Ubuntu 6589 Published by

The following updates has been released for Ubuntu Linux:

USN-3749-1: Spidermonkey vulnerabilities
USN-3750-1: Pango vulnerability



USN-3749-1: Spidermonkey vulnerabilities


==========================================================================
Ubuntu Security Notice USN-3749-1
August 22, 2018

mozjs52 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS

Summary:

Several security issues were fixed in Spidermonkey.

Software Description:
- mozjs52: SpiderMonkey JavaScript library

Details:

Multiple memory safety issues were fixed in Spidermonkey. An attacker
could potentially exploit these to cause a denial of service, or execute
arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  libmozjs-52-0  52.9.1-0ubuntu0.18.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://usn.ubuntu.com/usn/usn-3749-1
  CVE-2018-5188

Package Information:
  https://launchpad.net/ubuntu/+source/mozjs52/52.9.1-0ubuntu0.18.04.1

USN-3750-1: Pango vulnerability


==========================================================================
Ubuntu Security Notice USN-3750-1
August 22, 2018

pango1.0 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS

Summary:

Pango could be made to crash if it opened a specially crafted
file.

Software Description:
- pango1.0: Layout and rendering of internationalized text - gir
bindings

Details:

Jeffrey M. discovered that Pango incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS:
  gir1.2-pango-1.0 1.40.14-1ubuntu0.1
  libpango-1.0-0 1.40.14-1ubuntu0.1
  libpango1.0-0 1.40.14-1ubuntu0.1

After a standard system update you need to restart your session to make
all the necessary changes.

References:
  https://usn.ubuntu.com/usn/usn-3750-1
  CVE-2018-15120

Package Information:
  https://launchpad.net/ubuntu/+source/pango1.0/1.40.14-1ubuntu0.1