ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4778-1 Related CVEs: CVE-2015-8869 CVE-2018-9838 Upstream summary: It was discovered that OCaml mishandled sign extensions. A remote attacker could use this vulnerability to steal sensitive information, cause a denial of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 April 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4436-2 Related CVEs: https://launchpad.net/bugs/1889206 CVE-2017-11464 CVE-2019-20446 Upstream summary: USN-4436-1 fixed a vulnerability in librsvg. The upstream fix caused a regression when parsing certain SVG files. This update backs out the […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4100-1 Related CVEs: CVE-2016-6232 CVE-2019-14744 Upstream summary: It was discovered that KConfig and KDE libraries have a vulnerability where an attacker could hide malicious code under desktop and configuration files. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3974-1 Related CVEs: CVE-2018-11099 CVE-2018-11129 CVE-2018-11130 Upstream summary: It was discovered that VCFtools improperly handled certain input. If a user was tricked into opening a crafted input file, VCFtools could […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5326-1 Related CVEs: CVE-2018-10906 Upstream summary: It was discovered that FUSE is susceptible to a restriction bypass flaw on a system that has SELinux active. A local attacker with non-root […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7465-1 Related CVEs: CVE-2018-16848 CVE-2018-16849 CVE-2019-3866 Upstream summary: It was discovered that Mistral incorrectly handled nested anchors in YAML files. An attacker could possibly use this issue to cause a […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5988-1 Related CVEs: CVE-2019-5086 CVE-2019-5087 Upstream summary: It was discovered that integer overflows vulnerabilities existed in Xcftools. An attacker could use this to cause a denial of service (system crash) […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3759-1 Related CVEs: CVE-2016-4429 CVE-2017-8779 CVE-2018-14622 Upstream summary: Aldy Hernandez discovered that libtirpc incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 March 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4001-2 Related CVEs: CVE-2019-9893 Upstream summary: USN-4001-1 fixed a vulnerability in libseccomp. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Jann Horn discovered that libseccomp […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4000-1 Related CVEs: CVE-2018-1084 Upstream summary: It was discovered that Corosync incorrectly handled certain requests. An attacker could possibly use this issue to cause a denial of service or execute […]