Articles by KENNETH

USN-3908-1: Linux kernel vulnerability linux vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 LTS Summary The system could be made to run programs as an administrator. Software Description linux – Linux kernel Details Jann Horn discovered a race condition in the fork() system call in the Linux kernel. A local attacker could use this to gain access to services that cache authorizations. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS linux-image-3.13.0-166-generic – 3.13.0-166.216 linux-image-3.13.0-166-generic-lpae – 3.13.0-166.216 linux-image-3.13.0-166-lowlatency – 3.13.0-166.216 linux-image-3.13.0-166-powerpc-e500 – 3.13.0-166.216 linux-image-3.13.0-166-powerpc-e500mc – 3.13.0-166.216 linux-image-3.13.0-166-powerpc-smp – 3.13.0-166.216 linux-image-3.13.0-166-powerpc64-emb – 3.13.0-166.216 linux-image-3.13.0-166-powerpc64-smp – 3.13.0-166.216 linux-image-generic – 3.13.0.166.177 linux-image-generic-lpae – 3.13.0.166.177 linux-image-lowlatency – 3.13.0.166.177 linux-image-powerpc-e500 – 3.13.0.166.177 linux-image-powerpc-e500mc – 3.13.0.166.177 linux-image-powerpc-smp – 3.13.0.166.177 linux-image-powerpc64-emb – 3.13.0.166.177 linux-image-powerpc64-smp – 3.13.0.166.177 linux-image-virtual – 3.13.0.166.177 To update [ more… ]

USN-3902-2: PHP vulnerabilities php5 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 ESM Summary Several security issues were fixed in PHP. Software Description php5 – HTML-embedded scripting language interpreter Details USN-3902-1 fixed a vulnerability in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that the PHP XML-RPC module incorrectly handled decoding XML data. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2019-9020, CVE-2019-9024) It was discovered that the PHP PHAR module incorrectly handled certain filenames. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2019-9021) It was discovered that PHP incorrectly handled mbstring regular expressions. A remote attacker could possibly use this issue to [ more… ]

USN-3907-1: WALinuxAgent vulnerability walinuxagent vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary WALinuxAgent could be made to expose sensitive information. Software Description walinuxagent – Windows Azure Linux Agent Details It was discovered that WALinuxAgent created swap files with incorrect permissions. A local attacker could possibly use this issue to obtain sensitive information from the swap file. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10 walinuxagent – 2.2.32-0ubuntu1~18.10.2 Ubuntu 18.04 LTS walinuxagent – 2.2.32-0ubuntu1~18.04.2 Ubuntu 16.04 LTS walinuxagent – 2.2.32-0ubuntu1~16.04.2 Ubuntu 14.04 LTS walinuxagent – 2.2.32-0ubuntu1~14.04.2 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2019-0804 Source: USN-3907-1: WALinuxAgent vulnerability