Ubuntu 14.04 LTS

🟡 Medium   ⏱ 10–30 min  Last verified: 1 August 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3447-1 Related CVEs: CVE-2016-4428 CVE-2014-3473 CVE-2014-3474 CVE-2014-3475 CVE-2014-3594 Upstream summary: Beth Lancaster and Brandon Sawyers discovered that OpenStack Horizon was incorrect protected against cross-site scripting (XSS) attacks. A remote authenticated […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 July 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3176-1 Related CVEs: CVE-2016-10109 Upstream summary: Peter Wu discovered that the PC/SC service did not correctly handle certain resources. A local attacker could use this issue to cause PC/SC to […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 July 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2817-1 Related CVEs: CVE-2015-5234 CVE-2015-5235 Upstream summary: It was discovered that IcedTea Web incorrectly handled applet URLs. A remote attacker could possibly use this issue to inject applets into the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 July 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2729-1 Related CVEs: CVE-2015-5198 CVE-2015-5199 CVE-2015-5200 Upstream summary: Florian Weimer discovered that libvdpau incorrectly handled certain environment variables. A local attacker could possibly use this issue to gain privileges. Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 June 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3337-1 Related CVEs: CVE-2016-2226 CVE-2016-4487 CVE-2016-4488 CVE-2016-4489 CVE-2016-4490 CVE-2016-4491 CVE-2016-4492 CVE-2016-4493  +1 more Upstream summary: It was discovered that Valgrind incorrectly handled certain string operations. If a user or automated […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 June 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3727-1 Related CVEs: CVE-2015-6644 CVE-2015-7940 CVE-2016-1000338 CVE-2016-1000339 CVE-2016-1000341 CVE-2016-1000342 CVE-2016-1000343 CVE-2016-1000345  +1 more Upstream summary: It was discovered that Bouncy Castle incorrectly handled certain crypto algorithms. A remote attacker could […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2705-1 Related CVEs: CVE-2014-7144 CVE-2015-1852 Upstream summary: Qin Zhao discovered Keystone disabled certification verification when the "insecure" option is set in a paste configuration (paste.ini) file regardless of the value, […]

🟠 High   ⏱ 15–60 min  Last verified: 29 May 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3036-1 Related CVEs: CVE-2016-3070 CVE-2016-4482 CVE-2016-4565 CVE-2016-4569 CVE-2016-4578 CVE-2016-4580 CVE-2016-4913 CVE-2016-4997  +12 more Upstream summary: Jan Stancek discovered that the Linux kernel's memory manager did not properly handle moving pages […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 May 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2627-1 Related CVEs: CVE-2015-3905 Upstream summary: Jakub Wilk discovered that t1utils incorrectly handled certain malformed fonts. If a user or automated system were tricked into opening a specially crafted font, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 May 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3193-1 Related CVEs: CVE-2016-6489 CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 Upstream summary: It was discovered that Nettle incorrectly mitigated certain timing side-channel attacks. A remote attacker could possibly use this flaw to recover […]