The OVAL Repository 5.4 2015-09-03T06:28:20.545-04:00 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 15.04 Ubuntu 14.10 openssl openssl: Secure Socket Layer cryptographic library and tools Several security issues were fixed in OpenSSL. SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 15.04 Ubuntu 14.10 qemu-kvm qemu-system qemu: Machine emulator and virtualizer - qemu-kvm: Machine emulator and virtualizer Several security issues were fixed in QEMU. SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 graphviz It was discovered that graphviz incorrectly handled parsing errors. An attacker could use this issue to cause graphviz to crash or possibly execute arbitrary code. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 xorg-server xorg-server-lts-trusty Ilja van Sprundel discovered a multitude of security issues in the X.Org X server. An attacker able to connect to an X server, either locally or remotely, could use these issues to cause the X server to crash or execute arbitrary code resulting in possible privilege escalation. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 nvidia-graphics-drivers-304 nvidia-graphics-drivers-304-updates nvidia-graphics-drivers-331 nvidia-graphics-drivers-331-updates It was discovered that the NVIDIA graphics drivers incorrectly handled GLX indirect rendering support. An attacker able to connect to an X server, either locally or remotely, could use these issues to cause the X server to crash or execute arbitrary code resulting in possible privilege escalation. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 15.04 Ubuntu 14.10 openssl openssl: Secure Socket Layer cryptographic library and tools Several security issues were fixed in OpenSSL. SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 15.04 Ubuntu 15.04 is installed Maria Mikhno DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 CVE-2014-8134) Rabin Vincent, Robert Swiecki, Russell King discovered that the ftrace subsystem of the Linux kernel does not properly handle private syscall numbers. A local user could exploit this flaw to cause a denial of service (OOPS). (CVE-2014-7826) Rabin Vincent, Robert Swiecki, Russell Kinglaw discovered a flaw in how the perf subsystem of the Linux kernel handles private systecall numbers. A local user could exploit this to cause a denial of service (OOPS) or bypass ASLR protections via a crafted application. (CVE-2014-7825) A null pointer dereference flaw was discovered in the the Linux kernel's SCTP implementation when ASCONF is used. A remote attacker could exploit this flaw to cause a denial of service (system crash) via a malformed INIT chunk. (CVE-2014-7841) A stack buffer overflow was discovered in the ioctl command handling for the Technotrend/Hauppauge USB DEC devices driver. A local user could exploit this flaw to cause a denial of service (system crash) or possibly gain privileges. (CVE-2014-8884) Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack Segment (SS) register on the x86 architecture. A local attacker could exploit this flaw to cause a denial of service (panic). (CVE-2014-9090)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 jasper Jose Duart discovered that JasPer incorrectly handled certain malformed JPEG-2000 image files. If a user were tricked into opening a specially crafted JPEG-2000 image file, a remote attacker could cause JasPer to crash or possibly execute arbitrary code with user privileges. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 10.04 eglibc It was discovered that a buffer overflow existed in the gethostbyname and gethostbyname2 functions in the GNU C Library. An attacker could use this issue to execute arbitrary code or cause an application crash, resulting in a denial of service. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 qemu qemu-kvm Michael S. Tsirkin discovered that QEMU incorrectly handled certain parameters during ram load while performing a migration. An attacker able to manipulate savevm data could use this issue to possibly execute arbitrary code on the host. This issue only affected Ubuntu 12.04 LTS, Ubuntu 14.04 LTS, and Ubuntu 14.10. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-7840">CVE-2014-7840</a>) Paolo Bonzini discovered that QEMU incorrectly handled memory in the Cirrus VGA device. A malicious guest could possibly use this issue to write into memory of the host, leading to privilege escalation. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-8106">CVE-2014-8106</a>) Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux CVE-2014-8134) Rabin Vincent, Robert Swiecki, Russell King discovered that the ftrace subsystem of the Linux kernel does not properly handle private syscall numbers. A local user could exploit this flaw to cause a denial of service (OOPS). (CVE-2014-7826) Rabin Vincent, Robert Swiecki, Russell Kinglaw discovered a flaw in how the perf subsystem of the Linux kernel handles private systecall numbers. A local user could exploit this to cause a denial of service (OOPS) or bypass ASLR protections via a crafted application. (CVE-2014-7825) A null pointer dereference flaw was discovered in the the Linux kernel's SCTP implementation when ASCONF is used. A remote attacker could exploit this flaw to cause a denial of service (system crash) via a malformed INIT chunk. (CVE-2014-7841) A stack buffer overflow was discovered in the ioctl command handling for the Technotrend/Hauppauge USB DEC devices driver. A local user could exploit this flaw to cause a denial of service (system crash) or possibly gain privileges. (CVE-2014-8884) Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack Segment (SS) register on the x86 architecture. A local attacker could exploit this flaw to cause a denial of service (panic). (CVE-2014-9090)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 clamav Kurt Seifried discovered that ClamAV incorrectly handled certain JavaScript files. An attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2013-6497">CVE-2013-6497</a>) Damien Millescamp discovered that ClamAV incorrectly handled certain PE files. An attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service, or possibly execute arbitrary code. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-9050">CVE-2014-9050</a>) Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 mod-wsgi It was discovered that mod_wsgi incorrectly handled errors when setting up the working directory and group access rights. A malicious application could possibly use this issue to cause a local privilege escalation when using daemon mode. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 libksba Hanno Böck discovered that Libksba incorrectly handled certain S/MIME messages or ECC based OpenPGP data. An attacker could use this issue to cause Libksba to crash, resulting in a denial of service, or possibly execute arbitrary code. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 ppp It was discovered that ppp incorrectly handled certain options files. A local attacker could possibly use this issue to escalate privileges. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 dbus It was discovered that DBus incorrectly handled a large number of file descriptor messages. A local attacker could use this issue to cause DBus to stop responding, resulting in a denial of service. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-7824">CVE-2014-7824</a>) Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux CVE-2014-3647) A flaw was discovered with the handling of the invept instruction in the KVM (Kernel Virtual Machine) subsystem of the Linux kernel. An unprivileged guest user could exploit this flaw to cause a denial of service (system crash) on the guest. (CVE-2014-3646) A flaw was discovered with invept instruction support when using nested EPT in the KVM (Kernel Virtual Machine). An unprivileged guest user could exploit this flaw to cause a denial of service (system crash) on the guest. (CVE-2014-3645) Lars Bull reported a race condition in the PIT (programmable interrupt timer) emulation in the KVM (Kernel Virtual Machine) subsystem of the Linux kernel. A local guest user with access to PIT i/o ports could exploit this flaw to cause a denial of service (crash) on the host. (CVE-2014-3611) Lars Bull and Nadav Amit reported a flaw in how KVM (the Kernel Virtual Machine) handles noncanonical writes to certain MSR registers. A privileged guest user can exploit this flaw to cause a denial of service (kernel panic) on the host. (CVE-2014-3610) A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3673) A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a denial of service (panic). (CVE-2014-3687) It was discovered that excessive queuing by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel can cause memory pressure. A remote attacker could exploit this flaw to cause a denial of service. (CVE-2014-3688) A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual Machine) subsystem handles the CR4 control register at VM entry on Intel processors. A local host OS user can exploit this to cause a denial of service (kill arbitrary processes, or system disruption) by leveraging /dev/kvm access. (CVE-2014-3690) Don Bailey discovered a flaw in the LZO decompress algorithm used by the Linux kernel. An attacker could exploit this flaw to cause a denial of service (memory corruption or OOPS). (CVE-2014-4608) It was discovered the Linux kernel's implementation of IPv6 did not properly validate arguments in the ipv6_select_ident function. A local user could exploit this flaw to cause a denial of service (system crash) by leveraging tun or macvtap device access. (CVE-2014-7207) Andy Lutomirski discovered that the Linux kernel was not checking the CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could exploit this flaw to cause a denial of service (loss of writability). (CVE-2014-7975)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 openvpn Dragana Damjanovic discovered that OpenVPN incorrectly handled certain control channel packets. An authenticated attacker could use this issue to cause an OpenVPN server to crash, resulting in a denial of service. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 mutt Jakub Wilk discovered that the write_one_header function in mutt did not properly handle newline characters at the beginning of a header. An attacker could specially craft an email to cause mutt to crash, resulting in a denial of service. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 flac Michele Spagnuolo discovered that FLAC incorrectly handled certain malformed audio files. An attacker could use this issue to cause FLAC to crash, resulting in a denial of service, or possibly execute arbitrary code. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 firefox CVE-2014-1587, CVE-2014-1588) Cody Crews discovered a way to trigger chrome-level XBL bindings from web content in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass security restrictions. (CVE-2014-1589) Joe Vennix discovered a crash when using XMLHttpRequest in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service. (CVE-2014-1590) Muneaki Nishimura discovered that CSP violation reports did not remove path information in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to obtain sensitive information. (CVE-2014-1591) Berend-Jan Wever discovered a use-after-free during HTML parsing. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1592) Abhishek Arya discovered a buffer overflow when parsing media content. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1593) Byoungyoung Lee, Chengyu Song, and Taesoo Kim discovered a bad cast in the compositor. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause undefined behaviour, a denial of service via application crash or execute abitrary code with the privileges of the user invoking Firefox. (CVE-2014-1594)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 thunderbird CVE-2014-1587) Joe Vennix discovered a crash when using XMLHttpRequest in some circumstances. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service. (CVE-2014-1590) Berend-Jan Wever discovered a use-after-free during HTML parsing. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1592) Abhishek Arya discovered a buffer overflow when parsing media content. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1593) Byoungyoung Lee, Chengyu Song, and Taesoo Kim discovered a bad cast in the compositor. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit this to cause undefined behaviour, a denial of service via application crash or execute abitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1594)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 tcpdump CVE-2014-8767) Steffen Bauch discovered that tcpdump incorrectly handled printing GeoNet packets. A remote attacker could use this issue to cause tcpdump to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applied to Ubuntu 14.04 LTS and Ubuntu 14.10. (CVE-2014-8768) Steffen Bauch discovered that tcpdump incorrectly handled printing AODV packets. A remote attacker could use this issue to cause tcpdump to crash, resulting in a denial of service, reveal sensitive information, or possibly execute arbitrary code. (CVE-2014-8769) It was discovered that tcpdump incorrectly handled printing PPP packets. A remote attacker could use this issue to cause tcpdump to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-9140) In the default installation, attackers would be isolated by the tcpdump AppArmor profile.]]> Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 qemu qemu-kvm CVE-2014-3615) Xavier Mehrenberger and Stephane Duverger discovered that QEMU incorrectly handled certain udp packets when using guest networking. A malicious guest could possibly use this issue to cause a denial of service. (CVE-2014-3640) It was discovered that QEMU incorrectly handled parameter validation in the vmware_vga device. A malicious guest could possibly use this issue to write into memory of the host, leading to privilege escalation. (CVE-2014-3689) It was discovered that QEMU incorrectly handled USB xHCI controller live migration. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-5263) Michael S. Tsirkin discovered that QEMU incorrectly handled memory in the ACPI PCI hotplug interface. A malicious guest could possibly use this issue to access memory of the host, leading to information disclosure or privilege escalation. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-5388) James Spadaro discovered that QEMU incorrectly handled certain VNC bytes_per_pixel values. An attacker having access to a VNC console could possibly use this issue to cause a guest to crash, resulting in a denial of service. (CVE-2014-7815)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 kde-runtime Tim Brown and Darron Burton discovered that KDE-Runtime incorrectly handled input validation. An attacker could possibly use this issue to execute arbitrary javascript. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 ntp CVE-2014-9293) Stephen Roettger discovered that NTP generated weak MD5 keys. A remote attacker could possibly use this issue to brute force the MD5 key and spoof a client or server. (CVE-2014-9294) Stephen Roettger discovered that NTP contained buffer overflows in the crypto_recv(), ctl_putdata() and configure() functions. In non-default configurations, a remote attacker could use these issues to cause NTP to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a denial of service. In addition, attackers would be isolated by the NTP AppArmor profile. (CVE-2014-9295) Stephen Roettger discovered that NTP incorrectly continued processing when handling certain errors. (CVE-2014-9296)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 pidgin CVE-2014-3694) Yves Younan and Richard Johnson discovered that Pidgin incorrectly handled certain malformed MXit emoticons. A malicious remote server or a man in the middle could use this issue to cause Pidgin to crash, resulting in a denial of service. (CVE-2014-3695) Yves Younan and Richard Johnson discovered that Pidgin incorrectly handled certain malformed Groupwise messages. A malicious remote server or a man in the middle could use this issue to cause Pidgin to crash, resulting in a denial of service. (CVE-2014-3696) Thijs Alkemade and Paul Aurich discovered that Pidgin incorrectly handled memory when processing XMPP messages. A malicious remote server or user could use this issue to cause Pidgin to disclosure arbitrary memory, resulting in an information leak. (CVE-2014-3698)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 xorg-server xorg-server-lts-trusty USN-2436-1 fixed vulnerabilities in the X.Org X server. Since publication, additional fixes have been made available for these issues. This update adds the additional fixes. Original advisory details: Ilja van Sprundel discovered a multitude of security issues in the X.Org X server. An attacker able to connect to an X server, either locally or remotely, could use these issues to cause the X server to crash or execute arbitrary code resulting in possible privilege escalation. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 ruby1.8 ruby1.9.1 ruby2.0 ruby2.1 Will Wood discovered that Ruby incorrectly handled the encodes() function. An attacker could possibly use this issue to cause Ruby to crash, resulting in a denial of service, or possibly execute arbitrary code. The default compiler options for affected releases should reduce the vulnerability to a denial of service. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-4975">CVE-2014-4975</a>) Willis Vandevanter discovered that Ruby incorrectly handled XML entity expansion. An attacker could use this flaw to cause Ruby to consume large amounts of resources, resulting in a denial of service. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-8080">CVE-2014-8080</a>) Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 ruby1.8 ruby1.9.1 ruby2.0 ruby2.1 Tomas Hoger discovered that Ruby incorrectly handled XML entity expansion. An attacker could use this flaw to cause Ruby to consume large amounts of resources, resulting in a denial of service. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 wget HD Moore discovered that Wget contained a path traversal vulnerability when downloading symlinks using FTP. A malicious remote FTP server or a man in the middle could use this issue to cause Wget to overwrite arbitrary files, possibly leading to arbitrary code execution. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 curl Symeon Paraschoudis discovered that curl incorrectly handled memory when being used with CURLOPT_COPYPOSTFIELDS and curl_easy_duphandle(). This may result in sensitive data being incorrectly sent to the remote server. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 konversation Manuel Nickschas discovered that Konversation did not properly perform input sanitization when using Blowfish ECB encryption. A remote attacker could exploit this to cause a denial of service. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-trusty CVE-2014-3647) A flaw was discovered with the handling of the invept instruction in the KVM (Kernel Virtual Machine) subsystem of the Linux kernel. An unprivileged guest user could exploit this flaw to cause a denial of service (system crash) on the guest. (CVE-2014-3646) Lars Bull reported a race condition in the PIT (programmable interrupt timer) emulation in the KVM (Kernel Virtual Machine) subsystem of the Linux kernel. A local guest user with access to PIT i/o ports could exploit this flaw to cause a denial of service (crash) on the host. (CVE-2014-3611) Lars Bull and Nadav Amit reported a flaw in how KVM (the Kernel Virtual Machine) handles noncanonical writes to certain MSR registers. A privileged guest user can exploit this flaw to cause a denial of service (kernel panic) on the host. (CVE-2014-3610) Raphael Geissert reported a NULL pointer dereference in the Linux kernel's CIFS client. A remote CIFS server could cause a denial of service (system crash) or possibly have other unspecified impact by deleting IPC$ share during resolution of DFS referrals. (CVE-2014-7145)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 php5 CVE-2014-3668) Symeon Paraschoudis discovered that PHP incorrectly handled unserializing objects. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2014-3669) Otto Ebeling discovered that PHP incorrectly handled the exif_thumbnail function. A remote attacker could use this issue to cause PHP to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2014-3670) Francisco Alonso that PHP incorrectly handled ELF files in the fileinfo extension. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. (CVE-2014-3710) It was discovered that PHP incorrectly handled NULL bytes when processing certain URLs with the curl functions. A remote attacker could possibly use this issue to bypass filename restrictions and obtain access to sensitive files. (No CVE number)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 eglibc glibc CVE-2012-6656) Adhemerval Zanella Netto discovered that the GNU C Library incorrectly handled certain multibyte characters when using the iconv function. An attacker could possibly use this issue to cause applications to crash, resulting in a denial of service. (CVE-2014-6040) Tim Waugh discovered that the GNU C Library incorrectly enforced the WRDE_NOCMD flag when handling the wordexp function. An attacker could possibly use this issue to execute arbitrary commands. (CVE-2014-7817)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-trusty CVE-2014-3690) Don Bailey discovered a flaw in the LZO decompress algorithm used by the Linux kernel. An attacker could exploit this flaw to cause a denial of service (memory corruption or OOPS). (CVE-2014-4608) Andy Lutomirski discovered a flaw in how the Linux kernel handles pivot_root when used with a chroot directory. A local user could exploit this flaw to cause a denial of service (mount-tree loop). (CVE-2014-7970) Andy Lutomirski discovered that the Linux kernel was not checking the CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could exploit this flaw to cause a denial of service (loss of writability). (CVE-2014-7975)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 maas USN-2431-1 fixed vulnerabilities in mod_wsgi. The security update exposed an issue in the MAAS package, causing a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that mod_wsgi incorrectly handled errors when setting up the working directory and group access rights. A malicious application could possibly use this issue to cause a local privilege escalation when using daemon mode. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 libreoffice It was discovered that LibreOffice incorrectly handled OLE preview generation. If a user were tricked into opening a crafted document, an attacker could possibly exploit this to embed arbitrary data into documents. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 kde-workspace David Edmundson discovered that the KDE Clock KCM policykit helper did not properly guard against untrusted input. Under certain circumstances, a process running under the user&#39;s session could exploit this to run programs as the administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 bind9 Florian Maury discovered that Bind incorrectly handled delegation. A remote attacker could possibly use this issue to cause Bind to consume resources and crash, resulting in a denial of service. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.10 Ubuntu 14.10 is installed Maria Mikhno DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 CVE-2014-3647) A flaw was discovered with the handling of the invept instruction in the KVM (Kernel Virtual Machine) subsystem of the Linux kernel. An unprivileged guest user could exploit this flaw to cause a denial of service (system crash) on the guest. (CVE-2014-3646) A flaw was discovered with invept instruction support when using nested EPT in the KVM (Kernel Virtual Machine). An unprivileged guest user could exploit this flaw to cause a denial of service (system crash) on the guest. (CVE-2014-3645) Lars Bull reported a race condition in the PIT (programmable interrupt timer) emulation in the KVM (Kernel Virtual Machine) subsystem of the Linux kernel. A local guest user with access to PIT i/o ports could exploit this flaw to cause a denial of service (crash) on the host. (CVE-2014-3611) Lars Bull and Nadav Amit reported a flaw in how KVM (the Kernel Virtual Machine) handles noncanonical writes to certain MSR registers. A privileged guest user can exploit this flaw to cause a denial of service (kernel panic) on the host. (CVE-2014-3610) A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3673) A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a denial of service (panic). (CVE-2014-3687) It was discovered that excessive queuing by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel can cause memory pressure. A remote attacker could exploit this flaw to cause a denial of service. (CVE-2014-3688) A flaw was discovered in how the Linux kernel's KVM (Kernel Virtual Machine) subsystem handles the CR4 control register at VM entry on Intel processors. A local host OS user can exploit this to cause a denial of service (kill arbitrary processes, or system disruption) by leveraging /dev/kvm access. (CVE-2014-3690) Don Bailey discovered a flaw in the LZO decompress algorithm used by the Linux kernel. An attacker could exploit this flaw to cause a denial of service (memory corruption or OOPS). (CVE-2014-4608) It was discovered the Linux kernel's implementation of IPv6 did not properly validate arguments in the ipv6_select_ident function. A local user could exploit this flaw to cause a denial of service (system crash) by leveraging tun or macvtap device access. (CVE-2014-7207) Andy Lutomirski discovered that the Linux kernel was not checking the CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could exploit this flaw to cause a denial of service (loss of writability). (CVE-2014-7975)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-trusty CVE-2014-8134) Rabin Vincent, Robert Swiecki, Russell King discovered that the ftrace subsystem of the Linux kernel does not properly handle private syscall numbers. A local user could exploit this flaw to cause a denial of service (OOPS). (CVE-2014-7826) A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3673) A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a denial of service (panic). (CVE-2014-3687) It was discovered that excessive queuing by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel can cause memory pressure. A remote attacker could exploit this flaw to cause a denial of service. (CVE-2014-3688) Rabin Vincent, Robert Swiecki, Russell Kinglaw discovered a flaw in how the perf subsystem of the Linux kernel handles private systecall numbers. A local user could exploit this to cause a denial of service (OOPS) or bypass ASLR protections via a crafted application. (CVE-2014-7825) The KVM (kernel virtual machine) subsystem of the Linux kernel miscalculates the number of memory pages during the handling of a mapping failure. A guest OS user could exploit this to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. (CVE-2014-8369) Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack Segment (SS) register on the x86 architecture. A local attacker could exploit this flaw to cause a denial of service (panic). (CVE-2014-9090)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 libxml2 It was discovered that libxml2 would incorrectly perform entity substitution even when requested not to. If a user or automated system were tricked into opening a specially crafted document, an attacker could possibly cause resource consumption, resulting in a denial of service. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 libvncserver Several security issues were fixed in LibVNCServer. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 bash Several security issues were fixed in Bash. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 wpa wpasupplicant Jouni Malinen discovered that the wpa_cli tool incorrectly sanitized strings when being used with action scripts. A remote attacker could possibly use this issue to execute arbitrary commands. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 10.04 openjdk-6 CVE-2014-6457) Several vulnerabilities were discovered in the OpenJDK JRE related to data integrity. (CVE-2014-6502, CVE-2014-6512, CVE-2014-6519, CVE-2014-6558) Several vulnerabilities were discovered in the OpenJDK JRE related to information disclosure. An attacker could exploit these to expose sensitive data over the network. (CVE-2014-6504, CVE-2014-6511, CVE-2014-6517, CVE-2014-6531) Two vulnerabilities were discovered in the OpenJDK JRE related to information disclosure, data integrity and availability. An attacker could exploit these to cause a denial of service or expose sensitive data over the network. (CVE-2014-6506, CVE-2014-6513)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 file file could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 exuberant-ctags Exuberant Ctags could be made to consume resources. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-trusty Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 openssl It was discovered that OpenSSL incorrectly handled memory when parsing DTLS SRTP extension data. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. This issue only affected Ubuntu 12.04 LTS and Ubuntu 14.04 LTS. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-3513">CVE-2014-3513</a>) It was discovered that OpenSSL incorrectly handled memory when verifying the integrity of a session ticket. A remote attacker could possibly use this issue to cause OpenSSL to consume resources, resulting in a denial of service. (<a href="http://people.ubuntu.com/~ubuntu-security/cve/CVE-2014-3567">CVE-2014-3567</a>) In addition, this update introduces support for the TLS Fallback Signaling Cipher Suite Value (TLS_FALLBACK_SCSV). This new feature prevents protocol downgrade attacks when certain applications such as web browsers attempt to reconnect using a lower protocol version for interoperability reasons. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 thunderbird CVE-2014-1574) Atte Kettunen discovered a buffer overflow during CSS manipulation. If a user were tricked in to opening a specially crafted message, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1576) Holger Fuhrmannek discovered an out-of-bounds read with Web Audio. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to steal sensitive information. (CVE-2014-1577) Abhishek Arya discovered an out-of-bounds write when buffering WebM video in some circumstances. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1578) A use-after-free was discovered during text layout in some circumstances. If a user were tricked in to opening a specially crafted message with scripting enabled, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Thunderbird. (CVE-2014-1581) Eric Shepherd and Jan-Ivar Bruaroey discovered issues with video sharing via WebRTC in iframes, where video continues to be shared after being stopped and navigating to a new site doesn't turn off the camera. An attacker could potentially exploit this to access the camera without the user being aware. (CVE-2014-1585, CVE-2014-1586)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 firefox CVE-2014-1574, CVE-2014-1575) Atte Kettunen discovered a buffer overflow during CSS manipulation. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1576) Holger Fuhrmannek discovered an out-of-bounds read with Web Audio. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to steal sensitive information. (CVE-2014-1577) Abhishek Arya discovered an out-of-bounds write when buffering WebM video in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1578) Michal Zalewski discovered that memory may not be correctly initialized when rendering a malformed GIF in to a canvas in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to steal sensitive information. (CVE-2014-1580) A use-after-free was discovered during text layout in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2014-1581) Patrick McManus and David Keeler discovered 2 issues that could result in certificate pinning being bypassed in some circumstances. An attacker with a fraudulent certificate could potentially exploit this conduct a man in the middle attack. (CVE-2014-1582, CVE-2014-1584) Eric Shepherd and Jan-Ivar Bruaroey discovered issues with video sharing via WebRTC in iframes, where video continues to be shared after being stopped and navigating to a new site doesn't turn off the camera. An attacker could potentially exploit this to access the camera without the user being aware. (CVE-2014-1585, CVE-2014-1586) Boris Zbarsky discovered that webapps could use the Alarm API to read the values of cross-origin references. If a user were tricked in to installing a specially crafter webapp, an attacker could potentially exploit this to bypass same-origin restrictions. (CVE-2014-1583)]]> Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 libvirt Several security issues were fixed in libvirt. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 firefox Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 apt Several security issues were fixed in APT. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 curl Several security issues were fixed in curl. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 mysql-5.5 Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 5.5.40. In addition to security fixes, the updated packages contain bug fixes, new features, and possibly incompatible changes. Please see the following for more information: http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-39.html http://dev.mysql.com/doc/relnotes/mysql/5.5/en/news-5-5-40.html http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 qemu qemu-kvm Several security issues were fixed in QEMU. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 php5 php5 could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 apt APT could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 10.04 gnupg GnuPG could expose sensitive information when performing decryption. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 python-django Several security issues were fixed in Django. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-trusty Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-trusty Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 thunderbird Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 nss NSS was updated to refresh the CA certificates bundle. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 openvpn OpenVPN could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 dbus Several security issues were fixed in DBus. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 lua5.1 Lua could be made to crash or run programs. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 bash Bash allowed bypassing environment restrictions in certain environments. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-trusty Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 openssl OpenSSL TLSv1.2 support has been improved. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 krb5 Several security issues were fixed in Kerberos. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 nss Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 openssl Several security issues were fixed in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 rsyslog Rsyslog could be made to crash if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 bash Bash allowed bypassing environment restrictions in certain environments. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 serf Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 nss NSS could be made to crash or run programs as your login if it processed a specially crafted certificate. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 kde4libs kauth could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 apt APT could be made to overwrite files. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 bash Several security issues were fixed in Bash. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 eglibc Several security issues were fixed in the GNU C Library. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-trusty The system could be made to crash under certain conditions. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 lzo2 LZO could be made to crash or run programs if it processed specially crafted data. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 jinja2 A security issue was fixed in Jinja2. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 libtasn1-6 libtasn1-3 Libtasn1 could be made to crash or run programs as your login if it processed specially crafted data. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 cups CUPS could be made to expose sensitive information, leading to privilege escalation. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 acpi-support The system could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 tomcat7 tomcat6 Several security issues were fixed in Tomcat. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 cups CUPS could be made to expose sensitive information, leading to privilege escalation. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 procmail formail could be made to crash or run programs if it processed specially crafted mail. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 gpgme1.0 GPGME could be made to crash or run programs as your login if it processed a specially crafted certificate. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 10.04 openjdk-6 Several security issues were fixed in OpenJDK 6. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 apache2 Several security issues were fixed in Apache HTTP Server. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 subversion Several security issues were fixed in Subversion. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 libgcrypt11 Libgcrypt could expose sensitive information when performing decryption. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 Ubuntu 10.04 eglibc Certain applications could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 squid3 Squid could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 file File could be made to crash or hang if it processed specially crafted data. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 php5 Several security issues were fixed in PHP. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-trusty Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-trusty Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 miniupnpc MiniUPnPc could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 dbus Several security issues were fixed in DBus. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 12.04 mysql-5.5 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 openssl USN-2232-1 introduced a regression in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 gnupg gnupg2 GnuPG could be made to hang if it processed a specially crafted message. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 nspr NSPR could be made to crash or run programs if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 libxml2 USN-2214-1 introduced a regression in libxml2. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-trusty The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 transmission Transmission could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 samba Several security issues were fixed in Samba. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM Sergey Artykhov ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 dpkg A malicious source package could write files outside the unpack directory. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 dpkg A malicious source package could write files outside the unpack directory. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxfont Several security issues were fixed in libXfont. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxml2 libxml2 could be made to consume resources if it processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 mod-wsgi mod_wsgi could be made to run programs as an administrator if it executes a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 openssl OpenSSL could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM Sergey Artykhov ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 lxml lxml could allow cross-site scripting (XSS) attacks. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 chkrootkit chkrootkit could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 libxalan2-java Xalan-Java could be made to load arbitrary classes or access external resources. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 swift OpenStack Swift would allow unintended access to files over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 openssh A malicious server could bypass OpenSSH SSHFP DNS record checking. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-django Several security issues were fixed in Django. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 10.04 openjdk-6 USN-2124-1 introduced a regression in OpenJDK 6. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 cups CUPS could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 openssl USN-2232-1 introduced a regression in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 curl Several security issues were fixed in curl. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 json-c json-c could be made to crash or consume CPU if it processed a specially crafted JSON document. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 openssl OpenSSL could be made to expose sensitive information over the network, possibly including private keys. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-django USN-2169-1 introduced a regression in Django. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 dovecot Dovecot could be made to stop responding if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM Sergey Artykhov ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-imaging Python Imaging Library could be made to overwrite or expose files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 mysql-5.5 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-django Django applications could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 10.04 openjdk-6 Several security issues were fixed in OpenJDK 6. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 nss NSS could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 apt An attacker could trick APT into installing altered source packages. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libyaml LibYAML could be made to crash or run programs if it opened a specially crafted YAML document. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 openssl Several security issues were fixed in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 nova Several security issues were fixed in OpenStack Nova. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 udisks udisks2 UDisks could be made to manipulate directories as the administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 gnutls26 GnuTLS could be made to crash or run programs if it connected to a malicious server. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 net-snmp Net-SNMP could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 freeradius Several security issues were fixed in FreeRADIUS. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 openssh OpenSSH incorrectly handled environment restrictions with wildcards. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 gnutls26 GnuTLS incorrectly validated certain intermediate certificates. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.04 libgadu libgadu could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 php5 Several security issues were fixed in PHP. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 tomcat7 tomcat6 Several security issues were fixed in Tomcat. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 postgresql-9.1 postgresql-8.4 Several security issues were fixed in PostgreSQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 sudo Several security issues were fixed in Sudo. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 file File could be made to crash if it processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 gtk+3.0 This update provides a compatibility fix for GTK+. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 clamav ClamAV has been updated to a new version. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 php5 PHP could be made to crash if it processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 samba Samba did not properly enforce the password guessing protection mechanism. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 librsvg Librsvg could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 php5 Several security issues were fixed in PHP. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 dpkg A malicious source package could write files outside the unpack directory. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 ca-certificates ca-certificates was updated to the 20130906 package. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 Ubuntu 10.04 libxml2 USN-2214-1 introduced a regression in libxml2. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 gnutls26 Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libyaml-libyaml-perl libyaml-libyaml-perl could be made to crash or run programs if it opened a specially crafted YAML file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 initramfs-tools initramfs-tools used incorrect mount options. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno DEPRECATED DEPRECATED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 file File could be made to crash if it processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 qemu qemu-kvm Several security issues were fixed in QEMU. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.04 pidgin Pidgin could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 icedtea-web IcedTea Web could be made to expose or alter sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python2.7 python3.3 python3.2 python2.6 Python could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 mutt The mutt mail client could be made to crash or run programs as your login if it opened a specially crafted email. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libssh A security issue was fixed in libssh. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 tiff LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 14.04 is installed Maria Kedovskaya DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 apache2 Apache HTTP server could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 firefox USN-2102-1 introduced a regression in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 10.04 openjdk-6 Several security issues were fixed in OpenJDK 6. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 imagemagick ImageMagick could be made to crash or run programs if it opened a specially crafted image file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 cups-filters cups-filters could be made to run programs as the lp user if it processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 qemu qemu-kvm Several security issues were fixed in QEMU. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 pidgin Several security issues were fixed in Pidgin. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 perl Perl could be made to run programs if it processed a specially crafted Locale::Maketext templates. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 maas The cluster could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 nspr NSPR could be made to crash or run programs if it received a specially crafted certificate. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 bind9 Bind could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 munin Several security issues were fixed in Munin. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 nss NSS could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libvirt Several security issues were fixed in libvirt. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libgadu libgadu could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 curl libcurl could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libyaml USN-2098-1 introduced a regression in LibYAML. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 memcached Several security issues were fixed in Memcached. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 libotr Applications using the OTR secure chat protocol could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 hplip Several security issues were fixed in HPLIP. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libyaml LibYAML could be made to crash or run programs if it opened specially crafted yaml document. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 graphviz Graphviz could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 mysql-5.5 mysql-dfsg-5.1 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 devscripts devscripts could be made to run programs if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM Sergey Artykhov ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxfont libXfont could be made to crash or run programs as an administrator if it opened a specially crafted font file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 puppet Puppet could be made to overwrite files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 openssl Several security issues were fixed in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 openssl Applications could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 raptor2 Applications using Raptor could be made to expose sensitive information or run programs as your login if they opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxt Several security issues were fixed in libxt. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 pymongo PyMongo could be made to crash under certain conditions. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox USN-1890-1 introduced a regression in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 puppet USN-2077-1 introduced a regression in Puppet. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 curl Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libjpeg-turbo libjpeg6b libjpeg and libjpeg-turbo could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 gimp GIMP could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 qt4-x11 qtbase-opensource-src Qt could be made to consume resources and hang if it processed XML data. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 djvulibre DjVuLibre could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 nss Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 ruby1.8 ruby1.9.1 Ruby could be made to hang if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno DEPRECATED DEPRECATED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 samba Several security issues were fixed in Samba. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 curl Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 gnupg GnuPG could expose sensitive information when performing decryption. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 curl USN-2048-1 introduced a regression in curl. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 php5 Several security issues were fixed in PHP. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 pixman Pixman could be made to crash if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-saucy Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Several security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 ruby1.8 ruby1.9.1 Several security issues were fixed in Ruby. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 nss Several security issues were fixed in NSS. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 10.04 openjdk-6 Several security issues were fixed in OpenJDK 6. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 mysql-5.5 mysql-dfsg-5.1 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 libkdcraw libKDcraw could be made to crash if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-django Several security issues were fixed in Django. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 jockey Jockey could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 apt-xapian-index apt-xapian-index could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 ubuntu-system-service ubuntu-system-service could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 hplip HPLIP could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 swift Swift could cause the system to crash if it received specially crafted requests over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 samba Samba could be made to hang if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 rtkit RealtimeKit could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 language-selector language-selector could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal The system could be made to expose sensitive information to a local user. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libraw LibRaw could be made to crash if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 software-properties Software Properties could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 maas MAAS could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to expose sensitive information to a local user. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 usb-creator usb-creator could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 suds Suds could be made to overwrite files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 nas Several security issues were fixed in Network Audio System (NAS). Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 The system could be made to expose sensitive information to a local user. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 pyopenssl Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 icu ICU could be made to crash or run programs as your login if it processed specially crafted data. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 gnupg gnupg2 Several security issues were fixed in GnuPG. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 eglibc Several security issues were fixed in the GNU C Library. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 txt2man txt2man could be made to overwrite files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 apport Apport could be made to expose privileged information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libvirt Several security issues were fixed in libvirt. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 policykit-1 polkit could be tricked into giving out improper authorization. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 xorg-server xorg-server-lts-quantal xorg-server-lts-raring The X.Org X server could be made to crash or run programs as an administrator if it received specially crafted input. Sergey Artykhov DRAFT INTERIM Maria Kedovskaya ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 php5 Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 nova Nova could be made to crash if it received specially crafted network requests. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 hplip HPLIP could be made to overwrite files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 vino Vino could be made to hang if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 python3.2 Several security issues were fixed in Python. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.10 is installed Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-httplib2 Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 bind9 Bind could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 php5 Several security issues were fixed in PHP. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 python2.7 Several security issues were fixed in Python. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 mysql-5.5 mysql-dfsg-5.1 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 nvidia-graphics-drivers nvidia-graphics-drivers-updates nvidia-settings nvidia-settings-updates NVIDIA graphics drivers could be made to run programs as an administrator 2E Software Description: - nvidia-graphics-drivers: NVIDIA binary Xorg driver - nvidia-graphics-drivers-updates: NVIDIA binary Xorg driver - nvidia-settings: Tool for configuring the NVIDIA graphics driver - nvidia-settings-updates: Tool for configuring the NVIDIA graphics drive r Details: It was discovered that the NVIDIA graphics drivers incorrectly handled large ARGB cursors. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 openssl Several security issues were fixed in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 curl libcurl could be made to crash or run programs as your login if it receiv ed specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 tiff LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxml2 Several security issues were fixed in libxml2. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 icedtea-web Due to a regression, IcedTea-Web might not be able to access some sites. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 postgresql-9.1 postgresql-8.4 postgresql-8.3 Several security issues were fixed in PostgreSQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxml2 USN-1904-1 introduced a regression in libxml2. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 poppler Applications using poppler could be made to crash or possibly run program s as your login if they opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 libssh libssh could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 openssl Several security issues were fixed in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 nova Nova could be made to crash the system if instances used a specially crafted image. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 clamav Several security issues were fixed in ClamAV. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 pidgin Several security issues were fixed in Pidgin. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox USN-1681-1 introduced a regression in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 xorg-server xorg-server-lts-quantal The X server could be made to reveal keystrokes of other users. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 nova Two security issues were fixed in Nova. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 kde4libs KDE-Libs could be made to expose web credentials. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 apache2 Several security issues were fixed in the Apache HTTP Server. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 samba Samba would allow unintended write access to files over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 gnutls26 gnutls13 GnuTLS could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 glance Glance could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 tomcat7 tomcat6 Several security issues were fixed in Tomcat. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 curl Applications using libcurl could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 xserver-xorg-video-qxl Guests using the QXL graphics driver could be caused to hang or crash. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 perl Perl could be made to stop responding if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 bind9 Bind could be made to consume memory or crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM Maria Kedovskaya ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 icedtea-web Two security issues were fixed in IcedTea-Web. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 ruby1.9.1 Several security issues were fixed in Ruby. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Several security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 10.04 openjdk-6 Several security issues were fixed in OpenJDK 6. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 freetype FreeType could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 icedtea-web IcedTea Web updated to work with new OpenJDK 7. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Thunderbird could be made to crash or run programs as your login. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 vino Vino could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 dbus-glib An attacker could send crafted input to applications using DBus-GLib and possibly escalate privileges. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 mesa Mesa could be made to crash or run programs if it processed specially crafted data. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 sudo Sudo could be made to run programs as the administrator without a passwor d prompt. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 lcms2 Little CMS could be made to crash if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 gnome-online-accounts GNOME Online Accounts could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 mesa Mesa could be made to crash or run programs if it processed specially crafted data. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 openjdk-7 openjdk-6 Several security issues were fixed in OpenJDK. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 libproxy libproxy could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 firefox Multiple security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 haproxy HAProxy could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 tomcat7 tomcat6 Several security issues were fixed in Tomcat. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 aptdaemon Aptdaemon could be tricked into installing arbitrary PPA GPG keys. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 firefox Several security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 libvirt libvirt could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 dbus DBus could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 perl Perl programs could be made to crash or run programs if they receive specially crafted network traffic or other input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 qemu-kvm QEMU could be made to crash or run programs. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 telepathy-idle telepathy-idle could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 libgssglue Privilege escalation via the GSSAPI_MECH_CONF environment variable with setuid programs. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 devscripts Several security issues were fixed in devscripts. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 squid3 squid squid-cgi could consume excessive system resources, leading to a denial of service attack on it and other hosted services. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 libxml2 libxml2 could be made to hang if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 bind9 Bind could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 eglibc glibc Multiple security issues were fixed in the GNU C Library. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 libxml2 Applications using libxml2 could be made to crash or run programs as your login if they opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 mysql-5.5 mysql-5.1 mysql-dfsg-5.1 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 python-keyring Several security issues were fixed in Python Keyring. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 python-django Django could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox USN-1681-1 introduced a regression in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 nova Nova could be made to crash if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 glance Glance could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 python-django Several security issues were fixed in Django. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 apache2 Several security issues were fixed in the Apache HTTP server. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 apparmor A weakness was discovered in the example AppArmor profile for chromium-browser. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 python-django A testsuite regression was fixed in Django. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 nss NSS could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 qt4-x11 Qt applications could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 openjdk-7 openjdk-6 Several security issues were fixed in OpenJDK. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 tiff Programs that use LibTIFF could be made to crash or run programs if they opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 libxslt Applications using libxslt could be made to crash or run programs as your login if they processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 cups cupsys CUPS could be made to read files or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 webkit Multiple security vulnerabilities were fixed in WebKit. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 php5 PHP could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 python-django Applications using Django could be made to crash or expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 lynx-cur Two security issues were fixed in Lynx. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 firefox Several security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 isc-dhcp dhcp3 DHCP could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 openjdk-7 openjdk-6 Several security issues were fixed in OpenJDK. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 gimp GIMP could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 nova Nova volume could be made to expose volumes from other users. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 software-properties Software Properties could be tricked into installing arbitrary PPA GPG keys. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 isc-dhcp DHCP could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 keystone Keystone would allow unintended access over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 munin Several security issues were fixed in Munin. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libmodule-signature-perl Module::Signature could be made to run programs if it verified a signatur e. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 qemu-kvm QEMU could be made to overwrite files as the administrator, or expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 qemu-kvm QEMU could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 apache2 Several security issues were fixed in the Apache HTTP Server. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal The system could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 dbus DBus could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 evolution-data-server Evolution would sometimes encrypt email to the wrong recipient. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 keystone OpenStack Keystone did not properly handle user role changes Software Description: - keystone: OpenStack identity service Details: Dolph Mathews discovered that when roles are granted and revoked to users in Keystone, pre-existing tokens were not updated or invalidated to take the new roles into account. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 ubufox unity-firefox-extension This update provides compatible packages for Firefox 23. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 bind9 Bind could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 qt4-x11 Several security issues were fixed in Qt. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 libxslt Applications using libxslt could be made to crash if they processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal USN-1704-1 introduced a regression in the Linux kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM Maria Kedovskaya ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 libgc Applications using libgc could be made to crash or run arbitrary programs as your login. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 tiff LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 ruby1.9.1 Several security issues were fixed in Ruby. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 glance Glance could be made to delete arbitrary images. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 rubygems RubyGems could be made to download and install malicious gem files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 quagga Quagga could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 USN-1698-1 introduced a regression in the Linux kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 keystone Two security issues were fixed in OpenStack Keystone. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 ruby1.8 ruby1.9.1 An attacker could trick Ruby into trusting a rogue server. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 mysql-5.5 mysql-5.1 mysql-dfsg-5.1 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 clamav USN-1482-1 introduced a regression in ClamAV that could cause it to fail to scan certain documents. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 ruby1.8 Ruby could allow excessive access in untrusted programs. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 nss NSS could be made to crash if it opened a specially crafted certificate. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 firefox USN-1548-1 introduced a regression in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 php5 Several security issues were fixed in PHP. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 ubiquity-slideshow-ubuntu ubiquity-slideshow-ubuntu would allow unintended access to files over the network during system installation. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 libreoffice LibreOffice could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 gnupg gnupg2 GnuPG could be tricked into downloading a different key when downloading from a key server. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 nspr NSPR update to work with the new NSS. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 quagga Quagga could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 ubufox This update provides compatible ubufox packages for the latest Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 apport A hardening measure was added to apport. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 nova Nova could be made to overwrite or corrupt arbitrary files in the compute host file system. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 nspr NSPR update to work with the new NSS. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 ubuntuone-client Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 tiff tiff2pdf could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 The system could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 keystone Keystone could be made to fill server disks with error messages. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 The system could be made to crash under certain conditions. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 postgresql-9.1 postgresql-8.4 postgresql-8.3 PostgreSQL could be made to crash if it received specially crafted input. Software Description: - postgresql-9.1: Object-relational SQL database - postgresql-8.4: Object-relational SQL database - postgresql-8.3: Object-relational SQL database Details: Sumit Soni discovered that PostgreSQL incorrectly handled calling a certa in internal function with invalid arguments. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 firefox Several security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 sudo Sudo could allow users to run arbitrary programs as the administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 libconfig-inifiles-perl Config-IniFiles could be made to overwrite arbitrary files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 tomcat6 Several security issues were fixed in Apache Tomcat. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 exim4 Exim could be made to run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 php5 PHP could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 net-snmp Net-SNMP could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 update-manager Update Manager could expose sensitive information in certain circumstances. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 openjdk-6 OpenJDK could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 nova USN 1466-1 introduced a regression in Nova. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 libotr Applications using Off-the-Record messaging plugins could be made to crash or run programs if it received specially crafted network messages. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 webkit Multiple security vulnerabilities were fixed in WebKit. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 The system could be made to run actions or potentially programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 apt An attacker could trick APT into installing altered packages. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 nova Nova could be made to overwrite or corrupt arbitrary files in the compute host file system. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 tiff The TIFF library could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 libxml2 Applications using libxml2 could be made to crash or run programs as your login if they opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 puppet Several security issues were fixed in Puppet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 libexif libexif could be made to crash, run programs as your login, or expose sensitive information if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux USN-1696-1 introduced a regression in the Linux kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to crash under certain conditions. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 firefox USN-1463-1 introduced regressions in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 mysql-5.5 mysql-5.1 mysql-dfsg-5.1 mysql-dfsg-5.0 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 nvidia-graphics-drivers nvidia-graphics-drivers-173 nvidia-graphics-drivers-173-updates nvidia-graphics-drivers-updates NVIDIA graphics drivers could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 The system could be made to crash under certain conditions. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 openjdk-6 icedtea-web Several security issues were fixed in OpenJDK 6. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 krb5 Several security issues were fixed in Kerberos. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 gnupg libgcrypt11 GnuPG and Libgcrypt could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 firefox Several security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 libssh linssh could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 horizon OpenStack Horizon could help expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 php5 Standalone PHP CGI scripts could be made to execute arbitrary code with the privilege of the web server. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 mono Mono could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 kdepim KDE PIM could be made to execute JavaScript if it opened a specially crafted email. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 nss Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 rhythmbox Rhythmbox could be made to run programs as your login when using the Contex t plugin. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 bind9 Bind could be made to crash or if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 The system could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 apt APT now more thoroughly verifies imported keyrings. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 nova Nova could be made to crash the system under certain conditions. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 transmission Transmission could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 emacs23 Emacs could be made to run programs as your login if it opened a speciall y crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 rpm RPM could be made to crash or run programs if it opened a specially crafted package file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 backuppc BackupPC could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 python3.2 Several security issues were fixed in Python 3.2. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 firefox Due to a regression, Firefox might crash or freeze under normal use. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 gnupg gnupg2 GnuPG could be made to corrupt the keyring if it imported a specially crafted key. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 libtasn1-3 Libtasn1 could be made to crash or run programs as your login if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Several security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 accountsservice AccountsService could be made to read arbitrary files as the administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 freeradius FreeRADIUS could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 postgresql-9.1 postgresql-8.4 postgresql-8.3 PostgreSQL could allow unintended access to files over the network when using the XML2 extension. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 keystone Keystone would allow unintended access to files over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 ubufox This update provides compatible ubufox packages for the latest Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 apparmor This update provides updates for the AppArmor profile abstractions. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 gpsd gpsd could be made to crash or possibly run programs if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 python-crypto PyCrypto improperly created ElGamal encryption keys. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 openjdk-6 Two security issues were fixed in OpenJDK 6. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Regressions were introduced in the last Firefox update. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 bind9 Bind could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 openssl USN-1732-1 introduced a regression in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 nut Nut could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 inkscape Several security issues were fixed in Inkscape. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 transmission Transmission could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 clamav ClamAV could improperly detect malware if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 calligra Calligra could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 pidgin Several security issues were fixed in Pidgin. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 apt An attacker could trick APT into installing altered packages. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 postgresql-9.1 postgresql-8.4 postgresql-8.3 PostgreSQL could be made to crash or incorrectly handle authentication. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 xdiagnose 3rd party applications using xdiagnose could potentially be made to overwrite files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM Maria Kedovskaya ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to crash under certain conditions. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 icedtea-web The IcedTea-Web Java web browser plugin could be made to crash or possibly run programs as your login if it opened a specially crafted applet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 imagemagick ImageMagick could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 bind9 Bind could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 moin Several security issues were fixed in MoinMoin. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 puppet Several security issues were fixed in Puppet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 nova Nova could be prevented from applying security group policy. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 gimp GIMP could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 xmlrpc-c XML-RPC for C and C++ could be made to cause a denial of service by consuming excessive CPU and memory resources. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Multiple security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 thunderbird USN-1551-1 introduced regressions in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 samba Samba could allow a user to gain administrative privileges to the Samba server. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 ruby1.9.1 Several security issues were fixed in ruby1.9.1 Software Description: - ruby1.9.1: Interpreter of object-oriented scripting language Ruby Details: It was discovered that Ruby incorrectly allowed untainted strings to be modified in protective safe levels. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 openssl Applications using OpenSSL in certain situations could be made to crash or expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 libxml2 Applications using libxml2 could be made to crash or run programs as your login if they opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 clamav ClamAV could be made to crash or run programs if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 feedparser Applications using feedparser could be made to crash if they fetched a specially crafted feed. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 unity-2d Popup menus were not working in Firefox under Unity 2D. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 ubuntuone-storage-protocol Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 php5 Several security issues were fixed in PHP. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 horizon Horizon could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to perform privileged actions as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 update-manager Update Manager could expose sensitive information in certain circumstances. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 icedtea-web The Icedtea-Web plugin could be made to crash or run programs as your log in if it opened a specially crafted web page. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 apt APT could expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 clamav ClamAV could improperly detect malware if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 ruby1.9.1 Ruby could allow excessive access in untrusted programs. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal The system could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxext Several security issues were fixed in libxext. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 ruby1.8 ruby1.9.1 Ruby could be made to hang if it received specially crafted input. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 gnutls26 GnuTLS could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-ti-omap4 Several security issues were fixed in the kernel. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 keystone Keystone could be made to crash or expose sensitive information over the network. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxinerama Several security issues were fixed in libxp. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 moin MoinMoin could be made to run programs and overwrite files. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-raring Several security issues were fixed in the kernel. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 puppet Several security issues were fixed in Puppet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux The system could be made to crash or run programs as an administrator if it received specially crafted network traffic. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.04 Ubuntu 11.10 Ubuntu 10.04 firefox Several security issues were fixed in Firefox. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 imagemagick ImageMagick could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 xserver-xorg-video-openchrome xserver-xorg-video-openchrome-lts-quantal Several security issues were fixed in xserver-xorg-video-openchrome. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 mysql-5.5 mysql-5.1 mysql-dfsg-5.1 MySQL could be made to run programs if it received specially crafted network traffic from an authenticated user. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libx11 Several security issues were fixed in libx11. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 firefox Multiple security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxcursor Several security issues were fixed in libxext. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxcb Several security issues were fixed in libxcb. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 10.04 Ubuntu 12.04 Ubuntu 11.10 openjdk-6 Several security issues were fixed in OpenJDK 6. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.04 Ubuntu 12.10 haproxy HAProxy could be made to crash if it received specially crafted network traffic. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal Several security issues were fixed in the kernel. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxi Several security issues were fixed in libxi. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxvmc Several security issues were fixed in libxvmc. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxtst Several security issues were fixed in libxtst. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 12.10 Ubuntu 13.04 dbus DBus could be made to crash if it received specially crafted input. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux Several security issues were fixed in the kernel. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxp Several security issues were fixed in libxp. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxxf86vm Several security issues were fixed in libxxf86vm. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 thunderbird Multiple security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 11.10 Ubuntu 12.04 Ubuntu 10.04 Ubuntu 12.10 mysql-5.1 mysql-5.5 Multiple security issues were discovered in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Kedovskaya INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 Ubuntu 8.04 expat Expat could be made to cause a denial of service by consuming excessive CPU and memory resources. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 8.04 Ubuntu 8.04 is installed SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 openssl OpenSSL incorrectly disabled TLS 1.1 and TLS 1.2 in certain applications. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libraw LibRaw could be made to crash or run programs as your login if it opened a specially crafted file. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 subversion Several security issues were fixed in Subversion. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.04 Ubuntu 12.10 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.04 Ubuntu 12.10 puppet-common Puppet could be made to run programs if it received specially crafted network traffic. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libdmx Several security issues were fixed in libdmx. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 nova Nova could be made to not respond if passed specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 xorg-server The X.Org X server could be made to crash if a specially crafted input device was added. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 libKDcraw libKDcraw could be made to crash or run programs as your login if it opened a specially crafted file. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 linux-lts-quantal The system could be made to crash or run programs as an administrator if it received specially crafted network traffic. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 12.10 Ubuntu 13.04 telepathy-gabble Several security issues were fixed in telepathy-gabble. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxres Several security issues were fixed in libxres. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.04 Ubuntu 12.10 Mesa could be made to crash or run programs as your login if it received specially crafted input. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libfs Several security issues were fixed in libfs. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM Maria Mikhno ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 11.04 Ubuntu 11.10 Ubuntu 10.04 raptor Applications using Raptor could be made to expose sensitive information or run programs as your login if they opened a specially crafted file. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Maria Kedovskaya DRAFT INTERIM ACCEPTED Maria Kedovskaya INTERIM Sergey Artykhov ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxrandr libxrandr-lts-quantal Several security issues were fixed in libxrandr. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxfixes Several security issues were fixed in libxfixes. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.04 Ubuntu 12.10 python-swift Multiple security issues were fixed in OpenStack Swift. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxrender Several security issues were fixed in libxrender. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxxf86dga Several security issues were fixed in libxxf86dga. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxv Several security issues were fixed in libxv. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.10 is installed SecPod Team DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 13.04 is installed SecPod Team DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 10.04 Ubuntu 11.04 Ubuntu 11.10 Ubuntu 12.04 Modsecurity ModSecurity before 2.6.6, when used with PHP, does not properly handle single quotes not at the beginning of a request parameter value in the Content-Disposition field of a request with a multipart/form-data Content-Type header, which allows remote attackers to bypass filtering rules and perform other attacks such as cross-site scripting (XSS) attacks. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-5031 Gaurav Kumar DRAFT INTERIM ACCEPTED David Rothenberg INTERIM ACCEPTED ACCEPTED libapache-mod-security package is installed Gaurav Kumar DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 12.04 is installed Gaurav Kumar DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 modsecurity-apache package is installed Gaurav Kumar DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 11.10 Ubuntu 11.10 is installed SecPod Team DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 11.04 Ubuntu 11.04 is installed SecPod Team DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 10.04 Ubuntu 10.04 is installed SecPod Team DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED