ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2820-1 Related CVEs: CVE-2015-0860 CVE-2015-0840 CVE-2014-3864 CVE-2014-3865 CVE-2014-0471 Upstream summary: Hanno Boeck discovered that the dpkg-deb tool incorrectly handled certain old style Debian binary packages. If a user or an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 February 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2626-1 Related CVEs: CVE-2014-0190 CVE-2015-0295 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 Upstream summary: Wolfgang Schenk discovered that Qt incorrectly handled certain malformed GIF images. If a user or automated system were tricked into […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 February 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2699-1 Related CVEs: CVE-2015-0839 Upstream summary: Enrico Zini discovered that HPLIP used a short GPG key ID when downloading keys from the keyserver. An attacker could possibly use this to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 January 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3028-1 Related CVEs: CVE-2016-1951 CVE-2015-7183 CVE-2014-1545 Upstream summary: It was discovered that NSPR incorrectly handled memory allocation. A remote attacker could use this issue to cause NSPR to crash, resulting […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 January 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2551-1 Related CVEs: CVE-2015-0254 Upstream summary: David Jorm discovered that the Apache Standard Taglibs incorrectly handled external XML entities. A remote attacker could possibly use this issue to execute arbitrary […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3228-1 Related CVEs: CVE-2016-10195 CVE-2016-10196 CVE-2016-10197 CVE-2014-6272 Upstream summary: Guido Vranken discovered that libevent incorrectly handled memory when processing certain data. A remote attacker could possibly use this issue with […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 December 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2771-1 Related CVEs: https://launchpad.net/bugs/1506467 CVE-2015-8768 Upstream summary: It was discovered that click did not properly perform input sanitization during click package installation. If a user were tricked into installing a […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 December 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2747-1 Related CVEs: CVE-2015-5950 Upstream summary: Dario Weisser discovered that the NVIDIA graphics drivers incorrectly handled certain IOCTL writes. A local attacker could use this issue to possibly gain root […]

🟠 High   ⏱ 15–60 min  Last verified: 10 November 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2937-1 Related CVEs: CVE-2014-1748 CVE-2015-1071 CVE-2015-1076 CVE-2015-1081 CVE-2015-1083 CVE-2015-1120 CVE-2015-1122 CVE-2015-1127  +12 more Upstream summary: A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. […]