========================================================================== Ubuntu Security Notice USN-3759-2 September 05, 2018 libtirpc vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 ESM Summary: Several security issues were fixed in libtirpc. Software Description: - libtirpc: transport-independent RPC library - development files Details: USN-3759-1 fixed a vulnerability in libtirpc. This update provides the corresponding update for Ubuntu 12.04 ESM. Original advisory details: Aldy Hernandez discovered that libtirpc incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. (CVE-2016-4429) It was discovered that libtirpc incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. (CVE-2018-14622) It was discovered that libtirpc incorrectly handled certain strings. An attacker could possibly use this issue to cause a denial of service. (CVE-2017-8779) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM: libtirpc-dev 0.2.2-5ubuntu0.1 libtirpc1 0.2.2-5ubuntu0.1 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://usn.ubuntu.com/usn/usn-3759-2 https://usn.ubuntu.com/usn/usn-3759-1 CVE-2016-4429, CVE-2017-8779, CVE-2018-14622