if it opened a specially crafted file. Software Description libvorbis – The Vorbis General Audio Compression Codec Details Richard Zhu discovered that libvorbis incorrectly handled certain sound files. An attacker could use this to cause libvorbis to crash, resulting in a denial or service, or possibly execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 17.10 libvorbis0a – 1.3.5-4ubuntu0.2 Ubuntu 16.04 LTS libvorbis0a – 1.3.5-3ubuntu0.2 Ubuntu 14.04 LTS libvorbis0a – 1.3.2-1.3ubuntu1.2 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system upgrade you need to restart any applications that [ more… ]