🟢 Low ⏱ 5–15 min Last verified: 12 October 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2461-1 Related CVEs: CVE-2014-9130 Upstream summary: Stanisław Pitucha and Jonathan Gray discovered that LibYAML did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger […]
🟢 Low ⏱ 5–15 min Last verified: 4 October 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2743-3 Related CVEs: https://launchpad.net/bugs/1498681 https://launchpad.net/bugs/1069793 Upstream summary: USN-2743-1 fixed vulnerabilities in Firefox. Future Firefox updates will require all addons be signed and unity-firefox-extension, webapps-greasemonkey and webaccounts-browser-extension will not go through […]
🟢 Low ⏱ 5–15 min Last verified: 21 September 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2945-1 Related CVEs: https://launchpad.net/bugs/1565000 Upstream summary: It was discovered that XChat-GNOME incorrectly verified the hostname in an SSL certificate. An attacker could trick XChat-GNOME into trusting a rogue server's certificate, […]
🟢 Low ⏱ 10–30 min Last verified: 10 September 2014 Affected versions: IBM AIX 7.1 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2014-3566, IBM Support Bulletin CVE: CVE-2014-3566 NVD summary: The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for […]
🟡 Medium ⏱ 10–30 min Last verified: 6 September 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2431-1 Related CVEs: CVE-2014-8583 CVE-2014-0240 CVE-2014-0242 Upstream summary: It was discovered that mod_wsgi incorrectly handled errors when setting up the working directory and group access rights. A malicious application could […]
🟢 Low ⏱ 5–15 min Last verified: 26 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2300-1 Related CVEs: CVE-2014-4607 Upstream summary: Don A. Bailey discovered that LZO incorrectly handled certain input data. An attacker could use this issue to cause LZO to crash, resulting in […]
🟡 Medium ⏱ 10–30 min Last verified: 15 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2408-1 Related CVEs: CVE-2014-6414 CVE-2014-3555 CVE-2014-4615 CVE-2013-6433 CVE-2014-0187 CVE-2014-4167 Upstream summary: Elena Ezhova discovered that OpenStack Neutron did not properly perform access control checks for attributes. A remote authenticated attacker […]
🟢 Low ⏱ 5–15 min Last verified: 2 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2649-1 Related CVEs: CVE-2014-1833 Upstream summary: It was discovered that the uupdate tool incorrectly handled symlinks. If a user or automated system were tricked into processing specially crafted files, a […]
🟢 Low ⏱ 5–15 min Last verified: 20 July 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2311-1 Related CVEs: CVE-2014-4615 Upstream summary: Zhi Kun Liu discovered that pyCADF incorrectly filtered certain tokens. An attacker could possibly use this issue to obtain authentication tokens used in REST […]
🟢 Low ⏱ 5–15 min Last verified: 7 July 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-3825-1 Related CVEs: CVE-2011-2767 Upstream summary: Jan Ingvoldstad discovered that mod_perl incorrectly handled configuration options to disable being used by unprivileged users, contrary to the documentation. A local attacker could […]
