Articles by KENNETH

USN-3953-2: PHP vulnerabilities php5 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 ESM Ubuntu 12.04 ESM Summary Several security issues were fixed in PHP. Software Description php5 – HTML-embedded scripting language interpreter Details USN-3953-1 fixed several vulnerabilities in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 ESM libapache2-mod-php5 – 5.5.9+dfsg-1ubuntu4.29+esm1 php5-cgi – 5.5.9+dfsg-1ubuntu4.29+esm1 php5-cli – 5.5.9+dfsg-1ubuntu4.29+esm1 php5-fpm – 5.5.9+dfsg-1ubuntu4.29+esm1 Ubuntu 12.04 ESM libapache2-mod-php5 – 5.3.10-1ubuntu3.35 php5-cgi – 5.3.10-1ubuntu3.35 php5-cli – [ more… ]

USN-3963-1: Memcached vulnerability memcached vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.04 Ubuntu 18.10 Ubuntu 18.04 LTS Summary Memcached could be made to crash if it received specially crafted network traffic. Software Description memcached – high-performance memory object caching system Details It was discovered that Memcached incorrectly handled certain lru command messages. A remote attacker could possibly use this issue to cause Memcached to crash, resulting in a denial of service. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04 memcached – 1.5.10-0ubuntu1.19.04.1 Ubuntu 18.10 memcached – 1.5.10-0ubuntu1.18.10.1 Ubuntu 18.04 LTS memcached – 1.5.6-0ubuntu1.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2019-11596 Source: USN-3963-1: Memcached vulnerability