SECURITY

USN-3305-1: NVIDIA graphics drivers vulnerabilities Ubuntu Security Notice USN-3305-1 31st May, 2017 nvidia-graphics-drivers-375 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary NVIDIA graphics drivers could be made to crash or run programs as an administrator. Software description nvidia-graphics-drivers-375 – NVIDIA binary X.Org driver Details It was discovered that the NVIDIA graphics drivers contained flaws in thekernel mode layer. A local attacker could use these issues to cause a denial ofservice or potentially escalate their privileges on the system. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: nvidia-367 375.66-0ubuntu0.17.04.1 nvidia-375 375.66-0ubuntu0.17.04.1 Ubuntu 16.10: nvidia-367 375.66-0ubuntu0.16.10.1 nvidia-375 375.66-0ubuntu0.16.10.1 Ubuntu 16.04 LTS: nvidia-367 375.66-0ubuntu0.16.04.1 nvidia-375 375.66-0ubuntu0.16.04.1 Ubuntu 14.04 LTS: nvidia-367 375.66-0ubuntu0.14.04.1 nvidia-375 375.66-0ubuntu0.14.04.1 To update your system, please [ more… ]

USN-3304-1: Sudo vulnerability Ubuntu Security Notice USN-3304-1 30th May, 2017 sudo vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Sudo could be made to overwrite files as the administrator. Software description sudo – Provide limited super user privileges to specific users Details It was discovered that Sudo did not properly parse the contents of/proc/[pid]/stat when attempting to determine its controlling tty.A local attacker in some configurations could possibly use this tooverwrite any file on the filesystem, bypassing intended permissions. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: sudo-ldap 1.8.19p1-1ubuntu1.1 sudo 1.8.19p1-1ubuntu1.1 Ubuntu 16.10: sudo-ldap 1.8.16-0ubuntu3.2 sudo 1.8.16-0ubuntu3.2 Ubuntu 16.04 LTS: sudo-ldap 1.8.16-0ubuntu1.4 sudo 1.8.16-0ubuntu1.4 Ubuntu 14.04 LTS: sudo-ldap 1.8.9p5-1ubuntu1.4 sudo 1.8.9p5-1ubuntu1.4 To update your system, [ more… ]