ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 26 December 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3623-1 Related CVEs: https://launchpad.net/bugs/1174007 Upstream summary: It was discovered that ubuntu-release-upgrader did not correctly drop permissions before opening a browser to view the release notes. This update fixes the issue. […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 December 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5437-1 Related CVEs: CVE-2016-7944 Upstream summary: Tobias Stoeckmann discovered that libXfixes incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 December 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4783-1 Related CVEs: CVE-2016-10540 Upstream summary: It was discovered that minimatch did not perform necessary bounds checking on regular expressions. An attacker could use this vulnerability to cause a denial […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 December 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3724-1 Related CVEs: CVE-2016-10727 Upstream summary: Jon Kristensen discovered that Evolution Data Server would automatically downgrade a connection to an IMAP server if the IMAP server did not support SSL. […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 December 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4799-1 Related CVEs: CVE-2016-8714 Upstream summary: It was discovered that a buffer overflow in R causes memory corruption. An attacker could possibly use this to cause a denial of service […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5428-1 Related CVEs: CVE-2016-7947 CVE-2016-7948 Upstream summary: Tobias Stoeckmann discovered that libXrandr incorrectly handled certain responses. An attacker could possibly use this issue to cause a denial of service, or […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3032-1 Related CVEs: CVE-2016-6224 Upstream summary: It was discovered that eCryptfs incorrectly configured the encrypted swap partition for certain drive types. An attacker could use this issue to discover sensitive […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 November 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7242-1 Related CVEs: CVE-2016-8735 Upstream summary: Pierre Ernst discovered that the Tomcat JmxRemoteLifecycleListener did not implement a recommended fix. A remote attacker could possibly use this issue to execute arbitrary […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2956-1 Related CVEs: CVE-2016-1580 Upstream summary: Zygmunt Krynicki discovered that ubuntu-core-launcher did not properly sanitize its input and contained a logic error when determining the mountpoint of bind mounts when […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 November 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5334-1 Related CVEs: CVE-2015-1336 Upstream summary: It was discovered that man-db incorrectly handled permission changing operations in its daily cron job, and was therefore affected by a race condition. An […]