chris

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4554-1 Related CVEs: CVE-2015-6673 Upstream summary: It was discovered that libPGF lacked proper validation when opening a specially crafted PGF file. An attacker could possibly use this issue to cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4695-1 Related CVEs: CVE-2017-5208 CVE-2017-5331 CVE-2017-5332 CVE-2017-5333 CVE-2017-6009 CVE-2017-6010 CVE-2017-6011 Upstream summary: Choongwoo Han discovered that icoutils incorrectly handled certain files. An attacker could possibly use this issue to cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4513-1 Related CVEs: CVE-2017-6960 Upstream summary: Dileep Kumar Jallepalli discovered that apng2gif incorrectly handled loading APNG files. An attacker could exploit this with a crafted APNG file to access sensitive […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 September 2017 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3454-1 Related CVEs: CVE-2017-1000376 Upstream summary: It was discovered that libffi incorrectly enforced an executable stack. An attacker could possibly use this issue, in combination with another vulnerability, to facilitate […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3913-1 Related CVEs: CVE-2016-2335 CVE-2017-17969 Upstream summary: It was discovered that p7zip did not correctly handle certain malformed archives. If a user or automated system were tricked into processing a […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4795-1 Related CVEs: CVE-2016-6814 Upstream summary: It was discovered that Apache Groovy incorrectly handled serialization mechanisms. An attacker could possibly use this issue to execute arbitrary code. Table of contents […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 September 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4771-1 Related CVEs: CVE-2014-8126 CVE-2017-16816 Upstream summary: It was discovered that HTCondor incorrectly invoked the mailx utility. An attacker could use this vulnerability to execute arbitrary commands. This issue only […]