Ubuntu 16.04

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3246-1 Related CVEs: CVE-2017-6964 Upstream summary: Ilja Van Sprundel discovered that dmcrypt-get-device incorrectly checked setuid and setgid return values. A local attacker could use this issue to execute code as […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3224-1 Related CVEs: CVE-2017-5985 CVE-2016-8649 Upstream summary: Jann Horn discovered that LXC incorrectly verified permissions when creating virtual network interfaces. A local attacker could possibly use this issue to create […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 January 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3421-2 Related CVEs: CVE-2017-14062 Upstream summary: USN-3421-1 fixed a vulnerability in Libidn2. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Table of contents Symptom […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 December 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3399-1 Related CVEs: CVE-2017-12836 Upstream summary: Hank Leininger discovered that cvs did not properly handle SSH for remote repositories. A remote attacker could use this to construct a cvs repository […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 December 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4545-1 Related CVEs: CVE-2017-9122 CVE-2017-9123 CVE-2017-9124 CVE-2017-9125 CVE-2017-9126 CVE-2017-9127 CVE-2017-9128 Upstream summary: It was discovered that libquicktime incorrectly handled certain malformed MP4 files. If a user were tricked into opening […]

🟠 High   ⏱ 15–60 min  Last verified: 21 December 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3236-1 Related CVEs: CVE-2017-5029 CVE-2017-5030 CVE-2017-5031 CVE-2017-5033 CVE-2017-5035 CVE-2017-5037 CVE-2017-5040 CVE-2017-5041  +12 more Upstream summary: Multiple vulnerabilities were discovered in Chromium. If a user were tricked in to opening a […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 December 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3448-1 Related CVEs: CVE-2017-2673 Upstream summary: Boris Bobrov discovered that OpenStack Keystone incorrectly handled federation mapping when there are rules in which group-based assignments are not used. A remote authenticated […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 December 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3584-1 Related CVEs: CVE-2017-17512 Upstream summary: Gabriel Corona discovered that sensible-utils incorrectly validated strings when launcher a browser with the sensible-browser tool. A remote attacker could possibly use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5770-1 Related CVEs: CVE-2017-11671 Upstream summary: Todd Eisenberger discovered that certain versions of GNU Compiler Collection (GCC) could be made to clobber the status flag of RDRAND and RDSEED with […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 November 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3729-1 Related CVEs: CVE-2015-9262 CVE-2017-16612 Upstream summary: It was discovered that libxcursor incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. Table […]