Ubuntu 18.04

🟢 Low   ⏱ 5–15 min  Last verified: 23 April 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5380-1 Related CVEs: CVE-2019-18276 Upstream summary: It was discovered that Bash did not properly drop privileges when the binary had the setuid bit enabled. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 April 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4775-1 Related CVEs: CVE-2015-3200 CVE-2018-19052 Upstream summary: It was discovered that Lighttpd did not properly sanitized the string used in basic HTTP authentication method. A remote attacker could use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 April 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4870-1 Related CVEs: CVE-2019-3881 Upstream summary: It was discovered that Bundler incorrectly created directories with insecure permissions in /tmp. An attacker could write malicious libraries to this location for later […]

🟠 High   ⏱ 15–60 min  Last verified: 11 April 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3911-2 Related CVEs: https://launchpad.net/bugs/1835596 CVE-2019-18218 CVE-2019-8904 CVE-2019-8905 CVE-2019-8906 CVE-2019-8907 CVE-2014-9620 CVE-2014-9621  +3 more Upstream summary: USN-3911-1 fixed vulnerabilities in file. One of the backported security fixes introduced a regression that […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 April 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4778-1 Related CVEs: CVE-2015-8869 CVE-2018-9838 Upstream summary: It was discovered that OCaml mishandled sign extensions. A remote attacker could use this vulnerability to steal sensitive information, cause a denial of […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4378-1 Related CVEs: CVE-2018-1000656 Upstream summary: It was discovered that Flask incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. Table of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 April 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4436-2 Related CVEs: https://launchpad.net/bugs/1889206 CVE-2017-11464 CVE-2019-20446 Upstream summary: USN-4436-1 fixed a vulnerability in librsvg. The upstream fix caused a regression when parsing certain SVG files. This update backs out the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3759-1 Related CVEs: CVE-2016-4429 CVE-2017-8779 CVE-2018-14622 Upstream summary: Aldy Hernandez discovered that libtirpc incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3784-1 Related CVEs: https://launchpad.net/bugs/1788929 https://launchpad.net/bugs/1794848 Upstream summary: As a security improvement, this update adjusts the private-files abstraction to disallow writing to thumbnailer configuration files. Additionally adjust the private-files, private-files-strict and […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4586-1 Related CVEs: CVE-2019-11037 Upstream summary: It was discovered that PHP ImageMagick extension didn't check the address used by an array. An attacker could use this issue to cause PHP […]