[월:] 2020년 01월

USN-4261-1: WebKitGTK+ vulnerabilities webkit2gtk vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.10 Ubuntu 18.04 LTS Summary Several security issues were fixed in WebKitGTK+. Software Description webkit2gtk – Web content engine library for GTK+ Details A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service attacks, and arbitrary code execution. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 19.10 libjavascriptcoregtk-4.0-18 – 2.26.3-0ubuntu0.19.10.1 libwebkit2gtk-4.0-37 – 2.26.3-0ubuntu0.19.10.1 Ubuntu 18.04 LTS libjavascriptcoregtk-4.0-18 – 2.26.3-0ubuntu0.18.04.1 libwebkit2gtk-4.0-37 – 2.26.3-0ubuntu0.18.04.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. This update uses a new upstream release, [ more… ]

USN-4259-1: Apache Solr vulnerability Apache Solr vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.04 LTS Summary Apache Solr could be made to run programs if it received specially crafted network traffic. Software Description lucene-solr – Full-text search engine library for Java – additional libraries Details Michael Stepankin and Olga Barinova discovered that Apache Solr was vulnerable to an XXE attack. An attacker could use this vulnerability to remotely execute code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS liblucene3-contrib-java – 3.6.2+dfsg-8ubuntu0.1 liblucene3-java – 3.6.2+dfsg-8ubuntu0.1 libsolr-java – 3.6.2+dfsg-8ubuntu0.1 solr-common – 3.6.2+dfsg-8ubuntu0.1 solr-jetty – 3.6.2+dfsg-8ubuntu0.1 solr-tomcat – 3.6.2+dfsg-8ubuntu0.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2017-12629 Source: USN-4259-1: Apache Solr [ more… ]