지락문화예술공작단

USN-3557-1: Squid vulnerabilities Ubuntu Security Notice USN-3557-1 5th February, 2018 squid3 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Several security issues were fixed in Squid. Software description squid3 – Web proxy cache server Details Mathias Fischer discovered that Squid incorrectly handled certain longstrings in headers. A malicious remote server could possibly cause Squid tocrash, resulting in a denial of service. This issue was only addressed inUbuntu 16.04 LTS. (CVE-2016-2569) William Lima discovered that Squid incorrectly handled XML parsing whenprocessing Edge Side Includes (ESI). A malicious remote server couldpossibly cause Squid to crash, resulting in a denial of service. This issuewas only addressed in Ubuntu 16.04 LTS. (CVE-2016-2570) Alex Rousskov discovered that Squid incorrectly handled response-parsingfailures. A malicious remote server could possibly cause Squid to crash,resulting in [ more… ]

USN-3558-1: systemd vulnerabilities Ubuntu Security Notice USN-3558-1 5th February, 2018 systemd vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Several security issues were fixed in systemd. Software description systemd – system and service manager Details Karim Hossen & Thomas Imbert and Nelson William Gamazo Sanchezindependently discovered that systemd-resolved incorrectly handled certainDNS responses. A remote attacker could possibly use this issue to causesystemd to temporarily stop responding, resulting in a denial of service.This issue only affected Ubuntu 16.04 LTS. (CVE-2017-15908) It was discovered that systemd incorrectly handled automounted volumes. Alocal attacker could possibly use this issue to cause applications to hang,resulting in a denial of service. (CVE-2018-1049) Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 16.04 LTS: systemd 229-4ubuntu21.1 Ubuntu 14.04 [ more… ]