ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 13 June 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2249-1 Related CVEs: CVE-2014-3801 Upstream summary: Jason Dunsmore discovered that OpenStack heat did not properly restrict access to template information. A remote authenticated attacker could exploit this to see URL […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 June 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2746-2 Related CVEs: https://launchpad.net/bugs/1499749 CVE-2015-1337 Upstream summary: USN-2746-1 fixed a vulnerability in Simple Streams. The update caused a regression preventing MAAS from downloading PXE images. This update fixes the problem. […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2451-1 Related CVEs: CVE-2014-1425 Upstream summary: Serge Hallyn discovered that cgmanager did not consistently enforce proper nesting when modifying cgroup properties. A local attacker in a privileged container could use […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 June 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2581-1 Related CVEs: CVE-2015-1322 Upstream summary: Tavis Ormandy discovered that NetworkManager incorrectly filtered paths when requested to read modem device contexts. A local attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 May 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2311-2 Related CVEs: CVE-2014-4615 Upstream summary: USN-2311-1 fixed vulnerabilities in pyCADF. This update provides the corresponding updates for OpenStack Ceilometer. Original advisory details: Zhi Kun Liu discovered that pyCADF incorrectly […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2648-1 Related CVEs: CVE-2015-1323 Upstream summary: Tavis Ormandy discovered that Aptdeamon incorrectly handled the simulate dbus method. A local attacker could use this issue to possibly expose sensitive information, or […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 May 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2307-1 Related CVEs: CVE-2014-3564 Upstream summary: Tomáš Trnka discovered that GPGME incorrectly handled certain certificate line lengths. An attacker could use this issue to cause applications using GPGME to crash, […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4777-1 Related CVEs: CVE-2015-8860 Upstream summary: It was discovered that node-tar mishandled certain tar archives. An attacker could use this vulnerability to write arbitrary files to the filesystem. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2695-1 Related CVEs: CVE-2015-5522 CVE-2015-5523 Upstream summary: Fernando Muñoz discovered that HTML Tidy incorrectly handled memory. If a user or automated system were tricked into processing specially crafted data, applications […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2743-3 Related CVEs: https://launchpad.net/bugs/1498681 https://launchpad.net/bugs/1069793 Upstream summary: USN-2743-1 fixed vulnerabilities in Firefox. Future Firefox updates will require all addons be signed and unity-firefox-extension, webapps-greasemonkey and webaccounts-browser-extension will not go through […]