Dovecot/w3m Updates for Ubuntu Linux
Posted on: 02/02/2018 11:18 AM

The following updates has been released for Ubuntu Linux:

USN-3555-1: w3m vulnerabilities
USN-3555-2: w3m vulnerabilities
USN-3556-1: Dovecot vulnerability
USN-3556-2: Dovecot vulnerabilities

USN-3555-1: w3m vulnerabilities

==========================================================================
Ubuntu Security Notice USN-3555-1
February 01, 2018

w3m vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 17.10
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in w3m.

Software Description:
- w3m: WWW browsable pager with excellent tables/frames support

Details:

It was discovered that w3m incorrectly handled certain inputs.
An attacker could possibly use this to cause a denial of service.
(CVE-2018-6196, CVE-2018-6197)

It was discovered that w3m incorrectly handled temporary files.
An attacker could possibly use this to overwrite arbitrary files.
(CVE-2018-6198)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.10:
  w3m 0.5.3-34ubuntu0.1

Ubuntu 16.04 LTS:
  w3m 0.5.3-26ubuntu0.2

Ubuntu 14.04 LTS:
  w3m 0.5.3-15ubuntu0.2

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3555-1
  CVE-2018-6196, CVE-2018-6197, CVE-2018-6198

Package Information:
  https://launchpad.net/ubuntu/+source/w3m/0.5.3-34ubuntu0.1
  https://launchpad.net/ubuntu/+source/w3m/0.5.3-26ubuntu0.2
  https://launchpad.net/ubuntu/+source/w3m/0.5.3-15ubuntu0.2


USN-3555-2: w3m vulnerabilities

==========================================================================
Ubuntu Security Notice USN-3555-2
February 01, 2018

w3m vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 ESM

Summary:

Several security issues were fixed in w3m.

Software Description:
- w3m: WWW browsable pager with excellent tables/frames support

Details:

USN-3555-2 fixed vulnerabilities in w3m. This update
provides the corresponding update for Ubuntu 12.04 ESM.
Original advisory details:

 It was discovered that w3m incorrectly handled certain inputs.
 An attacker could possibly use this to cause a denial of service.
 (CVE-2018-6196, CVE-2018-6197)

 It was discovered that w3m incorrectly handled temporary files.
 An attacker could possibly use this to overwrite arbitrary files.
 (CVE-2018-6198)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  w3m 0.5.3-5ubuntu1.3

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3555-2
  https://www.ubuntu.com/usn/usn-3555-1
  CVE-2018-6196, CVE-2018-6197, CVE-2018-6198


USN-3556-1: Dovecot vulnerability

==========================================================================
Ubuntu Security Notice USN-3556-1
February 01, 2018

dovecot vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 17.10
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

Dovecot could be made to crash if it received specially crafted input.

Software Description:
- dovecot: IMAP and POP3 email server

Details:

It was discovered that Dovecot incorrectly handled certain
authentications. An attacker could possibly use this to cause a denial
of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.10:
  dovecot-core 1:2.2.27-3ubuntu1.2

Ubuntu 16.04 LTS:
  dovecot-core 1:2.2.22-1ubuntu2.6

Ubuntu 14.04 LTS:
  dovecot-core 1:2.2.9-1ubuntu2.3

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3556-1
  CVE-2017-15132

Package Information:
  https://launchpad.net/ubuntu/+source/dovecot/1:2.2.27-3ubuntu1.2
  https://launchpad.net/ubuntu/+source/dovecot/1:2.2.22-1ubuntu2.6
  https://launchpad.net/ubuntu/+source/dovecot/1:2.2.9-1ubuntu2.3



USN-3556-2: Dovecot vulnerabilities

==========================================================================
Ubuntu Security Notice USN-3556-2
February 01, 2018

dovecot vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 ESM

Summary:

Several security issues were fixed in Dovecot.

Software Description:
- dovecot: IMAP and POP3 email server

Details:

USN-3556-1 fixed vulnerabilities in Dovecot. This update
provides the corresponding update for Ubuntu 12.04 ESM.

It was discovered that Dovecot incorrectly handled certain
authentications. An attacker could possibly use this to bypass
authentication and access sensitive information. (CVE-2013-6171)

Original advisory details:

 It was discovered that Dovecot incorrectly handled certain
authentications.
 An attacker could possibly use this to cause a denial of service.
(CVE-2017-15132)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 ESM:
  dovecot-core 1:2.0.19-0ubuntu2.4

In general, a standard system update will make all the necessary
changes.

References:
  https://www.ubuntu.com/usn/usn-3556-2
  https://www.ubuntu.com/usn/usn-3556-1
  CVE-2013-6171, CVE-2017-15132





Printed from Linux Compatible (http://www.linuxcompatible.org/news/story/dovecotw3m_updates_for_ubuntu_linux.html)