지락문화예술공작단

USN-4322-1: GnuTLS vulnerability gnutls28 vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.10 Summary GnuTLS could expose sensitive information over the network. Software Description gnutls28 – GNU TLS library Details It was discovered that GnuTLS incorrectly handled randomness when performing DTLS negotiation. A remote attacker could possibly use this issue to obtain sensitive information, contrary to expectations. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 19.10 libgnutls30 – 3.6.9-5ubuntu1.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2020-11501 Source: USN-4322-1: GnuTLS vulnerability

USN-4321-1: HAProxy vulnerability haproxy vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.10 Ubuntu 18.04 LTS Summary HAProxy could be made to execute arbitrary code if it received a specially crafted HTTP/2 request. Software Description haproxy – fast and reliable load balancing reverse proxy Details Felix Wilhelm discovered that HAProxy incorrectly handled certain HTTP/2 requests. An attacker could possibly use this to execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 19.10 haproxy – 2.0.5-1ubuntu0.4 Ubuntu 18.04 LTS haproxy – 1.8.8-1ubuntu0.10 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2020-11100 Source: USN-4321-1: HAProxy vulnerability