[월:] 2019년 08월

USN-4100-1: KConfig and KDE libraries vulnerabilities kconfig, kde4libs vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary KConfig and KDE libraries could be made to crash or run programs if it opened a specially crafted file. Software Description kconfig – configuration settings framework for Qt kde4libs – KDE 4 core applications and libraries Details It was discovered that KConfig and KDE libraries have a vulnerability where an attacker could hide malicious code under desktop and configuration files. (CVE-2019-14744) It was discovered that KConfig allows remote attackers to write to arbitrary files via a ../ in a filename in an archive file. (CVE-2016-6232) Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04 libkdecore5 – 4:4.14.38-0ubuntu6.1 libkf5configcore5 – 5.56.0-0ubuntu1.1 Ubuntu 18.04 [ more… ]

USN-4101-1: Firefox vulnerability firefox vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary A local attacker could obtain saved passwords. Software Description firefox – Mozilla Open Source web browser Details It was discovered that passwords could be copied to the clipboard from the "Saved Logins" dialog without entering the master password, even when a master password has been set. A local attacker could potentially exploit this to obtain saved passwords. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04 firefox – 68.0.2+build1-0ubuntu0.19.04.1 Ubuntu 18.04 LTS firefox – 68.0.2+build1-0ubuntu0.18.04.1 Ubuntu 16.04 LTS firefox – 68.0.2+build1-0ubuntu0.16.04.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system update you need to restart Firefox to make all the necessary changes. [ more… ]