Ubuntu Security Notice 4004-2 - USN-4004-1 fixed a vulnerability in Berkeley DB. This update provides the corresponding update for Ubuntu 14.04 ESM. It was discovered that Berkeley DB incorrectly handled certain inputs. An attacker could possibly use this issue to read sensitive information. Various other issues were also addressed.
17c59d9cbee46e1add5277d01a142f77905a09ea0c9e46961156d316f8eba951
==========================================================================
Ubuntu Security Notice USN-4004-2
June 04, 2019
db5.3 vulnerability
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 ESM
Summary:
Berkeley DB could be made to expose sensitive information.
Software Description:
- db5.3: Berkeley DB Utilities
Details:
USN-4004-1 fixed a vulnerability in Berkeley DB. This update provides
the corresponding update for Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that Berkeley DB incorrectly handled certain inputs.
An attacker could possibly use this issue to read sensitive
information.
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 14.04 ESM:
db5.3-sql-util 5.3.28-3ubuntu3.1+esm1
db5.3-util 5.3.28-3ubuntu3.1+esm1
libdb5.3 5.3.28-3ubuntu3.1+esm1
libdb5.3-sql 5.3.28-3ubuntu3.1+esm1
libdb5.3-sql-dev 5.3.28-3ubuntu3.1+esm1
In general, a standard system update will make all the necessary
changes.
References:
https://usn.ubuntu.com/usn/usn-4004-2
https://usn.ubuntu.com/usn/usn-4004-1
CVE-2019-8457