Ubuntu 14.04 LTS

🟢 Low   ⏱ 5–15 min  Last verified: 5 October 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2431-2 Related CVEs: https://launchpad.net/bugs/1399016 Upstream summary: USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed an issue in the MAAS package, causing a regression. This update fixes the problem. We […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 September 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2814-1 Related CVEs: CVE-2015-7869 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly gain root […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 September 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2303-1 Related CVEs: https://launchpad.net/bugs/1349128 https://launchpad.net/bugs/1314247 https://launchpad.net/bugs/1313885 https://launchpad.net/bugs/1308850 Upstream summary: It was discovered that in certain circumstances Unity failed to successfully grab the keyboard when switching to the lock screen. A […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 September 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2568-1 Related CVEs: CVE-2013-7439 Upstream summary: Abhishek Arya discovered that libX11 incorrectly handled memory in the MakeBigReq macro. A remote attacker could use this issue to cause applications to crash, […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2500-1 Related CVEs: CVE-2013-6424 CVE-2015-0255 Upstream summary: Olivier Fourdan discovered that the X.Org X server incorrectly handled XkbSetGeometry requests resulting in an information leak. An attacker able to connect to […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 August 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2461-2 Related CVEs: CVE-2014-9130 Upstream summary: Stanisław Pitucha and Jonathan Gray discovered that libyaml-libyaml-perl did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 August 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4776-1 Related CVEs: CVE-2015-8855 Upstream summary: It was discovered that semver incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 August 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2617-1 Related CVEs: CVE-2015-3202 Upstream summary: Tavis Ormandy discovered that FUSE incorrectly filtered environment variables. A local attacker could use this issue to gain administrative privileges. Table of contents Symptom […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 August 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2455-1 Related CVEs: CVE-2014-7844 Upstream summary: It was discovered that bsd-mailx contained a feature that allowed syntactically valid email addresses to be treated as shell commands. A remote attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 August 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2769-1 Related CVEs: CVE-2012-5783 CVE-2012-6153 CVE-2014-3577 CVE-2015-5262 Upstream summary: It was discovered that Apache Commons HttpClient did not properly verify the Common Name or subjectAltName fields of X.509 certificates. An […]