[월:] 2018년 11월

USN-3815-1: gettext vulnerability gettext vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary gettext could be made to execute arbitrary code if it received a specially crafted message. Software Description gettext – GNU Internationalization utilities Details It was discovered that gettext incorrectly handled certain messages. An attacker could possibly use this issue to execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10 gettext – 0.19.8.1-8ubuntu0.1 Ubuntu 18.04 LTS gettext – 0.19.8.1-6ubuntu0.1 Ubuntu 16.04 LTS gettext – 0.19.7-2ubuntu3.1 Ubuntu 14.04 LTS gettext – 0.18.3.1-1ubuntu3.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2018-18751 Source: USN-3815-1: gettext vulnerability

USN-3814-1: libmspack vulnerabilities libmspack vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary Several security issues were fixed in libmspack. Software Description libmspack – library for Microsoft compression formats Details It was discovered libmspack incorrectly handled certain malformed CAB files. A remote attacker could use this issue to cause libmspack to crash, resulting in a denial of service. (CVE-2018-18584, CVE-2018-18585) Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10 libmspack0 – 0.7-1ubuntu0.1 Ubuntu 18.04 LTS libmspack0 – 0.6-3ubuntu0.2 Ubuntu 16.04 LTS libmspack0 – 0.5-1ubuntu0.16.04.3 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2018-18584 CVE-2018-18585 Source: USN-3814-1: libmspack vulnerabilities