ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4779-1 Related CVEs: CVE-2015-8980 Upstream summary: Danilo Segan discovered that Gettext mishandled certain input. An attacker could use this vulnerability to execute arbitrary code. Table of contents Symptom & Impact […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 February 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2670-1 Related CVEs: CVE-2015-0848 CVE-2015-4588 CVE-2015-4695 CVE-2015-4696 Upstream summary: Fernando Muñoz and Stefan Cornelius discovered that libwmf incorrectly handled certain malformed images. If a user or automated system were tricked […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 February 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2315-1 Related CVEs: CVE-2014-3504 Upstream summary: Ben Reser discovered that serf did not correctly handle SSL certificates with NUL bytes in the CommonName or SubjectAltNames fields. A remote attacker could […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 January 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2230-1 Related CVEs: CVE-2014-0476 Upstream summary: Thomas Stangner discovered that chkrootkit incorrectly quoted certain values. A local attacker could use this issue to execute arbitrary code when chkrootkit is run […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 January 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3283-1 Related CVEs: CVE-2015-8270 CVE-2015-8271 CVE-2015-8272 Upstream summary: Dave McDaniel discovered that rtmpdump incorrectly handled certain malformed streams. If a user were tricked into processing a specially crafted stream, a […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 January 2015 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2743-3 Related CVEs: https://launchpad.net/bugs/1498681 https://launchpad.net/bugs/1069793 Upstream summary: USN-2743-1 fixed vulnerabilities in Firefox. Future Firefox updates will require all addons be signed and unity-firefox-extension, webapps-greasemonkey and webaccounts-browser-extension will not go through […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 December 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2461-3 Related CVEs: CVE-2014-9130 Upstream summary: Stanisław Pitucha and Jonathan Gray discovered that PyYAML did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 December 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2371-1 Related CVEs: CVE-2014-7204 Upstream summary: It was discovered that Exuberant Ctags incorrectly handled certain minified js files. An attacker could use this issue to possibly cause Exuberant Ctags to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 November 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6105-2 Related CVEs: https://launchpad.net/bugs/ https://launchpad.net/bugs/XXXXXX https://launchpad.net/bugs/1944481 https://launchpad.net/bugs/1881533 https://launchpad.net/bugs/1719851 https://launchpad.net/bugs/1528645 https://launchpad.net/bugs/1423904 Upstream summary: USN-6105-1 updated ca-certificates. This provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 November 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2438-1 Related CVEs: CVE-2014-8091 CVE-2014-8098 CVE-2014-8298 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly handled GLX indirect rendering support. An attacker able to connect to an X […]