SECURITY

USN-4959-1: GStreamer Base Plugins vulnerability It was discovered that GStreamer Base Plugins incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information. Source: USN-4959-1: GStreamer Base Plugins vulnerability

USN-4957-2: DjVuLibre vulnerabilities USN-4957-1 fixed several vulnerabilities in DjVuLibre. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to hang or crash, resulting in a denial of service, or possibly execute arbitrary code. Source: USN-4957-2: DjVuLibre vulnerabilities

USN-4958-1: Caribou vulnerability It was discovered that the Caribou onscreen keyboard could be made to crash when given certain input values. An attacker could use this to bypass screen-locking applications that support using Caribou as an input mechanism. Source: USN-4958-1: Caribou vulnerability

USN-4957-1: DjVuLibre vulnerabilities It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to hang or crash, resulting in a denial of service, or possibly execute arbitrary code. Source: USN-4957-1: DjVuLibre vulnerabilities

USN-4956-1: Eventlet vulnerability It was discovered that Eventlet incorrectly handled certain requests. An attacker could possibly use this issue to cause a denial of service. Source: USN-4956-1: Eventlet vulnerability