Stay Secure with the Latest Linux Advisories

security advisorycriticalsoftware update

Ubuntu 18.10: USN-3857-1 Critical: PHP PEAR Remote Code Execution

XXX FILL ME IN: Summary for regular (non-admin) users XXX. =========================================================================Ubuntu Security Notice USN-3857-1 January 14, 2019 php-pear vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.10 - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: XXX FILL ME IN: Summary for regular (non-admin) users XXX XXX LOCAL TEMPLATES XXX PEAR could be made to run programs if it processed a specially crafted file. Software Description: - php-pear: PHP Extension and Application Repository Details: Fariskhi Vidyan discovered that PEAR Archive_Tar incorrectly handled certain archive paths. A remote attacker could possibly use this issue to execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: php-pear 1:1.10.5+submodules+notgz-1ubuntu1.18.10.1 Ubuntu 18.04 LTS: php-pear 1:1.10.5+submodules+notgz-1ubuntu1.18.04.1 Ubuntu 16.04 LTS: php-pear 1:1.10.1+submodules+notgz-6ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3857-1 CVE-2018-1000888 Package Information: https://launchpad.net/ubuntu/+source/php-pear/1:1.10.5+submodules+notgz-1ubuntu1.18.10.1 https://launchpad.net/ubuntu/+source/php-pear/1:1.10.5+submodules+notgz-1ubuntu1.18.04.1 https://launchpad.net/ubuntu/+source/php-pear/1:1.10.1+submodules+notgz-6ubuntu0.1 . Ubuntu Security Notice USN-3858-1 outlines how to mitigate risks from a php-pear vulnerability affecting multiple Ubuntu versions, offering update guidance and precautions. php-pear Vulnerability, Ubuntu Security Notice, Remote Code Issue, System Update Instructions. . Severity: Critical. LinuxSecurity.com Team

Jan 14, 2019 •Critical Ubuntu