Sign up to save your podcasts
Or
Share Episode 97
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Episode 97
Overview
This week we look at vulnerabilities in MoinMoin, OpenLDAP, Kerberos,
Raptor (including a discussion of CVE workflows and the oss-security
mailing list) and more, whilst in community news we talk about the upcoming
AppArmor webinar, migration of Ubuntu CVE information to ubuntu.com and
reverse engineering of malware by the Canonical Sustaining Engineering
team.
This week in Ubuntu Security Updates
45 unique CVEs addressed
[USN-4629-1] MoinMoin vulnerabilities [00:50]
cached - a subsequent crafted request can exploit a vulnerability in the
cache handling code to achieve directory traversal and a subsequent RCE
[USN-4630-1] Raptor vulnerability [01:40]
discussions on oss-security mailing list
the constant stream of CVEs etc
items - if a CVE doesn’t exist, the vulnerability won’t get patched
[USN-4622-2] OpenLDAP vulnerability [03:43]
disclosure is a security issue (what about RCE?)
[USN-4628-2] Intel Microcode regression [04:29]
had updates out within 24h of initial release
20201118
[USN-4171-6] Apport regression [05:40]
mishandling of dropping permissions when reading the user’s config file
(note these don’t normally exist unless you manually create one so in
general is not an issue) - this fixes that and introduces some more
hardening measures to try and ensure permissions are always dropped
correctly and this is more robust overall
[USN-4631-1] libmaxminddb vulnerability [06:50]
[USN-4632-1] SLiRP vulnerabilities [07:03]
snprintf() - the other due to mishandling of pointer arithmetic -> DoS,
RCE?
[USN-4607-2] OpenJDK regressions
[USN-4633-1] PostgreSQL vulnerabilities [07:42]
1 DoS via dropping of connection
[USN-4634-1] OpenLDAP vulnerabilities [08:03]
triggered by a remote attacker
[USN-4635-1] Kerberos vulnerability [08:29]
specify an indefinite length - so this was parsed recursively but since
it never placed any limit on this if the nesting was deep enough, could
overrun the stack an trigger an abort.
[USN-4636-1] LibVNCServer, Vino vulnerability [09:05]
[USN-4637-1] Firefox vulnerabilities [09:18]
Goings on in Ubuntu Security Community
Migration of Ubuntu CVE information from people.canonical.com to ubuntu.com [09:37]
design and prototype display of CVEs in a more human friendly format (for
machine friendly we have OVAL etc)
details - but focusses on the most salient ones rather than the more
engineering style of the old ones
Securing Linux Machines with AppArmor Webinar [11:18]
potential damage caused by a breach
least privilege is recommended
to generate a profile to confine an application with `aa-genprof`
Analysis of the dovecat and hy4 Linux Malware [12:36]
manually forward-ported the grsecurity patch set - topic of his LCA 2019
talk Maintaining the Unmaintainable: Picking up the Baton of a Secure
Kernel Patchset
some suspicious processes, and then reverse engineering those to
demonstrate they were malware, and explaining what the malware did, how
it operated etc - great teardown
Get in contact
View all episodes
By Ubuntu Security Team
4.8
1010 ratings
Overview
This week we look at vulnerabilities in MoinMoin, OpenLDAP, Kerberos,
Raptor (including a discussion of CVE workflows and the oss-security
mailing list) and more, whilst in community news we talk about the upcoming
AppArmor webinar, migration of Ubuntu CVE information to ubuntu.com and
reverse engineering of malware by the Canonical Sustaining Engineering
team.
This week in Ubuntu Security Updates
45 unique CVEs addressed
[USN-4629-1] MoinMoin vulnerabilities [00:50]
cached - a subsequent crafted request can exploit a vulnerability in the
cache handling code to achieve directory traversal and a subsequent RCE
[USN-4630-1] Raptor vulnerability [01:40]
discussions on oss-security mailing list
the constant stream of CVEs etc
items - if a CVE doesn’t exist, the vulnerability won’t get patched
[USN-4622-2] OpenLDAP vulnerability [03:43]
disclosure is a security issue (what about RCE?)
[USN-4628-2] Intel Microcode regression [04:29]
had updates out within 24h of initial release
20201118
[USN-4171-6] Apport regression [05:40]
mishandling of dropping permissions when reading the user’s config file
(note these don’t normally exist unless you manually create one so in
general is not an issue) - this fixes that and introduces some more
hardening measures to try and ensure permissions are always dropped
correctly and this is more robust overall
[USN-4631-1] libmaxminddb vulnerability [06:50]
[USN-4632-1] SLiRP vulnerabilities [07:03]
snprintf() - the other due to mishandling of pointer arithmetic -> DoS,
RCE?
[USN-4607-2] OpenJDK regressions
[USN-4633-1] PostgreSQL vulnerabilities [07:42]
1 DoS via dropping of connection
[USN-4634-1] OpenLDAP vulnerabilities [08:03]
triggered by a remote attacker
[USN-4635-1] Kerberos vulnerability [08:29]
specify an indefinite length - so this was parsed recursively but since
it never placed any limit on this if the nesting was deep enough, could
overrun the stack an trigger an abort.
[USN-4636-1] LibVNCServer, Vino vulnerability [09:05]
[USN-4637-1] Firefox vulnerabilities [09:18]
Goings on in Ubuntu Security Community
Migration of Ubuntu CVE information from people.canonical.com to ubuntu.com [09:37]
design and prototype display of CVEs in a more human friendly format (for
machine friendly we have OVAL etc)
details - but focusses on the most salient ones rather than the more
engineering style of the old ones
Securing Linux Machines with AppArmor Webinar [11:18]
potential damage caused by a breach
least privilege is recommended
to generate a profile to confine an application with `aa-genprof`
Analysis of the dovecat and hy4 Linux Malware [12:36]
manually forward-ported the grsecurity patch set - topic of his LCA 2019
talk Maintaining the Unmaintainable: Picking up the Baton of a Secure
Kernel Patchset
some suspicious processes, and then reverse engineering those to
demonstrate they were malware, and explaining what the malware did, how
it operated etc - great teardown
Get in contact