ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 17 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2676-1 Related CVEs: CVE-2013-6410 CVE-2013-7441 CVE-2015-0847 Upstream summary: It was discovered that NBD incorrectly handled IP address matching. A remote attacker could use this issue with an IP address that […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2405-1 Related CVEs: CVE-2014-3641 CVE-2014-7230 CVE-2013-1068 Upstream summary: Duncan Thomas discovered that OpenStack Cinder did not properly track the file format when using the GlusterFS of Smbfs drivers. A remote […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 April 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2406-1 Related CVEs: CVE-2014-3621 CVE-2014-3476 CVE-2014-3520 CVE-2014-5251 CVE-2014-5252 CVE-2014-5253 Upstream summary: Brant Knudson discovered that OpenStack Keystone did not properly perform input sanitization when performing endpoint catalog substitution. A remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 March 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2657-1 Related CVEs: CVE-2015-1330 Upstream summary: It was discovered that unattended-upgrades incorrectly performed authentication checks in certain configurations. If a remote attacker were able to perform a machine-in-the-middle attack, this […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2381-1 Related CVEs: CVE-2014-3634 CVE-2014-3683 Upstream summary: It was discovered that Rsyslog incorrectly handled invalid PRI values. An attacker could use this issue to send malformed messages to the Rsyslog […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2618-1 Related CVEs: CVE-2015-1326 Upstream summary: It was discovered that python-dbusmock incorrectly handled template loading from shared directories. A local attacker could possibly use this issue to execute arbitrary code. […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 March 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4772-1 Related CVEs: CVE-2015-0255 CVE-2015-1283 Upstream summary: USN-2500-1 addressed CVE-2015-0255 for xorg-server. This update provides the corresponding fix for VNC4 on Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. (CVE-2015-0255) USN-2726-1 […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 March 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2479-1 Related CVEs: CVE-2013-6435 CVE-2014-8118 Upstream summary: Florian Weimer discovered that RPM incorrectly handled temporary files. A local attacker could use this issue to execute arbitrary code. (CVE-2013-6435) Florian Weimer […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 February 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2475-1 Related CVEs: https://launchpad.net/bugs/1366790 Upstream summary: Clemens Fries discovered that GTK+ allowed bypassing certain screen locks by using the menu key. An attacker with physical access could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 February 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2898-1 Related CVEs: CVE-2013-7447 Upstream summary: It was discovered that GTK+ incorrectly handled certain large images. A remote attacker could use this issue to cause GTK+ applications to crash, resulting […]