Subversion could be made to crash if it received a specially crafted input.. =========================================================================Ubuntu Security Notice USN-3869-1 January 24, 2019 subversion vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.10 Summary: Subversion could be made to crash if it received a specially crafted input. Software Description: - subversion: Advanced version control system Details: Ivan Zhakov discovered that Subversion incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.10: libapache2-mod-svn 1.10.0-2ubuntu2.1 libsvn1 1.10.0-2ubuntu2.1 subversion 1.10.0-2ubuntu2.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-3869-1 CVE-2018-11803 Package Information: https://launchpad.net/ubuntu/+source/subversion/1.10.0-2ubuntu2.1 . Security flaw in Subversion on Ubuntu impacts 18.10 version, can lead to system crash via specially designed input, demands immediate action.. Subversion Security Update, Ubuntu Denial of Service, Input Handling Issue, Ubuntu Vulnerability Advisory. . Severity: Critical. LinuxSecurity.com Team
Rsyslog could be made to crash if it received specially crafted input.. =========================================================================Ubuntu Security Notice USN-2381-1 October 09, 2014 rsyslog vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS - Ubuntu 12.04 LTS - Ubuntu 10.04 LTS Summary: Rsyslog could be made to crash if it received specially crafted input. Software Description: - rsyslog: Enhanced syslogd Details: It was discovered that Rsyslog incorrectly handled invalid PRI values. An attacker could use this issue to send malformed messages to the Rsyslog server and cause it to stop responding, resulting in a denial of service and possibly message loss. (CVE-2014-3634, CVE-2014-3683) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS: rsyslog 7.4.4-1ubuntu2.3 Ubuntu 12.04 LTS: rsyslog 5.8.6-1ubuntu8.9 Ubuntu 10.04 LTS: rsyslog 4.2.0-2ubuntu8.3 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2381-1 CVE-2014-3634, CVE-2014-3683 Package Information: https://launchpad.net/ubuntu/+source/rsyslog/7.4.4-1ubuntu2.3 https://launchpad.net/ubuntu/+source/rsyslog/5.8.6-1ubuntu8.9 https://launchpad.net/ubuntu/+source/rsyslog/4.2.0-2ubuntu8.3 . Security issues related to Rsyslog were remedied in Ubuntu Security Notice USN-2381-1, which mitigates failures resulting from malformed data inputs.. Rsyslog Vulnerabilities, DoS Attack, Ubuntu Security Notice. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.