Ubuntu rxvt-unicode allows arbitrary code execution
An attacker can execute arbitrary code in the terminal by displaying specially crafted text.
Stories per day · 30 days
6 stories, newest first · one card per story
Stories tagged #security-notice
Sprockets allows access to files outside root
A remote attacker can access files outside the application's root directory.
Ubuntu Relax-and-Recover allows sensitive information access
A local attacker can obtain sensitive information from the world-readable initrd.
Ubuntu libuser allows denial of service and privilege escalation
A local attacker can corrupt the passwd file or escalate privileges.
USN-8853-1: OpenSBI vulnerability
Ubuntu patched an OpenSBI flaw that can let attackers cause a denial of service.
USN-8571-2: Apache HTTP Server regression
Ubuntu issues USN-8571-2 fixing an Apache HTTP Server regression that prevented startup when HTTP/2 proxying was enabled.