A security issue affects these releases of Ubuntu and its
derivatives:
Ubuntu 15.10
Ubuntu 14.04 LTS
Ubuntu 12.04 LTS
Summary
GIMP could be made to crash or run programs as your login if it opened a
specially crafted file.
Software description
gimp
– The GNU Image Manipulation Program
Details
It was discovered that GIMP incorrectly handled malformed XCF files. If a user were tricked into opening a specially crafted XCF file, an attacker could cause GIMP to crash, or possibly execute arbitrary code with the user’s privileges.
Update instructions
The problem can be corrected by updating your system to the following
package version:
A security issue affects these releases of Ubuntu and its
derivatives:
Ubuntu 16.04 LTS
Ubuntu 15.10
Ubuntu 14.04 LTS
Summary
libimobiledevice would allow unintended access to devices over the network.
Software description
libimobiledevice
– Library for communicating with iPhone and iPod Touch devices
Details
It was discovered that libimobiledevice incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to expectations.
Update instructions
The problem can be corrected by updating your system to the following
package version:
A security issue affects these releases of Ubuntu and its
derivatives:
Ubuntu 16.04 LTS
Ubuntu 15.10
Summary
libusbmuxd would allow unintended access to devices over the network.
Software description
libusbmuxd
– USB multiplexor daemon for iPhone and iPod Touch devices
Details
It was discovered that libusbmuxd incorrectly handled socket permissions. A remote attacker could use this issue to access services on iOS devices, contrary to expectations.
Update instructions
The problem can be corrected by updating your system to the following
package version:
PacketFence is a network access control (NAC) system. It is actively maintained and has been deployed in numerous large-scale institutions. It can be used to effectively secure networks, from small to very large heterogeneous networks. PacketFence provides NAC-oriented features such as registration of new network devices, detection of abnormal network activities including from remote snort sensors, isolation of problematic devices, remediation through a captive portal, and registration-based and scheduled vulnerability scans.
This Metasploit module exploits an SQL injection, auth bypass, file upload, command injection, and privilege escalation in Nagios XI <= 5.2.7 to pop a root shell.