[월:] 2018년 04월

USN-3616-1: Python Crypto vulnerability python-crypto vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Python Crypto could expose sensitive information. Software Description python-crypto – cryptographic algorithms and protocols for Python Details It was discovered that Python Crypto incorrectly generated ElGamal key parameters. A remote attacker could possibly use this issue to obtain sensitive information. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 17.10 python-crypto – 2.6.1-7ubuntu0.1 python3-crypto – 2.6.1-7ubuntu0.1 Ubuntu 16.04 LTS python-crypto – 2.6.1-6ubuntu0.16.04.3 python3-crypto – 2.6.1-6ubuntu0.16.04.3 Ubuntu 14.04 LTS python-crypto – 2.6.1-4ubuntu0.3 python3-crypto – 2.6.1-4ubuntu0.3 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2018-6594 Source: USN-3616-1: Python Crypto vulnerability

USN-3615-1: LibRaw vulnerabilities libraw vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary LibRaw could be made to crash or run programs as your login if it opened a specially crafted file. Software Description libraw – raw image decoder library Details It was discovered that LibRaw incorrectly handled photo files. If a user or automated system were tricked into processing a specially crafted photo file, a remote attacker could cause applications linked against LibRaw to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 17.10 libraw16 – 0.18.2-2ubuntu0.2 Ubuntu 16.04 LTS libraw15 – 0.17.1-1ubuntu0.2 Ubuntu 14.04 LTS libraw9 – 0.15.4-1ubuntu0.2 To update your system, please follow these instructions: [ more… ]