ubuntu-usn

USN-3909-1: libvirt vulnerability libvirt vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Summary libvirt could be made to crash under certain conditions. Software Description libvirt – Libvirt virtualization toolkit Details It was discovered that libvirt incorrectly handled waiting for certain agent events. An attacker inside a guest could possibly use this issue to cause libvirtd to stop responding, resulting in a denial of service. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10 libvirt-clients – 4.6.0-2ubuntu3.4 libvirt-daemon – 4.6.0-2ubuntu3.4 libvirt0 – 4.6.0-2ubuntu3.4 Ubuntu 18.04 LTS libvirt-clients – 4.0.0-1ubuntu8.8 libvirt-daemon – 4.0.0-1ubuntu8.8 libvirt0 – 4.0.0-1ubuntu8.8 Ubuntu 16.04 LTS libvirt-bin – 1.3.1-1ubuntu10.25 libvirt0 – 1.3.1-1ubuntu10.25 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. After a standard system update you need [ more… ]

USN-3908-2: Linux kernel (Trusty HWE) vulnerability linux-lts-trusty vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 ESM Summary The system could be made to run programs as an administrator. Software Description linux-lts-trusty – Linux hardware enablement kernel from Trusty for Precise ESM Details USN-3908-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 ESM. Jann Horn discovered a race condition in the fork() system call in the Linux kernel. A local attacker could use this to gain access to services that cache authorizations. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM linux-image-3.13.0-166-generic – 3.13.0-166.216~precise1 linux-image-3.13.0-166-generic-lpae – 3.13.0-166.216~precise1 linux-image-3.13.0-166-lowlatency – 3.13.0-166.216~precise1 linux-image-generic-lpae-lts-trusty – 3.13.0.166.156 [ more… ]

USN-3908-1: Linux kernel vulnerability linux vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 LTS Summary The system could be made to run programs as an administrator. Software Description linux – Linux kernel Details Jann Horn discovered a race condition in the fork() system call in the Linux kernel. A local attacker could use this to gain access to services that cache authorizations. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS linux-image-3.13.0-166-generic – 3.13.0-166.216 linux-image-3.13.0-166-generic-lpae – 3.13.0-166.216 linux-image-3.13.0-166-lowlatency – 3.13.0-166.216 linux-image-3.13.0-166-powerpc-e500 – 3.13.0-166.216 linux-image-3.13.0-166-powerpc-e500mc – 3.13.0-166.216 linux-image-3.13.0-166-powerpc-smp – 3.13.0-166.216 linux-image-3.13.0-166-powerpc64-emb – 3.13.0-166.216 linux-image-3.13.0-166-powerpc64-smp – 3.13.0-166.216 linux-image-generic – 3.13.0.166.177 linux-image-generic-lpae – 3.13.0.166.177 linux-image-lowlatency – 3.13.0.166.177 linux-image-powerpc-e500 – 3.13.0.166.177 linux-image-powerpc-e500mc – 3.13.0.166.177 linux-image-powerpc-smp – 3.13.0.166.177 linux-image-powerpc64-emb – 3.13.0.166.177 linux-image-powerpc64-smp – 3.13.0.166.177 linux-image-virtual – 3.13.0.166.177 To update [ more… ]

USN-3902-2: PHP vulnerabilities php5 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 12.04 ESM Summary Several security issues were fixed in PHP. Software Description php5 – HTML-embedded scripting language interpreter Details USN-3902-1 fixed a vulnerability in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: It was discovered that the PHP XML-RPC module incorrectly handled decoding XML data. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2019-9020, CVE-2019-9024) It was discovered that the PHP PHAR module incorrectly handled certain filenames. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2019-9021) It was discovered that PHP incorrectly handled mbstring regular expressions. A remote attacker could possibly use this issue to [ more… ]

USN-3907-1: WALinuxAgent vulnerability walinuxagent vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.10 Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 LTS Summary WALinuxAgent could be made to expose sensitive information. Software Description walinuxagent – Windows Azure Linux Agent Details It was discovered that WALinuxAgent created swap files with incorrect permissions. A local attacker could possibly use this issue to obtain sensitive information from the swap file. Update instructions The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10 walinuxagent – 2.2.32-0ubuntu1~18.10.2 Ubuntu 18.04 LTS walinuxagent – 2.2.32-0ubuntu1~18.04.2 Ubuntu 16.04 LTS walinuxagent – 2.2.32-0ubuntu1~16.04.2 Ubuntu 14.04 LTS walinuxagent – 2.2.32-0ubuntu1~14.04.2 To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades. In general, a standard system update will make all the necessary changes. References CVE-2019-0804 Source: USN-3907-1: WALinuxAgent vulnerability