ubuntu

Ubuntu 14.04 — qt4-x11 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — qt4-x11 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 October 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2626-1 Related CVEs: CVE-2014-0190 CVE-2015-0295 CVE-2015-1858 CVE-2015-1859 CVE-2015-1860 Upstream summary: Wolfgang Schenk discovered that Qt incorrectly handled certain malformed GIF images. If a user or automated system were tricked into […]

Read more
Ubuntu 14.04 — bzr — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — bzr — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 October 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3411-1 Related CVEs: https://launchpad.net/bugs/1710979 Upstream summary: Adam Collard discovered that Bazaar did not properly handle host names in 'bzr+ssh://' URLs. A remote attacker could use this to construct a bazaar […]

Read more
Ubuntu 14.04 — maas — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — maas — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 October 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2431-2 Related CVEs: https://launchpad.net/bugs/1399016 Upstream summary: USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed an issue in the MAAS package, causing a regression. This update fixes the problem. We […]

Read more
Ubuntu 14.04 — nvidia-graphics-drivers-352-updates — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — nvidia-graphics-drivers-352-updates — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 September 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2814-1 Related CVEs: CVE-2015-7869 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly sanitized user mode inputs. A local attacker could use this issue to possibly gain root […]

Read more
Ubuntu 14.04 — unity — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — unity — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 September 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2303-1 Related CVEs: https://launchpad.net/bugs/1349128 https://launchpad.net/bugs/1314247 https://launchpad.net/bugs/1313885 https://launchpad.net/bugs/1308850 Upstream summary: It was discovered that in certain circumstances Unity failed to successfully grab the keyboard when switching to the lock screen. A […]

Read more
Ubuntu 14.04 — libxrender — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libxrender — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 September 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2568-1 Related CVEs: CVE-2013-7439 Upstream summary: Abhishek Arya discovered that libX11 incorrectly handled memory in the MakeBigReq macro. A remote attacker could use this issue to cause applications to crash, […]

Read more
Ubuntu 14.04 — xorg-server-lts-utopic — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — xorg-server-lts-utopic — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2500-1 Related CVEs: CVE-2013-6424 CVE-2015-0255 Upstream summary: Olivier Fourdan discovered that the X.Org X server incorrectly handled XkbSetGeometry requests resulting in an information leak. An attacker able to connect to […]

Read more
Ubuntu 14.04 — libyaml-libyaml-perl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libyaml-libyaml-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 August 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2461-2 Related CVEs: CVE-2014-9130 Upstream summary: Stanisław Pitucha and Jonathan Gray discovered that libyaml-libyaml-perl did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger […]

Read more
Ubuntu 14.04 — node-semver — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — node-semver — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 27 August 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4776-1 Related CVEs: CVE-2015-8855 Upstream summary: It was discovered that semver incorrectly handled certain inputs. A remote attacker could possibly use this issue to cause a denial of service. Table […]

Read more
Ubuntu 14.04 — fuse — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — fuse — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 August 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2617-1 Related CVEs: CVE-2015-3202 Upstream summary: Tavis Ormandy discovered that FUSE incorrectly filtered environment variables. A local attacker could use this issue to gain administrative privileges. Table of contents Symptom […]

Read more
CHAT