The following updates has been released for Ubuntu Linux:
USN-3555-1: w3m vulnerabilities
USN-3555-2: w3m vulnerabilities
USN-3556-1: Dovecot vulnerability
USN-3556-2: Dovecot vulnerabilities
USN-3555-1: w3m vulnerabilities
USN-3555-2: w3m vulnerabilities
USN-3556-1: Dovecot vulnerability
USN-3556-2: Dovecot vulnerabilities
USN-3555-1: w3m vulnerabilities
==========================================================================
Ubuntu Security Notice USN-3555-1
February 01, 2018
w3m vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 17.10
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Several security issues were fixed in w3m.
Software Description:
- w3m: WWW browsable pager with excellent tables/frames support
Details:
It was discovered that w3m incorrectly handled certain inputs.
An attacker could possibly use this to cause a denial of service.
(CVE-2018-6196, CVE-2018-6197)
It was discovered that w3m incorrectly handled temporary files.
An attacker could possibly use this to overwrite arbitrary files.
(CVE-2018-6198)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 17.10:
w3m 0.5.3-34ubuntu0.1
Ubuntu 16.04 LTS:
w3m 0.5.3-26ubuntu0.2
Ubuntu 14.04 LTS:
w3m 0.5.3-15ubuntu0.2
In general, a standard system update will make all the necessary
changes.
References:
https://www.ubuntu.com/usn/usn-3555-1
CVE-2018-6196, CVE-2018-6197, CVE-2018-6198
Package Information:
https://launchpad.net/ubuntu/+source/w3m/0.5.3-34ubuntu0.1
https://launchpad.net/ubuntu/+source/w3m/0.5.3-26ubuntu0.2
https://launchpad.net/ubuntu/+source/w3m/0.5.3-15ubuntu0.2
USN-3555-2: w3m vulnerabilities
==========================================================================
Ubuntu Security Notice USN-3555-2
February 01, 2018
w3m vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 ESM
Summary:
Several security issues were fixed in w3m.
Software Description:
- w3m: WWW browsable pager with excellent tables/frames support
Details:
USN-3555-2 fixed vulnerabilities in w3m. This update
provides the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:
It was discovered that w3m incorrectly handled certain inputs.
An attacker could possibly use this to cause a denial of service.
(CVE-2018-6196, CVE-2018-6197)
It was discovered that w3m incorrectly handled temporary files.
An attacker could possibly use this to overwrite arbitrary files.
(CVE-2018-6198)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 ESM:
w3m 0.5.3-5ubuntu1.3
In general, a standard system update will make all the necessary
changes.
References:
https://www.ubuntu.com/usn/usn-3555-2
https://www.ubuntu.com/usn/usn-3555-1
CVE-2018-6196, CVE-2018-6197, CVE-2018-6198
USN-3556-1: Dovecot vulnerability
==========================================================================
Ubuntu Security Notice USN-3556-1
February 01, 2018
dovecot vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 17.10
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS
Summary:
Dovecot could be made to crash if it received specially crafted input.
Software Description:
- dovecot: IMAP and POP3 email server
Details:
It was discovered that Dovecot incorrectly handled certain
authentications. An attacker could possibly use this to cause a denial
of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 17.10:
dovecot-core 1:2.2.27-3ubuntu1.2
Ubuntu 16.04 LTS:
dovecot-core 1:2.2.22-1ubuntu2.6
Ubuntu 14.04 LTS:
dovecot-core 1:2.2.9-1ubuntu2.3
In general, a standard system update will make all the necessary
changes.
References:
https://www.ubuntu.com/usn/usn-3556-1
CVE-2017-15132
Package Information:
https://launchpad.net/ubuntu/+source/dovecot/1:2.2.27-3ubuntu1.2
https://launchpad.net/ubuntu/+source/dovecot/1:2.2.22-1ubuntu2.6
https://launchpad.net/ubuntu/+source/dovecot/1:2.2.9-1ubuntu2.3
USN-3556-2: Dovecot vulnerabilities
==========================================================================
Ubuntu Security Notice USN-3556-2
February 01, 2018
dovecot vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 12.04 ESM
Summary:
Several security issues were fixed in Dovecot.
Software Description:
- dovecot: IMAP and POP3 email server
Details:
USN-3556-1 fixed vulnerabilities in Dovecot. This update
provides the corresponding update for Ubuntu 12.04 ESM.
It was discovered that Dovecot incorrectly handled certain
authentications. An attacker could possibly use this to bypass
authentication and access sensitive information. (CVE-2013-6171)
Original advisory details:
It was discovered that Dovecot incorrectly handled certain
authentications.
An attacker could possibly use this to cause a denial of service.
(CVE-2017-15132)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 12.04 ESM:
dovecot-core 1:2.0.19-0ubuntu2.4
In general, a standard system update will make all the necessary
changes.
References:
https://www.ubuntu.com/usn/usn-3556-2
https://www.ubuntu.com/usn/usn-3556-1
CVE-2013-6171, CVE-2017-15132
