Ubuntu 16.04

🟢 Low   ⏱ 5–15 min  Last verified: 30 June 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3379-1 Related CVEs: CVE-2017-1000024 Upstream summary: It was discovered that Shotwell is vulnerable to an information disclosure in the web publishing plugins resulting in potential password and oauth token plaintext […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 June 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7364-1 Related CVEs: https://launchpad.net/bugs/2103420 Upstream summary: Alexander Tan discovered that the OpenSAML C++ library was susceptible to forging of signed SAML messages. An attacker could possibly use this issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 June 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5344-1 Related CVEs: CVE-2016-1249 CVE-2016-1251 CVE-2017-10788 CVE-2017-10789 Upstream summary: It was discovered that the DBD::mysql module, when configured with server-side prepared statement support, was susceptible to operations that would result […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 June 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3411-1 Related CVEs: https://launchpad.net/bugs/1710979 Upstream summary: Adam Collard discovered that Bazaar did not properly handle host names in 'bzr+ssh://' URLs. A remote attacker could use this to construct a bazaar […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 June 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3401-1 Related CVEs: CVE-2016-10243 Upstream summary: It was discovered that TeX Live incorrectly handled certain system commands. If a user were tricked into processing a specially crafted TeX file, a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 June 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3500-1 Related CVEs: CVE-2017-16611 CVE-2017-13720 CVE-2017-13722 Upstream summary: It was discovered that libXfont incorrectly followed symlinks when opening font files. A local unprivileged user could use this issue to cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4590-1 Related CVEs: CVE-2015-0258 Upstream summary: It was discovered that Collabtive did not properly validate avatar image file uploads. An authenticated user could exploit this with a crafted file to […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3186-1 Related CVEs: CVE-2017-0357 Upstream summary: It was discovered that iucode-tool incorrectly handled certain microcodes when using the -tr loader. If a user were tricked into processing a specially crafted […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5236-1 Related CVEs: CVE-2015-7700 Upstream summary: Brian Carpenter discovered that pngcrush incorrectly handled specially crafted file. An attacker could possibly use this issue to cause a denial of service. Table […]