Articles by KENNETH

USN-3026-1: libimobiledevice vulnerability Ubuntu Security Notice USN-3026-1 5th July, 2016 libimobiledevice vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.04 LTS Ubuntu 15.10 Ubuntu 14.04 LTS Summary libimobiledevice would allow unintended access to devices over the network. Software description libimobiledevice – Library for communicating with iPhone and iPod Touch devices Details It was discovered that libimobiledevice incorrectly handled socketpermissions. A remote attacker could use this issue to access services oniOS devices, contrary to expectations. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 16.04 LTS: libimobiledevice6 1.2.0+dfsg-3~ubuntu0.2 Ubuntu 15.10: libimobiledevice4 1.1.6+dfsg-3.1ubuntu0.1 Ubuntu 14.04 LTS: libimobiledevice4 1.1.5+git20140313.bafe6a9e-0ubuntu1.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2016-5104 Source: USN-3026-1: libimobiledevice vulnerability

USN-3026-2: libusbmuxd vulnerability Ubuntu Security Notice USN-3026-2 5th July, 2016 libusbmuxd vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.04 LTS Ubuntu 15.10 Summary libusbmuxd would allow unintended access to devices over the network. Software description libusbmuxd – USB multiplexor daemon for iPhone and iPod Touch devices Details It was discovered that libusbmuxd incorrectly handled socket permissions.A remote attacker could use this issue to access services on iOS devices,contrary to expectations. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 16.04 LTS: libusbmuxd4 1.0.10-2ubuntu0.1 Ubuntu 15.10: libusbmuxd2 1.0.9-1ubuntu0.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2016-5104 Source: USN-3026-2: libusbmuxd vulnerability