지락문화예술공작단

USN-3336-1: NSS vulnerability Ubuntu Security Notice USN-3336-1 21st June, 2017 nss vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary NSS could be made to crash if it received specially crafted network traffic. Software description nss – Network Security Service library Details It was discovered that NSS incorrectly handled certain empty SSLv2messages. A remote attacker could possibly use this issue to cause NSS tocrash, resulting in a denial of service. Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 17.04: libnss3 2:3.28.4-0ubuntu0.17.04.2 Ubuntu 16.10: libnss3 2:3.28.4-0ubuntu0.16.10.2 Ubuntu 16.04 LTS: libnss3 2:3.28.4-0ubuntu0.16.04.2 Ubuntu 14.04 LTS: libnss3 2:3.28.4-0ubuntu0.14.04.2 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system update you need to restart any applicationsthat use NSS, [ more… ]

USN-3337-1: Valgrind vulnerabilities Ubuntu Security Notice USN-3337-1 21st June, 2017 valgrind vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Ubuntu 16.10 Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary Valgrind could be made to crash or run programs if it opened a specially crafted file. Software description valgrind – instrumentation framework for building dynamic analysis tools Details It was discovered that Valgrind incorectly handled certain stringoperations. If a user or automated system were tricked into processing aspecially crafted binary, a remote attacker could possibly executearbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04LTS and Ubuntu 16.10. (CVE-2016-2226) It was discovered that Valgrind incorrectly handled parsing certainbinaries. If a user or automated system were tricked into processing aspecially crafted binary, a remote attacker could use this issue to causeValgrind to crash, resulting in a [ more… ]