Articles by KENNETH

USN-5446-2: dpkg vulnerability USN-5446-1 fixed a vulnerability in dpkg. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Max Justicz discovered that dpkg incorrectly handled unpacking certain source packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files outside the target unpack directory, leading to a denial of service or potentially gaining access to the system. Source: USN-5446-2: dpkg vulnerability

USN-5453-1: FreeType vulnerability It was discovered that FreeType incorrectly handled certain font files. An attacker could possibly use this issue to cause a denial of service. Source: USN-5453-1: FreeType vulnerability

USN-5452-1: NTFS-3G vulnerability It was discovered that NTFS-3G was incorrectly validating NTFS metadata in its ntfsck tool by not performing boundary checks. A local attacker could possibly use this issue to cause a denial of service or to execute arbitrary code. Source: USN-5452-1: NTFS-3G vulnerability

USN-5431-1: GnuPG vulnerability It was discovered that GnuPG was not properly processing keys with large amounts of signatures. An attacker could possibly use this issue to cause a denial of service. Source: USN-5431-1: GnuPG vulnerability