ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 9 May 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6519-2 Related CVEs: https://launchpad.net/bugs/1941785 Upstream summary: USN-6519-1 added IMDSv2 support to EC2 hibagent. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: The EC2 hibagent package […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 May 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6936-1 Related CVEs: CVE-2015-4852 Upstream summary: It was discovered that Apache Commons Collections allowed serialization support for unsafe classes by default. A remote attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 April 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4652-1 Related CVEs: CVE-2014-5439 Upstream summary: It was discovered that SniffIt incorrectly handled certain configuration files. An attacker could possibly use this issue to execute arbitrary code. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 April 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2838-1 Related CVEs: CVE-2015-8560 CVE-2015-8327 CVE-2015-3258 CVE-2015-3279 CVE-2015-2265 CVE-2014-2707 Upstream summary: Adam Chester discovered that the cups-filters foomatic-rip filter incorrectly stripped shell escape characters. A remote attacker could possibly use […]

🟠 High   ⏱ 15–60 min  Last verified: 21 April 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3449-1 Related CVEs: CVE-2015-3241 CVE-2015-3280 CVE-2015-5162 CVE-2015-7548 CVE-2015-7713 CVE-2015-8749 CVE-2016-2140 CVE-2014-3608  +9 more Upstream summary: George Shuklin discovered that OpenStack Nova incorrectly handled the migration process. A remote authenticated user […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 April 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2814-1 Related CVEs: CVE-2015-7869 CVE-2015-5950 CVE-2014-8091 CVE-2014-8098 CVE-2014-8298 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 March 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2747-1 Related CVEs: CVE-2015-5950 Upstream summary: Dario Weisser discovered that the NVIDIA graphics drivers incorrectly handled certain IOCTL writes. A local attacker could use this issue to possibly gain root […]

🟢 Low   ⏱ 5–15 min  Last verified: 13 March 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3374-1 Related CVEs: CVE-2016-9877 Upstream summary: It was discovered that RabbitMQ incorrectly handled MQTT (MQ Telemetry Transport) authentication. A remote attacker could use this issue to authenticate successfully with an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 March 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2547-1 Related CVEs: CVE-2011-0992 CVE-2012-3543 CVE-2015-2318 CVE-2015-2319 CVE-2015-2320 Upstream summary: It was discovered that the Mono TLS implementation was vulnerable to the SKIP-TLS vulnerability. A remote attacker could possibly use […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 March 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4783-1 Related CVEs: CVE-2016-10540 Upstream summary: It was discovered that minimatch did not perform necessary bounds checking on regular expressions. An attacker could use this vulnerability to cause a denial […]