The following updates has been released for Ubuntu Linux:
USN-3749-1: Spidermonkey vulnerabilities
USN-3750-1: Pango vulnerability
USN-3749-1: Spidermonkey vulnerabilities
USN-3750-1: Pango vulnerability
USN-3749-1: Spidermonkey vulnerabilities
==========================================================================
Ubuntu Security Notice USN-3749-1
August 22, 2018
mozjs52 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in Spidermonkey.
Software Description:
- mozjs52: SpiderMonkey JavaScript library
Details:
Multiple memory safety issues were fixed in Spidermonkey. An attacker
could potentially exploit these to cause a denial of service, or execute
arbitrary code.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 18.04 LTS:
libmozjs-52-0 52.9.1-0ubuntu0.18.04.1
After a standard system update you need to reboot your computer to make
all the necessary changes.
References:
https://usn.ubuntu.com/usn/usn-3749-1
CVE-2018-5188
Package Information:
https://launchpad.net/ubuntu/+source/mozjs52/52.9.1-0ubuntu0.18.04.1
USN-3750-1: Pango vulnerability
==========================================================================
Ubuntu Security Notice USN-3750-1
August 22, 2018
pango1.0 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 18.04 LTS
Summary:
Pango could be made to crash if it opened a specially crafted
file.
Software Description:
- pango1.0: Layout and rendering of internationalized text - gir
bindings
Details:
Jeffrey M. discovered that Pango incorrectly handled certain files.
An attacker could possibly use this issue to cause a denial of service.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 18.04 LTS:
gir1.2-pango-1.0 1.40.14-1ubuntu0.1
libpango-1.0-0 1.40.14-1ubuntu0.1
libpango1.0-0 1.40.14-1ubuntu0.1
After a standard system update you need to restart your session to make
all the necessary changes.
References:
https://usn.ubuntu.com/usn/usn-3750-1
CVE-2018-15120
Package Information:
https://launchpad.net/ubuntu/+source/pango1.0/1.40.14-1ubuntu0.1