Articles by KENNETH

USN-3472-1: LibreOffice vulnerabilities Ubuntu Security Notice USN-3472-1 2nd November, 2017 libreoffice vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 LTS Summary LibreOffice could be made to crash or run programs as your login if it opened a specially crafted file. Software description libreoffice – Office productivity suite Details Marcin Noga discovered that LibreOffice incorrectly handled PPT documents.If a user were tricked into opening a specially crafted PPT document, aremote attacker could cause LibreOffice to crash, and possibly executearbitrary code. (CVE-2017-12607) Marcin Noga discovered that LibreOffice incorrectly handled Word documents.If a user were tricked into opening a specially crafted Word document, aremote attacker could cause LibreOffice to crash, and possibly executearbitrary code. (CVE-2017-12608) Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 14.04 LTS: libreoffice-core 1:4.2.8-0ubuntu5.2 To [ more… ]

USN-3426-2: Samba vulnerabilities Ubuntu Security Notice USN-3426-2 2nd November, 2017 samba vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 LTS Summary Several security issues were fixed in XXX-APP-XXX. Software description samba – SMB/CIFS file, print, and login server for Unix Details USN-3426-1 fixed several vulnerabilities in Samba. This updateprovides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Stefan Metzmacher discovered that Samba incorrectly enforced SMB signing in certain situations. A remote attacker could use this issue to perform a man in the middle attack. (CVE-2017-12150) Yihan Lian and Zhibin Hu discovered that Samba incorrectly handled memory when SMB1 is being used. A remote attacker could possibly use this issue to obtain server memory contents. (CVE-2017-12163) Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu [ more… ]