Sign up to save your podcasts
Or
Share Episode 35
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Episode 35
Overview
We look at vulnerabilities and updates for Exim, the Linux kernel, Berkeley DB, Qt and more, plus Joe and Alex discuss some recent malware campaigns including Hiddenwasp, and we cover some open positions too.
This week in Ubuntu Security Updates
34 unique CVEs addressed
[USN-4002-1] Doxygen vulnerability
[USN-4003-1] Qt vulnerabilities
/ sensible width or height parameters
document
[USN-4004-1, USN-4004-2] Berkeley DB vulnerability
out-of-bounds read when handling invalid rtree tables
[USN-4005-1] Linux kernel vulnerabilities
during network namespace cleanup that could lead to a UAF.
exploited by a local attacker
[USN-4006-1, USN-4006-2] Linux kernel vulnerability
kernel users, and only affects setuid a.out binaries (none in archive)
to be bypassed, weakening system protections to then more easily exploit
some other existing vulnerablity in the given setuid a.out binary
relic of the past
[USN-4007-1, USN-4007-2] Linux kernel vulnerability
[USN-4008-1, USN-4008-3] Linux kernel vulnerabilities
binaries due to a similar race-condition
[USN-4008-2] AppArmor update
the fix for CVE-2019-11190 (ASLR bypass on setuid executables).
the resulting binary, so ensure all current profiles are updated to add
this permission on the appropriate rules
[USN-4009-1, USN-4009-2] PHP vulnerabilities
encoded data
EXIF data -> crash, DoS or possible information disclosure form other
memory
[USN-4010-1] Exim vulnerability
consequence, we released our update once the details were publicly known
address which would be evaluated by the exim process (and hence as
root) - but would require the attacker to keep a connection open to the
server for 7 days by transmitting 1 byte every few minutes.
[USN-3957-3] MariaDB vulnerabilities
MariaDB (community maintained fork of MySQL) - Episode 30
[USN-4011-1, USN-4011-2] Jinja2 vulnerabilities
Python’s internal string format method (by referencing the globals
array)
missed the similar str.format_map method - so both fixed in this update
[USN-3991-2] Firefox regression
could potentially think you had downgraded the browser when it was in
fact upgraded and therefore think the old profile data was invalid
Goings on in Ubuntu Security Community
Alex and Joe talk about recent malware campaigns
Hiring
Robotics Security Engineer
Security Certifications Engineer
Get in contact
View all episodes
By Ubuntu Security Team
4.8
1010 ratings
Overview
We look at vulnerabilities and updates for Exim, the Linux kernel, Berkeley DB, Qt and more, plus Joe and Alex discuss some recent malware campaigns including Hiddenwasp, and we cover some open positions too.
This week in Ubuntu Security Updates
34 unique CVEs addressed
[USN-4002-1] Doxygen vulnerability
[USN-4003-1] Qt vulnerabilities
/ sensible width or height parameters
document
[USN-4004-1, USN-4004-2] Berkeley DB vulnerability
out-of-bounds read when handling invalid rtree tables
[USN-4005-1] Linux kernel vulnerabilities
during network namespace cleanup that could lead to a UAF.
exploited by a local attacker
[USN-4006-1, USN-4006-2] Linux kernel vulnerability
kernel users, and only affects setuid a.out binaries (none in archive)
to be bypassed, weakening system protections to then more easily exploit
some other existing vulnerablity in the given setuid a.out binary
relic of the past
[USN-4007-1, USN-4007-2] Linux kernel vulnerability
[USN-4008-1, USN-4008-3] Linux kernel vulnerabilities
binaries due to a similar race-condition
[USN-4008-2] AppArmor update
the fix for CVE-2019-11190 (ASLR bypass on setuid executables).
the resulting binary, so ensure all current profiles are updated to add
this permission on the appropriate rules
[USN-4009-1, USN-4009-2] PHP vulnerabilities
encoded data
EXIF data -> crash, DoS or possible information disclosure form other
memory
[USN-4010-1] Exim vulnerability
consequence, we released our update once the details were publicly known
address which would be evaluated by the exim process (and hence as
root) - but would require the attacker to keep a connection open to the
server for 7 days by transmitting 1 byte every few minutes.
[USN-3957-3] MariaDB vulnerabilities
MariaDB (community maintained fork of MySQL) - Episode 30
[USN-4011-1, USN-4011-2] Jinja2 vulnerabilities
Python’s internal string format method (by referencing the globals
array)
missed the similar str.format_map method - so both fixed in this update
[USN-3991-2] Firefox regression
could potentially think you had downgraded the browser when it was in
fact upgraded and therefore think the old profile data was invalid
Goings on in Ubuntu Security Community
Alex and Joe talk about recent malware campaigns
Hiring
Robotics Security Engineer
Security Certifications Engineer
Get in contact