ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 16 January 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4837-1 Related CVEs: CVE-2018-11499 CVE-2018-11693 CVE-2018-11695 CVE-2018-11696 CVE-2018-11697 CVE-2018-11698 CVE-2018-19797 CVE-2018-19827  +5 more Upstream summary: It was discovered that LibSass incorrectly handled certain specially crafted sass file. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4351-1 Related CVEs: CVE-2018-5383 CVE-2017-13080 CVE-2017-13081 Upstream summary: Eli Biham and Lior Neumann discovered that certain Bluetooth devices incorrectly validated key exchange parameters. An attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 January 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3701-1 Related CVEs: CVE-2018-12910 CVE-2017-2885 https://launchpad.net/bugs/1573494 Upstream summary: It was discovered that libsoup incorrectly handled certain cookie requests. An attacker could possibly use this to cause a denial of service. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 January 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3795-3 Related CVEs: https://launchpad.net/bugs/1805348 CVE-2018-10933 CVE-2015-3146 CVE-2016-0739 CVE-2014-8132 Upstream summary: USN-3795-1 and USN-3795-2 fixed a vulnerability in libssh. The upstream fix introduced a regression. This update fixes the problem. Original […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 January 2019 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4267-1 Related CVEs: CVE-2017-18187 CVE-2018-0487 CVE-2018-0488 CVE-2018-0497 CVE-2018-0498 Upstream summary: It was discovered that mbedtls has a bounds-check bypass through an integer overflow that can be used by an attacked […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 January 2019 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4620-1 Related CVEs: CVE-2017-11107 Upstream summary: It was discovered that phpLDAPadmin didn't properly sanitize before being echoed to the user. A remote attacker could inject arbitrary HTML/Javascript code in a […]

🟠 High   ⏱ 15–60 min  Last verified: 5 January 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3799-1 Related CVEs: CVE-2018-3133 CVE-2018-3143 CVE-2018-3144 CVE-2018-3155 CVE-2018-3156 CVE-2018-3161 CVE-2018-3162 CVE-2018-3171  +12 more Upstream summary: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 January 2019 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3601-1 Related CVEs: CVE-2018-1000127 CVE-2017-9951 CVE-2018-1000115 CVE-2016-8704 CVE-2016-8705 CVE-2016-8706 Upstream summary: It was discovered that Memcached incorrectly handled reusing certain items. A remote attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 December 2018 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4834-1 Related CVEs: CVE-2018-10847 Upstream summary: It was discovered that Prosody incorrectly validated the virtual host associated with a user session across stream restarts. A remote attacker could use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 December 2018 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4778-1 Related CVEs: CVE-2015-8869 CVE-2018-9838 Upstream summary: It was discovered that OCaml mishandled sign extensions. A remote attacker could use this vulnerability to steal sensitive information, cause a denial of […]