ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 5 November 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2338-1 Related CVEs: CVE-2014-5461 Upstream summary: It was discovered that Lua incorrectly handled certain vararg functions with a large number of fixed parameters. An attacker could use this issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 October 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2438-1 Related CVEs: CVE-2014-8091 CVE-2014-8098 CVE-2014-8298 Upstream summary: It was discovered that the NVIDIA graphics drivers incorrectly handled GLX indirect rendering support. An attacker able to connect to an X […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 October 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2461-1 Related CVEs: CVE-2014-9130 Upstream summary: Stanisław Pitucha and Jonathan Gray discovered that LibYAML did not properly handle wrapped strings. An attacker could create specially crafted YAML data to trigger […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 October 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2743-3 Related CVEs: https://launchpad.net/bugs/1498681 https://launchpad.net/bugs/1069793 Upstream summary: USN-2743-1 fixed vulnerabilities in Firefox. Future Firefox updates will require all addons be signed and unity-firefox-extension, webapps-greasemonkey and webaccounts-browser-extension will not go through […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 September 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2945-1 Related CVEs: https://launchpad.net/bugs/1565000 Upstream summary: It was discovered that XChat-GNOME incorrectly verified the hostname in an SSL certificate. An attacker could trick XChat-GNOME into trusting a rogue server's certificate, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 September 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2431-1 Related CVEs: CVE-2014-8583 CVE-2014-0240 CVE-2014-0242 Upstream summary: It was discovered that mod_wsgi incorrectly handled errors when setting up the working directory and group access rights. A malicious application could […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2300-1 Related CVEs: CVE-2014-4607 Upstream summary: Don A. Bailey discovered that LZO incorrectly handled certain input data. An attacker could use this issue to cause LZO to crash, resulting in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2408-1 Related CVEs: CVE-2014-6414 CVE-2014-3555 CVE-2014-4615 CVE-2013-6433 CVE-2014-0187 CVE-2014-4167 Upstream summary: Elena Ezhova discovered that OpenStack Neutron did not properly perform access control checks for attributes. A remote authenticated attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 August 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2649-1 Related CVEs: CVE-2014-1833 Upstream summary: It was discovered that the uupdate tool incorrectly handled symlinks. If a user or automated system were tricked into processing specially crafted files, a […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 July 2014 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-2311-1 Related CVEs: CVE-2014-4615 Upstream summary: Zhi Kun Liu discovered that pyCADF incorrectly filtered certain tokens. An attacker could possibly use this issue to obtain authentication tokens used in REST […]