Episode 10
Posted on Monday, Nov 5, 2018
This week we look at some details of the 17 unique CVEs addressed across the supported Ubuntu releases, have a brief look at some Canonical presentations from LSS-EU and more.
Show Notes
Overview
This week we look at some details of the 17 unique CVEs addressed across the supported Ubuntu releases, have a brief look at some Canonical presentations from LSS-EU and more.
This week in Ubuntu Security Updates
17 unique CVEs addressed
[USN-3799-2] MySQL vulnerabilities
- 3 CVEs addressed in Precise ESM
- Ubuntu 12.04 Precise ESM update for 3 CVEs fixed in usual supported releases (covered in Episode 9)
[USN-3803-1] Ghostscript vulnerabilities
- 3 CVEs addressed in Trusty, Xenial, Bionic, Cosmic
- More ghostscript vulnerabilities! (others recent ones covered in Episodes 5 and 7)
- 2 brand new sandbox (-dSAFER) bypasses by Tavis Ormandy
- Third one is due to an incomplete fix for CVE-2018-17183
[USN-3804-1] OpenJDK vulnerabilities
- 8 CVEs addressed in Xenial, Bionic, Cosmic
- New OpenJDK release covering multiple vulnerabilities including:
- Insufficient checking of signatures in manifest elements could allow untrusted Java application to escape sandbox
- Insufficient checking of all JAR attributes could allow untrusted Java application to escape sandbox
- Failure to clear HTTP header elements could result in exposure of sensitive info when follow redirect to another host
- Possible arbitrary code execution due to failure to enforce system security properties
[USN-3805-1, USN-3805-2] curl vulnerabilities
- 3 CVEs addressed in Trusty, Xenial, Bionic, Cosmic
- 1 CVE addressed in Precise ESM
- Buffer overflow in SASL authentication (very similar to CVE-2018-14618 from Episode 5)
- UAF when closing handle (DoS / crash)
- Out-of-bounds read when using curl to print show error messages via command-line
- This is fixed for Precise ESM too
Goings on in Ubuntu Security Community
Linux Security Summit Europe (LSS-EU)
- 2 presentations by Canonical engineers
- https://events.linuxfoundation.org/events/linux-security-summit-europe-2018/
Overview and Recent Developments: Namespaces and Capabilities
- Christian Brauner (Kernel engineer focussing on lxd at Canonical)
- Namespaces and Capabilities are building blocks for containers
- Summarises recent enhancements to various namespaces etc
- Future highlights: seccomp trap to userspace, LSM stacking, CAP_SYS_ADMIN split?
- Slides: https://events.linuxfoundation.org/wp-content/uploads/2017/12/2018-LSS-Europe-Edinburgh-Namespaces-and-Capabilities_Christian-Brauner.pdf
- Video: https://www.youtube.com/watch?v=-PZNF8XDNn8&list=PLbzoR-pLrL6oa4x78bHssxmGAw_ns1Tm2&index=8
Overview and Recent Developments: AppArmor
- John Johansen (Ubuntu Security team, AppArmor (kernel) maintainer)
- Summarises some of the history, use of and the latest developments in AppArmor
- Future highlights: Allow user / apps to load policy, delegation, pam_apparmor
- Slides: https://events.linuxfoundation.org/wp-content/uploads/2017/12/lss-eu-apparmor-overview-2018.pdf
- Video: https://www.youtube.com/watch?v=3MkU_Z-fClE&list=PLbzoR-pLrL6oa4x78bHssxmGAw_ns1Tm2&index=15