[월:] 2019년 02월

USN-3871-2: Linux kernel regression linux regression A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.04 LTS Summary Multiple regressions were fixed in the Linux kernel. Software Description linux – Linux kernel Details USN-3871-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. Unfortunately, that update introduced regressions with docking station displays and mounting ext4 file systems with the meta_bg option enabled. This update fixes the problems. We apologize for the inconvenience. Original advisory details: Wen Xu discovered that a use-after-free vulnerability existed in the ext4 filesystem implementation in the Linux kernel. An attacker could use this to construct a malicious ext4 image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-10876, CVE-2018-10879) Wen Xu discovered that a buffer overflow existed in the ext4 filesystem implementation in the [ more… ]

USN-3877-1: LibVNCServer vulnerabilities libvncserver vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Several security issues were fixed in LibVNCServer. Software Description libvncserver – vnc server library Details It was discovered that LibVNCServer incorrectly handled certain operations. A remote attacker able to connect to applications using LibVNCServer could possibly use this issue to obtain sensitive information, cause a denial of service, or execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10 libvncclient1 – 0.9.11+dfsg-1.1ubuntu0.1 libvncserver1 – 0.9.11+dfsg-1.1ubuntu0.1 Ubuntu 18.04 LTS libvncclient1 – 0.9.11+dfsg-1ubuntu1.1 libvncserver1 – 0.9.11+dfsg-1ubuntu1.1 Ubuntu 16.04 LTS libvncclient1 – 0.9.10+dfsg-3ubuntu0.16.04.3 libvncserver1 – 0.9.10+dfsg-3ubuntu0.16.04.3 Ubuntu 14.04 LTS libvncserver0 – 0.9.9+dfsg-1ubuntu1.4 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard [ more… ]