지락문화예술공작단

USN-4199-1: libvpx vulnerabilities libvpx vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary Several security issues were fixed in libvpx. Software Description libvpx – VP8 and VP9 video codec Details It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of service, or possibly execute arbitrary code. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04 libvpx5 – 1.7.0-3ubuntu0.19.04.1 Ubuntu 18.04 LTS libvpx5 – 1.7.0-3ubuntu0.18.04.1 Ubuntu 16.04 LTS libvpx3 – 1.5.0-2ubuntu1.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2017-13194 CVE-2019-2126 CVE-2019-9232 CVE-2019-9325 [ more… ]

USN-4189-2: DPDK regression dpdk regression A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.10 Ubuntu 19.04 Ubuntu 18.04 LTS Summary USN-4189-1 introduced a regression in DPDK. Software Description dpdk – set of libraries for fast packet processing Details USN-4189-1 fixed a vulnerability in DPDK. The new version introduced a regression in certain environments. This update fixes the problem. Original advisory details: Jason Wang discovered that DPDK incorrectly handled certain messages. An attacker in a malicious container could possibly use this issue to cause DPDK to leak resources, resulting in a denial of service. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 19.10 dpdk – 18.11.5-0ubuntu0.19.10.1 Ubuntu 19.04 dpdk – 18.11.5-0ubuntu0.19.04.1 Ubuntu 18.04 LTS dpdk – 17.11.9-0ubuntu18.04.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. This update [ more… ]