Articles by KENNETH

USN-4599-3: Firefox regressions USN-4599-1 and USN-4599-2 fixed vulnerabilities in Firefox. The updates introduced various minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the prompt for opening an external application, obtain sensitive information, or execute arbitrary code. Source: USN-4599-3: Firefox regressions

USN-4620-1: phpLDAPadmin vulnerability It was discovered that phpLDAPadmin didn’t properly sanitize before being echoed to the user. A remote attacker could inject arbitrary HTML/Javascript code in a user’s context and cause a crash, resulting in denial of service or potential execution of arbitrary code. Source: USN-4620-1: phpLDAPadmin vulnerability

USN-4619-1: dom4j vulnerability Mário Areias discovered that dom4j did not properly validate XML document elements. An attacker could exploit this with a crafted XML file to cause dom4j to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2018-1000632) Source: USN-4619-1: dom4j vulnerability

USN-4618-1: tmux vulnerability Sergey Nizovtsev discovered that tmux incorrectly handled some inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code. Source: USN-4618-1: tmux vulnerability