Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [vulnerability]

The tag has no usage guidance.

0
votes
0answers
14 views

check if an installed package is vulnerable to a given CVE number

Is there an "automatic/machine" way (meaning without manually checking in https://people.canonical.com/~ubuntu-security/cve/) to check if an installed package (or given the installed package version) ...
0
votes
1answer
271 views

When Thunderbird Vulnerability Updates will be available for Version 52.9.1 in Ubuntu 16.04

I have Thunderbird version 52.9.1 (64-bit) installed in Ubuntu 16.04.4 LTS. As Thunderbird version 52.9.1 has multiple vulnerabilities (CVE 2018 5156, CVE 2018 5187, CVE 2018 12371, CVE 2018 12361, ...
0
votes
0answers
41 views

Available Kernel Updates

I've always been kinda picky and skeptical about kernel updates from one version to another(like 4.15.0.x to 4.15.0.y). I have the following updates available in my software updater... I usually don'...
6
votes
1answer
1k views

Slow recovering from lock screen Ubuntu 18.04

I addition to being aesthetically pleasing, I am quite pleased with some of the new features in 18.04. However, what I am not quite impressed with is how slow it is recovering from the lock screen. ...
0
votes
1answer
375 views

Meltdown and Spectre protection for Ubuntu 14.04.5 (Kernel 4.4)?

Does an installation running on 14.04.5 (Kernel 4.4) need to be patched according to USN-3540-2? I received contradictory informations. Some saying that as it is a LTS version, it already includes ...
0
votes
0answers
26 views

WHat's the exact bug fix kernel version? [duplicate]

As of now we have UBUNTU 14.04.3 LTS, UBUNTU 16.04 LTS installed on VMWARE Machine and Physical Server. Also we are using Ubuntu 14.04.5 LTS and Ubuntu 16.04 LTS Cloud images. Could you please let ...
1
vote
0answers
69 views

Have I opened myself to a hack from posting terminal output here?

So, yesterday I posed a question where I supplied two dmesg | tail outputs, plus uname -a and ls -a /boot. It disclosed my system time and my username, (plus my VPN provider and other software). I ...
0
votes
0answers
166 views

Temporary way to mitigate Meltdown before official fix? [duplicate]

As I understand it this vulnerability is about browser behavior, would turning off javascript be a temporary mitigation against attack?
0
votes
1answer
37 views

Patching vulnerabilities in Ubuntu LTS releases

Ubuntu LTS releases have an EOL date of 5 years after release. It does not seem packages are upgraded to newer versions. Does this mean that packages are patched for CVEs for 5 years? Where are ...
1
vote
0answers
205 views

Security of Ubuntu, it's Flavors, and Solus OS [closed]

I recently moved on to the Ubuntu family since it's open source, linux based and faster. But then I thought to myself: Are open source OS's like Ubuntu, it's flavors, and Solus OS safe to use? ...
0
votes
1answer
111 views

How to make a patch for C Library

For my class project, I am trying to fix a ghost vulnerability on Ubuntu 12.04 manually. I completely understand the errors inside the /nss/digits_dots.c and I fixed them. My problem is I don't know ...
0
votes
0answers
40 views

Do I need update imagemagick for CVE-2016-8708? [duplicate]

My IM version is ImageMagick 6.7.7-10 2016-11-29. root@ubuntu:~# convert -version Version: ImageMagick 6.7.7-10 2016-11-29 Q16 http://www.imagemagick.org Copyright: Copyright (C) 1999-2012 ...
4
votes
1answer
774 views

Test whether Ubuntu is vulnerable to (CVE-2016-4484)

I've been reading this. Apparently I would gain root access if I hold down enter (somewhere) for 70 seconds. I tried it on a password prompt but it gave me like 3 attempts and stopped. I tried it on a ...
10
votes
2answers
3k views

What is the 'Badlock Bug'?

A user on the Ask Ubuntu General Room posted a link to Badlock. After some googling around, all I can find is that it is a mysterious security bug, that uses the same website template as Heartbleed. ...
3
votes
1answer
127 views

is the current Adobe Flash 'ransomware vulnerability' affecting Ubuntu users?

Currently there is an important release from Adobe telling users to update their Flash after learning of certain vulnerabilities where users computer are infected with ransomware. One of the many news ...
3
votes
1answer
187 views

Do malicious web sites ever exploit vulnerabilities in Linux clients? [closed]

Do malicious web sites ever exploit vulnerabilities in Linux clients? Are there any documented instances of this happening in the wild? I am talking about actually taking over the client's machine ...
0
votes
1answer
109 views

A buffer-overflow vulnerability in the GNU C Library

I came across this article by PC world informing about some serious vulnerability discovered by Google and Redhat a couple of days before, i am using Ubuntu latest version, and it's up-to-date, do i ...
4
votes
3answers
5k views

Which Ubuntu releases have fixes for CVE-2015-7547 (“Extremely Severe Bug” with libc getaddrinfo())? [duplicate]

Ars Technica posted an article describing the getaddrinfo() bug and how it is widespread in the Linux world. The vulnerability was introduced in 2008 in GNU C Library, a collection of open source ...
5
votes
2answers
3k views

Is Linux getting less or more secure? [closed]

The famous so-called virus-and-hacker-free Mac is a thing of the past: As it gets more popular it gets more vulnerabilities. Will Linux be the same at some point in time? Is it getting less of more ...
2
votes
1answer
2k views

What's the best way to avoid getting hacked by anyone, e.g. governments or other criminals? [closed]

I don't know if you've all heard/read about the software from companies such as "hacking team", see e.g. the remote control system: https://wikileaks.org/spyfiles/files/0/31_200810-ISS-PRG-...
1
vote
1answer
211 views

Server tries to connect to other servers

I have an Ubuntu 14.04 server and I have discovered in the /var/auth.log that it tries to connect to other servers. This is the log file: Aug 31 08:04:49 server_name sshd[16316]: error: connect_to ...
0
votes
1answer
150 views

Is there a resource which lists Ubuntu Security Notices?

Every week, I check the Ubuntu Security Notices page, to see what's going on in the world of vulnerabilities. Is there anywhere the information from these posts is kept in a more reviewable format? ...
2
votes
1answer
101 views

Will creating a directory inside a system directory with 777 permission cause security vulnerability?

Can creating directories with 777 permission inside system directories cause any security weakness? For example, say I open a directory called Custom inside /usr/share/backgrounds/ and give it 777 ...
2
votes
1answer
10k views

Shellshock: How can I update only Bash without restarting?

I want to fix the Shellshock issue, and the usual solution is to update Ubuntu. How can I update only Bash and without having to reboot?
0
votes
2answers
186 views

Install only bash from trusty on old distributions (to be save from Shellshock vulnerability)

Is there a way to just install only bash from the latest distribution on an old mashine? I once did pinning to a certain version of a package, but that was bevcause I didn't want to update that ...