Ubuntu 16.04

🟢 Low   ⏱ 5–15 min  Last verified: 20 May 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4522-1 Related CVEs: CVE-2017-18635 Upstream summary: It was discovered that noVNC did not properly manage certain messages, resulting in the remote VNC server injecting arbitrary HTML into the noVNC web […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 May 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3400-1 Related CVEs: CVE-2017-7555 Upstream summary: It was discovered that Augeas incorrectly handled certain strings. An attacker could use this issue to cause Augeas to crash, leading to a denial […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 May 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3253-2 Related CVEs: https://launchpad.net/bugs/1690380 CVE-2013-7108 CVE-2013-7205 CVE-2014-1878 CVE-2016-9566 Upstream summary: USN-3253-1 fixed vulnerabilities in Nagios. The update prevented log files from being displayed in the web interface. This update fixes […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 May 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3500-1 Related CVEs: CVE-2017-16611 CVE-2017-13720 CVE-2017-13722 Upstream summary: It was discovered that libXfont incorrectly followed symlinks when opening font files. A local unprivileged user could use this issue to cause […]

🟠 High   ⏱ 15–60 min  Last verified: 13 May 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4780-1 Related CVEs: CVE-2015-9099 CVE-2015-9100 CVE-2015-9101 CVE-2017-13712 CVE-2017-15018 CVE-2017-11720 CVE-2017-9411 CVE-2017-8419  +4 more Upstream summary: It was discovered that LAME incorrectly handled certain audio files. A remote attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 May 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5744-1 Related CVEs: CVE-2017-2626 Upstream summary: It was discovered that libICE was using a weak mechanism to generate the session cookies. A local attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 May 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4037-1 Related CVEs: https://launchpad.net/bugs/1832337 Upstream summary: The policykit-desktop-privileges Startup Disk Creator policy allowed administrative users to overwrite disks. As a security improvement, this operation now requires authentication. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 April 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3283-1 Related CVEs: CVE-2015-8270 CVE-2015-8271 CVE-2015-8272 Upstream summary: Dave McDaniel discovered that rtmpdump incorrectly handled certain malformed streams. If a user were tricked into processing a specially crafted stream, a […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3483-1 Related CVEs: CVE-2017-16844 Upstream summary: Jakub Wilk discovered that the formail tool incorrectly handled certain malformed mail messages. An attacker could use this flaw to cause formail to crash, […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 April 2017 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3666-1 Related CVEs: CVE-2017-2592 https://launchpad.net/bugs/1628031 Upstream summary: Divya K Konoor discovered Oslo middleware was vulnerable to an information disclosure. A local attacker could exploit this flaw to obtain sensitive information […]