지락문화예술공작단

USN-3352-1: nginx vulnerability Ubuntu Security Notice USN-3352-1 13th July, 2017 nginx vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary nginx could be made to expose sensitive information over the network. Software description nginx – small, powerful, scalable web/proxy server Details It was discovered that an integer overflow existed in the range filterfeature of nginx. A remote attacker could use this to exposesensitive information. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: nginx-extras 1.10.3-1ubuntu3.1 nginx-full 1.10.3-1ubuntu3.1 nginx-common 1.10.3-1ubuntu3.1 nginx-light 1.10.3-1ubuntu3.1 nginx-core 1.10.3-1ubuntu3.1 Ubuntu 16.10: nginx-extras 1.10.1-0ubuntu1.3 nginx-full 1.10.1-0ubuntu1.3 nginx-common 1.10.1-0ubuntu1.3 nginx-light 1.10.1-0ubuntu1.3 nginx-core 1.10.1-0ubuntu1.3 Ubuntu 16.04 LTS: nginx-extras 1.10.3-0ubuntu0.16.04.2 nginx-full 1.10.3-0ubuntu0.16.04.2 nginx-common 1.10.3-0ubuntu0.16.04.2 nginx-light 1.10.3-0ubuntu0.16.04.2 nginx-core 1.10.3-0ubuntu0.16.04.2 Ubuntu 14.04 LTS: nginx-extras 1.4.6-1ubuntu3.8 nginx-full 1.4.6-1ubuntu3.8 nginx-common 1.4.6-1ubuntu3.8 [ more… ]

USN-3351-1: Evince vulnerability Ubuntu Security Notice USN-3351-1 13th July, 2017 evince vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Evince could be made run programs as your login if it opened a specially crafted file. Software description evince – Document viewer Details Felix Wilhelm discovered that Evince did not safely invoke tar whenhandling tar comic book (cbt) files. An attacker could use this toconstruct a malicious cbt comic book format file that, when openedin Evince, executes arbitrary code. Please note that this updatedisables support for cbt files in Evince. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: evince 3.24.0-0ubuntu1.1 evince-common 3.24.0-0ubuntu1.1 Ubuntu 16.10: evince 3.22.0-0ubuntu1.1 evince-common 3.22.0-0ubuntu1.1 Ubuntu 16.04 LTS: evince 3.18.2-1ubuntu4.1 evince-common 3.18.2-1ubuntu4.1 Ubuntu [ more… ]