ubuntu-usn

USN-4162-1: Linux kernel vulnerabilities linux, linux-aws, linux-aws-hwe, linux-azure, linux-gcp, linux-gke-4.15, linux-hwe, linux-kvm, linux-oem, linux-oracle, linux-raspi2, linux-snapdragon vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary Several security issues were fixed in the Linux kernel. Software Description linux – Linux kernel linux-aws – Linux kernel for Amazon Web Services (AWS) systems linux-gke-4.15 – Linux kernel for Google Container Engine (GKE) systems linux-kvm – Linux kernel for cloud environments linux-oem – Linux kernel for OEM processors linux-oracle – Linux kernel for Oracle Cloud systems linux-raspi2 – Linux kernel for Raspberry Pi 2 linux-snapdragon – Linux kernel for Snapdragon processors linux-aws-hwe – Linux kernel for Amazon Web Services (AWS-HWE) systems linux-azure – Linux kernel for Microsoft Azure Cloud systems linux-gcp – Linux kernel for Google Cloud Platform (GCP) systems linux-hwe – Linux hardware [ more… ]

USN-4157-2: Linux kernel (HWE) vulnerabilities linux-hwe, linux-azure, linux-gcp, linux-gke-5.0 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.04 LTS Summary Several security issues were fixed in the Linux kernel. Software Description linux-azure – Linux kernel for Microsoft Azure Cloud systems linux-gcp – Linux kernel for Google Cloud Platform (GCP) systems linux-gke-5.0 – Linux kernel for Google Container Engine (GKE) systems linux-hwe – Linux hardware enablement (HWE) kernel Details USN-4157-1 fixed vulnerabilities in the Linux kernel for Ubuntu 19.04. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 19.04 for Ubuntu 18.04 LTS. Wen Huang discovered that the Marvell Wi-Fi device driver in the Linux kernel did not properly perform bounds checking, leading to a heap overflow. A local attacker could use this to cause a denial of service (system [ more… ]

USN-4161-1: Linux kernel vulnerability linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-raspi2 vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.10 Summary The system could be made to crash under certain conditions. Software Description linux – Linux kernel linux-aws – Linux kernel for Amazon Web Services (AWS) systems linux-azure – Linux kernel for Microsoft Azure Cloud systems linux-gcp – Linux kernel for Google Cloud Platform (GCP) systems linux-kvm – Linux kernel for cloud environments linux-raspi2 – Linux kernel for Raspberry Pi 2 Details It was discovered that the IPv6 routing implementation in the Linux kernel contained a reference counting error leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. Update instructions The problem can be corrected by updating your system to the [ more… ]

USN-4160-1: UW IMAP vulnerability uw-imap vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary UW IMAP could be made to execute programs if it received specially crafted input. Software Description uw-imap – c-client library for mail protocols – library files Details It was discovered that UW IMAP incorrectly handled inputs. A remote attacker could possibly use this issue to execute arbitrary OS commands. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 19.04 libc-client2007e – 8:2007f~dfsg-5ubuntu0.19.04.2 mlock – 8:2007f~dfsg-5ubuntu0.19.04.2 uw-mailutils – 8:2007f~dfsg-5ubuntu0.19.04.2 Ubuntu 18.04 LTS libc-client2007e – 8:2007f~dfsg-5ubuntu0.18.04.2 mlock – 8:2007f~dfsg-5ubuntu0.18.04.2 uw-mailutils – 8:2007f~dfsg-5ubuntu0.18.04.2 Ubuntu 16.04 LTS libc-client2007e – 8:2007f~dfsg-4+deb8u1build0.16.04.1 mlock – 8:2007f~dfsg-4+deb8u1build0.16.04.1 uw-mailutils – 8:2007f~dfsg-4+deb8u1build0.16.04.1 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system [ more… ]

USN-4159-1: Exiv2 vulnerability exiv2 vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 19.10 Ubuntu 19.04 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary Exiv2 could be made to crash if it received a specially crafted file. Software Description exiv2 – EXIF/IPTC/XMP metadata manipulation tool Details It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 19.10 exiv2 – 0.25-4ubuntu2.1 libexiv2-14 – 0.25-4ubuntu2.1 Ubuntu 19.04 exiv2 – 0.25-4ubuntu1.2 libexiv2-14 – 0.25-4ubuntu1.2 Ubuntu 18.04 LTS exiv2 – 0.25-3.1ubuntu0.18.04.4 libexiv2-14 – 0.25-3.1ubuntu0.18.04.4 Ubuntu 16.04 LTS exiv2 – 0.25-2.1ubuntu16.04.5 libexiv2-14 – 0.25-2.1ubuntu16.04.5 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the [ more… ]