The OVAL Repository 5.4 2015-09-03T06:51:38.849-04:00 Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 jbigkit JBIG-KIT could be made to crash or run programs if it processed a specially crafted image file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM Sergey Artykhov ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM Sergey Artykhov ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 dpkg A malicious source package could write files outside the unpack directory. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 dpkg A malicious source package could write files outside the unpack directory. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxfont Several security issues were fixed in libXfont. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxml2 libxml2 could be made to consume resources if it processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 quantum OpenStack Quantum could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 elfutils elfutils could be made to crash or run programs if it processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 openssl OpenSSL could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM Sergey Artykhov ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 swift OpenStack Swift would allow unintended access to files over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 openssh A malicious server could bypass OpenSSH SSHFP DNS record checking. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-django Several security issues were fixed in Django. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 cups CUPS could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 curl Several security issues were fixed in curl. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 cinder OpenStack Cinder could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 openssl OpenSSL could be made to expose sensitive information over the network, possibly including private keys. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-django USN-2169-1 introduced a regression in Django. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 dovecot Dovecot could be made to stop responding if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM Sergey Artykhov ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-imaging Python Imaging Library could be made to overwrite or expose files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 mysql-5.5 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-django Django applications could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 openjdk-7 Several security issues were fixed in OpenJDK 7. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 nss NSS could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libyaml LibYAML could be made to crash or run programs if it opened a specially crafted YAML document. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 udisks udisks2 UDisks could be made to manipulate directories as the administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 net-snmp Net-SNMP could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 freeradius Several security issues were fixed in FreeRADIUS. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 openssh OpenSSH incorrectly handled environment restrictions with wildcards. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 gnutls26 GnuTLS incorrectly validated certain intermediate certificates. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 php5 Several security issues were fixed in PHP. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 tomcat7 tomcat6 Several security issues were fixed in Tomcat. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 postgresql-9.1 postgresql-8.4 Several security issues were fixed in PostgreSQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 sudo Several security issues were fixed in Sudo. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 file File could be made to crash if it processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 gtk+3.0 This update provides a compatibility fix for GTK+. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 clamav ClamAV has been updated to a new version. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 php5 PHP could be made to crash if it processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 samba Samba did not properly enforce the password guessing protection mechanism. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 librsvg Librsvg could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 ca-certificates ca-certificates was updated to the 20130906 package. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 gnutls26 Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libyaml-libyaml-perl libyaml-libyaml-perl could be made to crash or run programs if it opened a specially crafted YAML file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno DEPRECATED DEPRECATED Ubuntu 12.10 Ubuntu 12.04 initramfs-tools initramfs-tools used incorrect mount options. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 file File could be made to crash if it processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 qemu qemu-kvm Several security issues were fixed in QEMU. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 icedtea-web IcedTea Web could be made to expose or alter sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python2.7 python3.3 python3.2 python2.6 Python could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 mutt The mutt mail client could be made to crash or run programs as your login if it opened a specially crafted email. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libssh A security issue was fixed in libssh. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 tiff LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 14.04 Ubuntu 14.04 is installed Maria Kedovskaya DRAFT INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 apache2 Apache HTTP server could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 firefox USN-2102-1 introduced a regression in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 imagemagick ImageMagick could be made to crash or run programs if it opened a specially crafted image file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 cups-filters cups-filters could be made to run programs as the lp user if it processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 qemu qemu-kvm Several security issues were fixed in QEMU. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 pidgin Several security issues were fixed in Pidgin. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 perl Perl could be made to run programs if it processed a specially crafted Locale::Maketext templates. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 maas The cluster could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 nspr NSPR could be made to crash or run programs if it received a specially crafted certificate. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 bind9 Bind could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 munin Several security issues were fixed in Munin. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 nss NSS could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 cups CUPS could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libvirt Several security issues were fixed in libvirt. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libgadu libgadu could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 curl libcurl could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libyaml USN-2098-1 introduced a regression in LibYAML. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 memcached Several security issues were fixed in Memcached. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 openjdk-7 Several security issues were fixed in OpenJDK 7. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 hplip Several security issues were fixed in HPLIP. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 libyaml LibYAML could be made to crash or run programs if it opened specially crafted yaml document. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 graphviz Graphviz could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 mysql-5.5 mysql-dfsg-5.1 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 devscripts devscripts could be made to run programs if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM Sergey Artykhov ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxfont libXfont could be made to crash or run programs as an administrator if it opened a specially crafted font file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 puppet Puppet could be made to overwrite files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 openssl Several security issues were fixed in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno DEPRECATED DEPRECATED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 openssl Applications could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxt Several security issues were fixed in libxt. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 pymongo PyMongo could be made to crash under certain conditions. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox USN-1890-1 introduced a regression in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 puppet USN-2077-1 introduced a regression in Puppet. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 curl Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libjpeg-turbo libjpeg6b libjpeg and libjpeg-turbo could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 gimp GIMP could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 qt4-x11 qtbase-opensource-src Qt could be made to consume resources and hang if it processed XML data. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 nss Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 horizon Horizon could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 ruby1.8 ruby1.9.1 Ruby could be made to hang if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Mikhno DEPRECATED DEPRECATED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 samba Several security issues were fixed in Samba. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 curl Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 gnupg GnuPG could expose sensitive information when performing decryption. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 curl USN-2048-1 introduced a regression in curl. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 php5 Several security issues were fixed in PHP. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 pixman Pixman could be made to crash if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Several security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 ruby1.8 ruby1.9.1 Several security issues were fixed in Ruby. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 nss Several security issues were fixed in NSS. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 keystone Keystone would improperly remove roles when it was configured to use the LDAP backend. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 glance Glance could be made to expose sensitive information over the network under certain circumstances. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 python3.3 Several security issues were fixed in Python. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 mysql-5.5 mysql-dfsg-5.1 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-django Several security issues were fixed in Django. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 apt-xapian-index apt-xapian-index could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux The system could be made to expose sensitive information to a local user. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 ubuntu-system-service ubuntu-system-service could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 hplip HPLIP could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 The system could be made to expose sensitive information to a local user. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 swift Swift could cause the system to crash if it received specially crafted requests over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 samba Samba could be made to hang if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 rtkit RealtimeKit could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 language-selector language-selector could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 keystone Keystone would improperly grant access to invalid tokens under certain circumstances. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libraw LibRaw could be made to crash if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 software-properties Software Properties could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 maas MAAS could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 usb-creator usb-creator could be tricked into bypassing polkit authorizations. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 suds Suds could be made to overwrite files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 nas Several security issues were fixed in Network Audio System (NAS). Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 pyopenssl Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 icu ICU could be made to crash or run programs as your login if it processed specially crafted data. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 gnupg gnupg2 Several security issues were fixed in GnuPG. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 eglibc Several security issues were fixed in the GNU C Library. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 txt2man txt2man could be made to overwrite files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 apport Apport could be made to expose privileged information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libvirt Several security issues were fixed in libvirt. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 policykit-1 polkit could be tricked into giving out improper authorization. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 xorg-server xorg-server-lts-quantal xorg-server-lts-raring The X.Org X server could be made to crash or run programs as an administrator if it received specially crafted input. Sergey Artykhov DRAFT INTERIM Maria Kedovskaya ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 php5 Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 nova Nova could be made to crash if it received specially crafted network requests. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 hplip HPLIP could be made to overwrite files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 vino Vino could be made to hang if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 imagemagick ImageMagick could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 python3.2 Several security issues were fixed in Python. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.10 Ubuntu 13.10 is installed Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 python-httplib2 Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 bind9 Bind could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 php5 Several security issues were fixed in PHP. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 openjdk-7 Several security issues were fixed in OpenJDK 7. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 python2.7 Several security issues were fixed in Python. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 mysql-5.5 mysql-dfsg-5.1 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 file-roller File Roller could be made to create or overwrite files. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 nvidia-graphics-drivers nvidia-graphics-drivers-updates nvidia-settings nvidia-settings-updates NVIDIA graphics drivers could be made to run programs as an administrator 2E Software Description: - nvidia-graphics-drivers: NVIDIA binary Xorg driver - nvidia-graphics-drivers-updates: NVIDIA binary Xorg driver - nvidia-settings: Tool for configuring the NVIDIA graphics driver - nvidia-settings-updates: Tool for configuring the NVIDIA graphics drive r Details: It was discovered that the NVIDIA graphics drivers incorrectly handled large ARGB cursors. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 openssl Several security issues were fixed in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 curl libcurl could be made to crash or run programs as your login if it receiv ed specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 tiff LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxml2 Several security issues were fixed in libxml2. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 postgresql-9.1 postgresql-8.4 postgresql-8.3 Several security issues were fixed in PostgreSQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxml2 USN-1904-1 introduced a regression in libxml2. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 poppler Applications using poppler could be made to crash or possibly run program s as your login if they opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 cinder Cinder could be made to crash if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 libssh libssh could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 openssl Several security issues were fixed in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 nova Nova could be made to crash the system if instances used a specially crafted image. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 clamav Several security issues were fixed in ClamAV. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 pidgin Several security issues were fixed in Pidgin. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox USN-1681-1 introduced a regression in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 xorg-server xorg-server-lts-quantal The X server could be made to reveal keystrokes of other users. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 nova Two security issues were fixed in Nova. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 unity-firefox-extension This update provides a compatible version of Unity Firefox Extension for Firefox 20. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 kde4libs KDE-Libs could be made to expose web credentials. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 apache2 Several security issues were fixed in the Apache HTTP Server. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 gnutls26 gnutls13 GnuTLS could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 rpm RPM could incorrectly validate package signatures. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 glance Glance could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 tomcat7 tomcat6 Several security issues were fixed in Tomcat. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 curl Applications using libcurl could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 perl Perl could be made to stop responding if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 bind9 Bind could be made to consume memory or crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 icedtea-web Two security issues were fixed in IcedTea-Web. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 ruby1.9.1 Several security issues were fixed in Ruby. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Several security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 openjdk-7 OpenJDK could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux The system could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 freetype FreeType could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 icedtea-web IcedTea Web updated to work with new OpenJDK 7. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Thunderbird could be made to crash or run programs as your login. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 vino Vino could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 boost1.49 Boost incorrectly validated certain UTF-8 sequences. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 dbus-glib An attacker could send crafted input to applications using DBus-GLib and possibly escalate privileges. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 sudo Sudo could be made to run programs as the administrator without a passwor d prompt. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 lcms2 Little CMS could be made to crash if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 gnome-online-accounts GNOME Online Accounts could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 openjdk-7 openjdk-6 Several security issues were fixed in OpenJDK. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 haproxy HAProxy could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 tomcat7 tomcat6 Several security issues were fixed in Tomcat. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 curl curl could be made to crash or run programs if it opened a malicious URL. Software Description: - curl: HTTP, HTTPS, and FTP client and client libraries Details: It was discovered that curl incorrectly handled SASL authentication when communicating over POP3, SMTP or IMAP. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 libvirt libvirt could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 keystone Under certain configurations, Keystone would allow unintended access over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 perl Perl programs could be made to crash or run programs if they receive specially crafted network traffic or other input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 telepathy-idle telepathy-idle could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 squid3 squid squid-cgi could consume excessive system resources, leading to a denial of service attack on it and other hosted services. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 remote-login-service Remote Login Service could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 libxml2 libxml2 could be made to hang if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 bind9 Bind could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 gnome-screensaver gnome-screensaver would allow unintended access to the user session. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 mysql-5.5 mysql-5.1 mysql-dfsg-5.1 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 python-keyring Several security issues were fixed in Python Keyring. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 openjdk-7 Several security issues were fixed in OpenJDK 7. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 openjdk-7 OpenJDK 7 could be made to crash or run programs as your login if it opened a specially crafted Java applet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 python-django Django could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox USN-1681-1 introduced a regression in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 nova Nova could be made to crash if it received specially crafted input. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 glance Glance could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 python-django Several security issues were fixed in Django. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 apache2 Several security issues were fixed in the Apache HTTP server. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 The system could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 The system could be made to crash or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 python-django A testsuite regression was fixed in Django. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 nss NSS could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux USN-1699-1 introduced a regression in the Linux kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 openjdk-7 openjdk-6 Several security issues were fixed in OpenJDK. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 cups cupsys CUPS could be made to read files or run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 php5 PHP could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 lynx-cur Two security issues were fixed in Lynx. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 firefox Several security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 openjdk-7 openjdk-6 Several security issues were fixed in OpenJDK. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 nova Nova volume could be made to expose volumes from other users. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 keystone Keystone would allow unintended access over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 munin Several security issues were fixed in Munin. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libmodule-signature-perl Module::Signature could be made to run programs if it verified a signatur e. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 libunity-webapps libunity-webapps could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 qemu-kvm QEMU could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 apache2 Several security issues were fixed in the Apache HTTP Server. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 evolution-data-server Evolution would sometimes encrypt email to the wrong recipient. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 ubufox unity-firefox-extension This update provides compatible packages for Firefox 23. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 nova USN-1831-1 introduced a regression in OpenStack Nova. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 qt4-x11 Several security issues were fixed in Qt. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 libxslt Applications using libxslt could be made to crash if they processed a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux The system could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 glance Glance could be made to delete arbitrary images. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 tiff LibTIFF could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 ruby1.9.1 Several security issues were fixed in Ruby. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 glance Glance could be made to delete arbitrary images. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 libimobiledevice libimobiledevice could be made to overwrite files as the administrator, or access device keys. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 unity-firefox-extension unity-firefox-extension could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 ruby1.8 ruby1.9.1 An attacker could trick Ruby into trusting a rogue server. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 pam-xdg-support pam-xdg-support could be made to run programs as an administrator. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 mysql-5.5 mysql-5.1 mysql-dfsg-5.1 Several security issues were fixed in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 nspr NSPR update to work with the new NSS. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 ubufox This update provides compatible ubufox packages for the latest Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 nspr NSPR update to work with the new NSS. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Several security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 keystone Keystone could be made to fill server disks with error messages. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 postgresql-9.1 postgresql-8.4 postgresql-8.3 PostgreSQL could be made to crash if it received specially crafted input. Software Description: - postgresql-9.1: Object-relational SQL database - postgresql-8.4: Object-relational SQL database - postgresql-8.3: Object-relational SQL database Details: Sumit Soni discovered that PostgreSQL incorrectly handled calling a certa in internal function with invalid arguments. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 Ubuntu 10.04 exim4 Exim could be made to run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 apt An attacker could trick APT into installing altered packages. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 libxml2 Applications using libxml2 could be made to crash or run programs as your login if they opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 puppet Several security issues were fixed in Puppet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 nova Nova could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 gnupg libgcrypt11 GnuPG and Libgcrypt could be made to expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 libssh linssh could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 nss Fraudulent security certificates could allow sensitive information to be exposed when accessing the Internet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 USN-1700-1 introduced a regression in the Linux kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 transmission Transmission could be made to crash or run programs if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 ruby1.8 Ruby could allow excessive access in untrusted programs. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 11.04 python3.2 Several security issues were fixed in Python 3.2. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 11.04 Ubuntu 11.04 is installed SecPod Team DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 firefox Due to a regression, Firefox might crash or freeze under normal use. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 Ubuntu 8.04 gnupg gnupg2 GnuPG could be made to corrupt the keyring if it imported a specially crafted key. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 8.04 Ubuntu 8.04 is installed SecPod Team DRAFT INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Several security issues were fixed in Firefox. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 keystone Keystone would allow unintended access to files over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 firefox Regressions were introduced in the last Firefox update. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 openssl USN-1732-1 introduced a regression in OpenSSL. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 inkscape Several security issues were fixed in Inkscape. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 gimp GIMP could be made to crash or run programs as your login if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 thunderbird Multiple security issues were fixed in Thunderbird. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 clamav ClamAV could be made to crash or run programs if it opened a specially crafted file. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux The system could be made to crash under certain conditions. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 icedtea-web The Icedtea-Web plugin could be made to crash or run programs as your log in if it opened a specially crafted web page. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 apt APT could expose sensitive information. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 unity-firefox-extension unity-firefox-extension could be made to expose sensitive information over the network. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxext Several security issues were fixed in libxext. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 ruby1.8 ruby1.9.1 Ruby could be made to hang if it received specially crafted input. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux The system could be made to crash or run programs as an administrator if it received specially crafted network traffic. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 gnutls26 GnuTLS could be made to crash if it received specially crafted network traffic. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 keystone Keystone could be made to crash or expose sensitive information over the network. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxinerama Several security issues were fixed in libxp. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 moin MoinMoin could be made to run programs and overwrite files. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 puppet Several security issues were fixed in Puppet. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 xserver-xorg-video-openchrome xserver-xorg-video-openchrome-lts-quantal Several security issues were fixed in xserver-xorg-video-openchrome. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 The system could be made to crash under certain conditions. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 Ubuntu 11.10 Ubuntu 10.04 mysql-5.5 mysql-5.1 mysql-dfsg-5.1 MySQL could be made to run programs if it received specially crafted network traffic from an authenticated user. Sergey Artykhov DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libx11 Several security issues were fixed in libx11. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxcursor Several security issues were fixed in libxext. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxcb Several security issues were fixed in libxcb. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.04 Ubuntu 12.10 haproxy HAProxy could be made to crash if it received specially crafted network traffic. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux-ti-omap4 Several security issues were fixed in the kernel. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxi Several security issues were fixed in libxi. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxvmc Several security issues were fixed in libxvmc. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxtst Several security issues were fixed in libxtst. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 12.10 Ubuntu 13.04 dbus DBus could be made to crash if it received specially crafted input. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxp Several security issues were fixed in libxp. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxxf86vm Several security issues were fixed in libxxf86vm. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 linux Several security issues were fixed in the kernel. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 11.10 Ubuntu 12.04 Ubuntu 10.04 Ubuntu 12.10 mysql-5.1 mysql-5.5 Multiple security issues were discovered in MySQL. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Kedovskaya INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 11.10 Ubuntu 11.10 is installed SecPod Team DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libraw LibRaw could be made to crash or run programs as your login if it opened a specially crafted file. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 subversion Several security issues were fixed in Subversion. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.04 Ubuntu 12.10 firefox Firefox could be made to crash or run programs as your login if it opened a malicious website. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.04 Ubuntu 12.10 puppet-common Puppet could be made to run programs if it received specially crafted network traffic. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 13.04 keystone Keystone did not always properly verify expired PKI tokens or properly authenticate users. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libdmx Several security issues were fixed in libdmx. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 12.10 Ubuntu 13.04 telepathy-gabble Several security issues were fixed in telepathy-gabble. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxres Several security issues were fixed in libxres. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 ubuntu-release-upgrader ubuntu-release-upgrader would crash when attempting to upgrade. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.04 Ubuntu 12.10 Mesa could be made to crash or run programs as your login if it received specially crafted input. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libfs Several security issues were fixed in libfs. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM Maria Mikhno ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 thunderbird Several security issues were fixed in Thunderbird. Maria Kedovskaya DRAFT INTERIM ACCEPTED Maria Kedovskaya INTERIM Sergey Artykhov ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxrandr libxrandr-lts-quantal Several security issues were fixed in libxrandr. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxfixes Several security issues were fixed in libxfixes. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.04 Ubuntu 12.10 python-swift Multiple security issues were fixed in OpenStack Swift. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.04 libav Libav could be made to crash or run programs as your login if it opened a specially crafted file. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 Ubuntu 10.04 libxrender Several security issues were fixed in libxrender. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 10.04 Ubuntu 10.04 is installed SecPod Team DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxxf86dga Several security issues were fixed in libxxf86dga. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 12.10 Ubuntu 12.04 libxv Several security issues were fixed in libxv. Maria Kedovskaya DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.10 Ubuntu 12.10 is installed SecPod Team DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 13.04 Ubuntu 13.04 is installed SecPod Team DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED Ubuntu 12.04 Ubuntu 12.04 is installed Gaurav Kumar DRAFT INTERIM ACCEPTED Sergey Artykhov INTERIM ACCEPTED ACCEPTED