USN-5331-2 tcpdump vulnerabilities

USN-5331-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that tcpdump incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial o...

Out-of-bounds Write in zlib affects Nokogiri

Summary Nokogiri v1.13.4 updates the vendored zlib from 1.2.11 to 1.2.12, which addresses CVE-2018-25032. That CVE is scored as CVSS 7.4 "High" on the NVD record as of 2022-04-05. Please note that this advisory only applies to the CRuby implementation of Nokogiri = v1.13.4. Impact CVE-2018-25032 ...

Ubuntu 18.04 LTS / 20.04 LTS : tcpdump vulnerabilities (USN-5331-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5331-2 advisory. USN-5331-1 fixed several vulnerabilities in tcpdump. This update provides the corresponding update for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS...

CVE-2018-16880 affecting package kernel for versions less than 5.10.78.1-1

CVE-2018-16880 affecting package kernel for versions less than 5.10.78.1-1. A patched version of the package is available...

CVE-2018-1000026 affecting package kernel for versions less than 5.10.78.1-1

CVE-2018-1000026 affecting package kernel for versions less than 5.10.78.1-1. A patched version of the package is available...

CVE-2018-14348 affecting package libcgroup for versions less than 0.41-23

CVE-2018-14348 affecting package libcgroup for versions less than 0.41-23. A patched version of the package is available...

CVE-2018-20574 affecting package yaml-cpp for versions less than 0.6.2-6

CVE-2018-20574 affecting package yaml-cpp for versions less than 0.6.2-6. A patched version of the package is available...

CVE-2018-10906 affecting package fuse for versions less than 2.9.7-10

CVE-2018-10906 affecting package fuse for versions less than 2.9.7-10. A patched version of the package is available...

CVE-2018-16301 affecting package tcpdump for versions less than 4.99.1-1

CVE-2018-16301 affecting package tcpdump for versions less than 4.99.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2018-5996 affecting package p7zip for versions less than 16.02-22

CVE-2018-5996 affecting package p7zip for versions less than 16.02-22. A patched version of the package is available...

CVE-2018-18384 affecting package unzip for versions less than 6.0-19

CVE-2018-18384 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...

CVE-2018-1000035 affecting package unzip for versions less than 6.0-19

CVE-2018-1000035 affecting package unzip for versions less than 6.0-19. A patched version of the package is available...

CVE-2018-10689 affecting package blktrace for versions less than 1.2.0-6

CVE-2018-10689 affecting package blktrace for versions less than 1.2.0-6. A patched version of the package is available...

CVE-2018-13420 affecting package gperftools for versions less than 2.7-4

CVE-2018-13420 affecting package gperftools for versions less than 2.7-4. A patched version of the package is available...

CVE-2018-6951 affecting package patch for versions less than 2.7.6-7

CVE-2018-6951 affecting package patch for versions less than 2.7.6-7. A patched version of the package is available...

CVE-2018-1000156 affecting package patch for versions less than 2.7.6-7

CVE-2018-1000156 affecting package patch for versions less than 2.7.6-7. A patched version of the package is available...

CVE-2018-20969 affecting package patch for versions less than 2.7.6-7

CVE-2018-20969 affecting package patch for versions less than 2.7.6-7. A patched version of the package is available...

CVE-2018-6952 affecting package patch for versions less than 2.7.6-7

CVE-2018-6952 affecting package patch for versions less than 2.7.6-7. A patched version of the package is available...

CVE-2018-13410 affecting package zip for versions less than 3.0-5

CVE-2018-13410 affecting package zip for versions less than 3.0-5. A patched version of the package is available...

Security Bulletin: IBM WebSphere Application Server Liberty for IBM i is vulnerable to spoofing and clickjacking attacks due to swagger-ui (CVE-2018-25031, CVE-2021-46708)

Summary IBM WebSphere Application Server Liberty for IBM i contains swagger-ui which is vulnerable to spoofing and clickjacking attacks as described in the vulnerability details section. IBM WebSphere Application Server Liberty for IBM i has addressed the vulnerabilities with a fix that upgrades...