=========================================================================Ubuntu Security Notice USN-4004-2
June 04, 2019
db5.3 vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 ESM
Summary:
Berkeley DB could be made to expose sensitive information.
Software Description:
- db5.3: Berkeley DB Utilities
Details:
USN-4004-1 fixed a vulnerability in Berkeley DB. This update provides
the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that Berkeley DB incorrectly handled certain inputs.
An attacker could possibly use this issue to read sensitive
information.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.04 ESM:
db5.3-sql-util 5.3.28-3ubuntu3.1+esm1
db5.3-util 5.3.28-3ubuntu3.1+esm1
libdb5.3 5.3.28-3ubuntu3.1+esm1
libdb5.3-sql 5.3.28-3ubuntu3.1+esm1
libdb5.3-sql-dev 5.3.28-3ubuntu3.1+esm1
In general, a standard system update will make all the necessary
changes.
References:
https://ubuntu.com/security/notices/USN-4004-2
https://ubuntu.com/security/notices/USN-4004-1
CVE-2019-8457