Read Time2 Minute, 11 Second

Ubuntu Released security updates frequently this month and fixed multiple critical vulnerabilities that affected the Ubuntu package.

The vulnerabilities are fixed with the latest packages if you have enabled automatic update in your Ubuntu servers the updates will be applied automatically.

php5 vulnerabilities

Ubuntu fixes the several vulnerabilities that affected the PHP that provides corresponding update for Ubuntu 12.04 ESM.

It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service.

CVE-2018-14851
CVE-2018-14883

GLib vulnerabilities

There are 2 Vulnerabilities fixed that affected glib2.0 – GLib Input, Output and Streaming Library.

It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2018-16428)

It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information. (CVE-2018-16429)

Ghostscript vulnerabilities

Several security issues were fixed in Ghostscript.Tavis Ormandy discovered multiple security issues in Ghostscript.

If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use these issues to access arbitrary files, execute arbitrary code, or cause a denial of service.

glib2.0 vulnerabilities

It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.

It was discovered that GLib incorrectly handled certain files. An attacker could possibly use this issue to access sensitive information.

CVE-2018-16428
CVE-2018-16429

ClamAV vulnerabilities

It was discovered that ClamAV incorrectly handled parsing certain HWP files. A remote attacker could use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2018-0360)

It was discovered that ClamAV incorrectly handled parsing certain PDF files. A remote attacker could use this issue to cause ClamAV to hang, resulting in a denial of service. (CVE-2018-0361)

PHP vulnerabilities

It was discovered that PHP incorrectly handled restarting certain child processes when php-fpm is used. A remote attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 18.04 LTS.

It was discovered that PHP incorrectly handled certain exif tags in JPEG images. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service.