Ubuntu 14.04 LTS

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2451-1 Related CVEs: CVE-2014-1425 Upstream summary: Serge Hallyn discovered that cgmanager did not consistently enforce proper nesting when modifying cgroup properties. A local attacker in a privileged container could use […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2581-1 Related CVEs: CVE-2015-1322 Upstream summary: Tavis Ormandy discovered that NetworkManager incorrectly filtered paths when requested to read modem device contexts. A local attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2311-2 Related CVEs: CVE-2014-4615 Upstream summary: USN-2311-1 fixed vulnerabilities in pyCADF. This update provides the corresponding updates for OpenStack Ceilometer. Original advisory details: Zhi Kun Liu discovered that pyCADF incorrectly […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2648-1 Related CVEs: CVE-2015-1323 Upstream summary: Tavis Ormandy discovered that Aptdeamon incorrectly handled the simulate dbus method. A local attacker could use this issue to possibly expose sensitive information, or […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 May 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2307-1 Related CVEs: CVE-2014-3564 Upstream summary: Tomáš Trnka discovered that GPGME incorrectly handled certain certificate line lengths. An attacker could use this issue to cause applications using GPGME to crash, […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4777-1 Related CVEs: CVE-2015-8860 Upstream summary: It was discovered that node-tar mishandled certain tar archives. An attacker could use this vulnerability to write arbitrary files to the filesystem. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2695-1 Related CVEs: CVE-2015-5522 CVE-2015-5523 Upstream summary: Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data, applications […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2743-3 Related CVEs: https://launchpad.net/bugs/1498681 https://launchpad.net/bugs/1069793 Upstream summary: USN-2743-1 fixed vulnerabilities in Firefox. Future Firefox updates will require all addons be signed and unity-firefox-extension, webapps-greasemonkey and webaccounts-browser-extension will not go through […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2676-1 Related CVEs: CVE-2013-6410 CVE-2013-7441 CVE-2015-0847 Upstream summary: It was discovered that NBD incorrectly handled IP address matching. A remote attacker could use this issue with an IP address that […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2405-1 Related CVEs: CVE-2014-3641 CVE-2014-7230 CVE-2013-1068 Upstream summary: Duncan Thomas discovered that OpenStack Cinder did not properly track the file format when using the GlusterFS of Smbfs drivers. A remote […]