SECURITY

USN-3595-2: Samba vulnerability samba vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 ESM Summary Samba could be made to crash if it received specially crafted input. Software Description samba – SMB/CIFS file, print, and login server for Unix Details USN-3595-1 fix a vulnerability in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that Samba incorrectly validated inputs to the RPC spoolss service. An authenticated attacker could use this issue to cause the service to crash, resulting in a denial of service. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM samba – 2:3.6.25-0ubuntu0.12.04.15 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References [ more… ]

USN-3605-1: Sharutils vulnerability sharutils vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Sharutils could be made to execute arbitrary code if it opened a specially crafted file. Software Description sharutils – shar, unshar, uuencode, uudecode Details It was discovered that Sharutils incorrectly handled certain files. An attacker could possibly use this to execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 17.10 sharutils – 1:4.15.2-2ubuntu0.1 Ubuntu 16.04 LTS sharutils – 1:4.15.2-1ubuntu0.1 Ubuntu 14.04 LTS sharutils – 1:4.14-1ubuntu1.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2018-1000097 Source: USN-3605-1: Sharutils vulnerability

USN-3604-1: libvorbis vulnerability libvorbis vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary libvorbis could be made to crash or run programs as your login if it opened a specially crafted file. Software Description libvorbis – The Vorbis General Audio Compression Codec Details Richard Zhu discovered that libvorbis incorrectly handled certain sound files. An attacker could use this to cause libvorbis to crash, resulting in a denial or service, or possibly execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 17.10 libvorbis0a – 1.3.5-4ubuntu0.2 Ubuntu 16.04 LTS libvorbis0a – 1.3.5-3ubuntu0.2 Ubuntu 14.04 LTS libvorbis0a – 1.3.2-1.3ubuntu1.2 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system upgrade you need to restart any applications that [ more… ]