SECURITY

USN-3296-1: Samba vulnerability Ubuntu Security Notice USN-3296-1 24th May, 2017 samba vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Samba could be made to run programs as an administrator. Software description samba – SMB/CIFS file, print, and login server for Unix Details It was discovered that Samba incorrectly handled shared libraries. A remoteattacker could use this flaw to upload a shared library to a writable shareand execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: samba 2:4.5.8+dfsg-0ubuntu0.17.04.2 Ubuntu 16.10: samba 2:4.4.5+dfsg-2ubuntu5.6 Ubuntu 16.04 LTS: samba 2:4.3.11+dfsg-0ubuntu0.16.04.7 Ubuntu 14.04 LTS: samba 2:4.3.11+dfsg-0ubuntu0.14.04.8 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References [ more… ]

USN-3283-2: rtmpdump vulnerabilities Ubuntu Security Notice USN-3283-2 23rd May, 2017 rtmpdump vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 LTS Summary rtmpdump could be made to crash or run programs as your login if it processed a specially crafted stream. Software description rtmpdump – small dumper for media content streamed over the RTMP protocol Details Dave McDaniel discovered that rtmpdump incorrectly handled certainmalformed streams. If a user were tricked into processing a speciallycrafted stream, a remote attacker could cause rtmpdump to crash, resultingin a denial of service, or possibly execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 12.04 LTS: librtmp0 2.4~20110711.gitc28f1bab-1ubuntu0.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. [ more… ]