[월:] 2020년 03월

USN-4295-1: Rake vulnerability rake vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary Rake could be made run arbitrary commands it received a specially crafted file. Software Description rake – Ruby make-like utility Details It was discovered that Rake incorrectly handled certain files. An attacker could use this issue to possibly execute arbitrary commands. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 19.10 rake – 12.3.1-3ubuntu0.1 Ubuntu 18.04 LTS rake – 12.3.1-1ubuntu0.1 Ubuntu 16.04 LTS rake – 10.5.0-2ubuntu0.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2020-8130 Source: USN-4295-1: Rake vulnerability

USN-4290-2: libpam-radius-auth vulnerability libpam-radius-auth vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 ESM Ubuntu 12.04 ESM Summary libpam-radius-auth could be made to crash if it received specially crafted network traffic. Software Description libpam-radius-auth – The PAM RADIUS authentication module Details USN-4290-1 fixed a vulnerability in libpam-radius-auth. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that libpam-radius-auth incorrectly handled certain long passwords. A remote attacker could possibly use this issue to cause libpam-radius-auth to crash, resulting in a denial of service. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 ESM libpam-radius-auth – 1.3.17-0ubuntu4+esm1 Ubuntu 12.04 ESM libpam-radius-auth – 1.3.17-0ubuntu3.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system [ more… ]