[월:] 2020년 06월

USN-4406-1: Mailman vulnerability mailman vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary Mailman could be made to inject arbitrary content in the login page if it received a specially crafted input. Software Description mailman – Web-based mailing list manager (legacy branch) Details It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue to inject arbitrary content in the login page. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS mailman – 1:2.1.26-1ubuntu0.3 Ubuntu 16.04 LTS mailman – 1:2.1.20-1ubuntu0.6 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2020-15011 Source: USN-4406-1: Mailman vulnerability

USN-4405-1: GLib Networking vulnerability glib-networking vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 20.04 LTS Ubuntu 19.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Software Description glib-networking – Network extensions for GLib Details It was discovered that glib-networking skipped hostname certificate verification if the application failed to specify the server identity. A remote attacker could use this to perform a person-in-the-middle attack and expose sensitive information. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS glib-networking – 2.64.2-1ubuntu0.1 Ubuntu 19.10 glib-networking – 2.62.1-1ubuntu0.1 Ubuntu 18.04 LTS glib-networking – 2.56.0-1ubuntu0.1 Ubuntu 16.04 LTS glib-networking – 2.48.2-1~ubuntu16.04.2 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will [ more… ]