Canonical Security Advisories: January 2015 — Canonical Security Advisories

UBUNTU-CVE-2013-2131

USNExploitedCISA KEV listedLOW2015-01-04

CVEs:CVE-2013-2131

Affected products

Product	Status	Vendor	Package	Ecosystem
rrdtool	affected	Ubuntu:18.04:LTS	rrdtool	—
rrdtool	affected	Ubuntu:22.04:LTS	rrdtool	—
rrdtool	affected	Ubuntu:20.04:LTS	rrdtool	—
rrdtool	affected	Ubuntu:14.04:LTS	rrdtool	—

Upstream advisory

USN-2458-1

USNExploitedVulnCheck KEV listedHIGH2015-01-14

firefox vulnerabilities

CVEs:CVE-2014-8634 CVE-2014-8635 CVE-2014-8636 CVE-2014-8637 CVE-2014-8638 CVE-2014-8639 CVE-2014-8640 CVE-2014-8641 CVE-2014-8642

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2014-8636

USNExploitedVulnCheck KEV listedMEDIUM2015-01-14

CVEs:CVE-2014-8636

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—

Upstream advisory

USN-2487-1

USNWeaponized exploitHIGH2015-01-28

openjdk-7 vulnerabilities

CVEs:CVE-2014-3566 CVE-2014-6585 CVE-2014-6587 CVE-2014-6591 CVE-2014-6593 CVE-2014-6601 CVE-2015-0383 CVE-2015-0395 CVE-2015-0400 CVE-2015-0407 CVE-2015-0408 CVE-2015-0410 CVE-2015-0412 CVE-2015-0413

Affected products

Product	Status	Vendor	Package	Ecosystem
openjdk-7	affected	Ubuntu:14.04:LTS	openjdk-7	—

Upstream advisory

USN-2459-1

USNWeaponized exploitHIGH2015-01-12

openssl vulnerabilities

CVEs:CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-8275 CVE-2015-0204 CVE-2015-0205 CVE-2015-0206

Affected products

Product	Status	Vendor	Package	Ecosystem
openssl	affected	Ubuntu:14.04:LTS	openssl	—

Upstream advisory

USN-2470-1

USNWeaponized exploitHIGH2015-01-14

git vulnerability

CVEs:CVE-2014-9390

Affected products

Product	Status	Vendor	Package	Ecosystem
git	affected	Ubuntu	—	—
git	affected	Ubuntu:14.04:LTS	git	—

Upstream advisory

USN-2452-1

USNWeaponized exploitNONE2015-01-07

nss vulnerability

CVEs:CVE-2014-1569

Affected products

Product	Status	Vendor	Package	Ecosystem
nss	affected	Ubuntu:14.04:LTS	nss	—

Upstream advisory

UBUNTU-CVE-2015-1419

USNActive exploitation (sightings)LOW2015-01-28

CVEs:CVE-2015-1419

Affected products

Product	Status	Vendor	Package	Ecosystem
vsftpd	affected	Ubuntu:14.04:LTS	vsftpd	—

Upstream advisory

UBUNTU-CVE-2014-9427

USNPoC exploitLOW2015-01-02

CVEs:CVE-2014-9427

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:14.04:LTS	php5	—

Upstream advisory

USN-2461-2

USNPoC exploit2015-01-12

libyaml-libyaml-perl vulnerability

CVEs:CVE-2014-9130

Affected products

Product	Status	Vendor	Package	Ecosystem
libyaml-libyaml-perl	affected	Ubuntu:14.04:LTS	libyaml-libyaml-perl	—

Upstream advisory

USN-2461-1

USNPoC exploitHIGH2015-01-12

libyaml vulnerability

CVEs:CVE-2014-9130

Affected products

Product	Status	Vendor	Package	Ecosystem
libyaml	affected	Ubuntu:14.04:LTS	libyaml	—

Upstream advisory

USN-2461-3

USNPoC exploit2015-01-12

pyyaml vulnerability

CVEs:CVE-2014-9130

Affected products

Product	Status	Vendor	Package	Ecosystem
pyyaml	affected	Ubuntu:14.04:LTS	pyyaml	—

Upstream advisory

USN-2479-1

USNPoC exploitHIGH2015-01-19

rpm vulnerabilities

CVEs:CVE-2013-6435 CVE-2014-8118

Affected products

Product	Status	Vendor	Package	Ecosystem
rpm	affected	Ubuntu:14.04:LTS	rpm	—

Upstream advisory

USN-2472-1

USNPoC exploit2015-01-14

unzip vulnerabilities

CVEs:CVE-2014-8139 CVE-2014-8140 CVE-2014-8141

Affected products

Product	Status	Vendor	Package	Ecosystem
unzip	affected	Ubuntu:14.04:LTS	unzip	—

Upstream advisory

USN-2456-1

USNPoC exploit2015-01-08

cpio vulnerabilities

CVEs:CVE-2010-0624 CVE-2014-9112

Affected products

Product	Status	Vendor	Package	Ecosystem
cpio	affected	Ubuntu:14.04:LTS	cpio	—

Upstream advisory

UBUNTU-CVE-2015-0312

USNPoC exploitMEDIUM2015-01-28

CVEs:CVE-2015-0312

Affected products

Product	Status	Vendor	Package	Ecosystem
flashplugin-nonfree	affected	Ubuntu:14.04:LTS	flashplugin-nonfree	—

Upstream advisory

USN-2474-1

USNPoC exploitNONE2015-01-15

curl vulnerability

CVEs:CVE-2014-8150

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:14.04:LTS	curl	—

Upstream advisory

UBUNTU-CVE-2014-8150

USNPoC exploitMEDIUM2015-01-08

CVEs:CVE-2014-8150

Affected products

Product	Status	Vendor	Package	Ecosystem
curl	affected	Ubuntu:14.04:LTS	curl	—

Upstream advisory

UBUNTU-CVE-2014-9428

USNPoC exploitMEDIUM2015-01-02

CVEs:CVE-2014-9428

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—
linux-lts-utopic	affected	Ubuntu:14.04:LTS	linux-lts-utopic	—

Upstream advisory

USN-2467-1

USNPoC exploit2015-01-13

linux-lts-utopic vulnerabilities

CVEs:CVE-2014-7841 CVE-2014-7842 CVE-2014-7843 CVE-2014-8884

Affected products

Product	Status	Vendor	Package	Ecosystem
linux-lts-utopic	affected	Ubuntu:14.04:LTS	linux-lts-utopic	—

Upstream advisory

USN-2466-1

USNPoC exploitHIGH2015-01-13

linux vulnerabilities

CVEs:CVE-2014-7841 CVE-2014-7842 CVE-2014-7843 CVE-2014-8884

Affected products

Product	Status	Vendor	Package	Ecosystem
linux	affected	Ubuntu:14.04:LTS	linux	—
linux	affected	Ubuntu	—	—

Upstream advisory

UBUNTU-CVE-2014-9601

USNPoC exploitLOW2015-01-16

CVEs:CVE-2014-9601

Affected products

Product	Status	Vendor	Package	Ecosystem
pillow	affected	Ubuntu:14.04:LTS	pillow	—

Upstream advisory

USN-2476-1

USNPoC exploit2015-01-26

oxide-qt vulnerabilities

CVEs:CVE-2014-7923 CVE-2014-7924 CVE-2014-7925 CVE-2014-7926 CVE-2014-7927 CVE-2014-7928 CVE-2014-7929 CVE-2014-7930 CVE-2014-7931 CVE-2014-7932 CVE-2014-7933 CVE-2014-7934 CVE-2014-7937 CVE-2014-7938 CVE-2014-7940 CVE-2014-7942 CVE-2014-7943 CVE-2014-7946 CVE-2014-7948 CVE-2015-1205 CVE-2015-1346

Affected products

Product	Status	Vendor	Package	Ecosystem
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

USN-2453-1

USNPoC exploit2015-01-07

mime-support vulnerability

CVEs:CVE-2014-7209

Affected products

Product	Status	Vendor	Package	Ecosystem
mime-support	affected	Ubuntu:14.04:LTS	mime-support	—

Upstream advisory

UBUNTU-CVE-2014-7209

USNPoC exploitMEDIUM2015-01-06

CVEs:CVE-2014-7209

Affected products

Product	Status	Vendor	Package	Ecosystem
mime-support	affected	Ubuntu:14.04:LTS	mime-support	—

Upstream advisory

UBUNTU-CVE-2015-1164

USNPoC exploitMEDIUM2015-01-21

CVEs:CVE-2015-1164

Affected products

Product	Status	Vendor	Package	Ecosystem
node-serve-static	affected	Ubuntu:16.04:LTS	node-serve-static	—
node-serve-static	affected	Ubuntu:18.04:LTS	node-serve-static	—

Upstream advisory

UBUNTU-CVE-2014-7923

USNPoC exploitMEDIUM2015-01-22

CVEs:CVE-2014-7923

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
icu	affected	Ubuntu:14.04:LTS	icu	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-7926

USNPoC exploitMEDIUM2015-01-22

CVEs:CVE-2014-7926

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
icu	affected	Ubuntu:14.04:LTS	icu	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

USN-2477-1

USNPoC exploitCRITICAL2015-01-19

libevent vulnerability

CVEs:CVE-2014-6272

Affected products

Product	Status	Vendor	Package	Ecosystem
libevent	affected	Ubuntu:14.04:LTS	libevent	—

Upstream advisory

UBUNTU-CVE-2014-6272

USNPoC exploitMEDIUM2015-01-06

CVEs:CVE-2014-6272

Affected products

Product	Status	Vendor	Package	Ecosystem
libevent	affected	Ubuntu:14.04:LTS	libevent	—

Upstream advisory

UBUNTU-CVE-2014-7940

USNPoC exploitMEDIUM2015-01-22

CVEs:CVE-2014-7940

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
icu	affected	Ubuntu:14.04:LTS	icu	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2015-0236

USNPoC exploitLOW2015-01-29

CVEs:CVE-2015-0236

Affected products

Product	Status	Vendor	Package	Ecosystem
libvirt	affected	Ubuntu:14.04:LTS	libvirt	—

Upstream advisory

UBUNTU-CVE-2014-4467

USNPoC exploitMEDIUM2015-01-28

CVEs:CVE-2014-4467

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—

Upstream advisory

USN-2484-1

USNEPSS <= 49%CRITICAL2015-01-26

unbound vulnerability

CVEs:CVE-2014-8602

Affected products

Product	Status	Vendor	Package	Ecosystem
unbound	affected	Ubuntu:14.04:LTS	unbound	—

Upstream advisory

USN-2483-1

USNEPSS <= 49%HIGH2015-01-26

jasper vulnerabilities

CVEs:CVE-2014-8137 CVE-2014-8138 CVE-2014-8157 CVE-2014-8158

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:14.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2014-8157

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-8157

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:14.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2014-8158

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-8158

Affected products

Product	Status	Vendor	Package	Ecosystem
jasper	affected	Ubuntu:14.04:LTS	jasper	—

Upstream advisory

UBUNTU-CVE-2015-1395

USNEPSS <= 49%2015-01-28

CVEs:CVE-2015-1395

Affected products

Product	Status	Vendor	Package	Ecosystem
patch	affected	Ubuntu:14.04:LTS	patch	—

Upstream advisory

USN-2480-1

USNEPSS <= 49%HIGH2015-01-22

mysql-5.5 vulnerabilities

CVEs:CVE-2014-6568 CVE-2015-0374 CVE-2015-0381 CVE-2015-0382 CVE-2015-0411 CVE-2015-0432

Affected products

Product	Status	Vendor	Package	Ecosystem
mysql-5.5	affected	Ubuntu:14.04:LTS	mysql-5.5	—

Upstream advisory

UBUNTU-CVE-2015-1351

USNEPSS <= 49%MEDIUM2015-01-08

CVEs:CVE-2015-1351

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:14.04:LTS	php5	—

Upstream advisory

UBUNTU-CVE-2014-9527

USNEPSS <= 49%MEDIUM2015-01-06

CVEs:CVE-2014-9527

Affected products

Product	Status	Vendor	Package	Ecosystem
libapache-poi-java	affected	Ubuntu:16.04:LTS	libapache-poi-java	—

Upstream advisory

UBUNTU-CVE-2015-1352

USNEPSS <= 49%MEDIUM2015-01-08

CVEs:CVE-2015-1352

Affected products

Product	Status	Vendor	Package	Ecosystem
php5	affected	Ubuntu:14.04:LTS	php5	—

Upstream advisory

USN-2473-1

USNEPSS <= 49%2015-01-14

coreutils vulnerabilities

CVEs:CVE-2009-4135 CVE-2014-9471

Affected products

Product	Status	Vendor	Package	Ecosystem
coreutils	affected	Ubuntu:14.04:LTS	coreutils	—

Upstream advisory

USN-2469-1

USNEPSS <= 49%2015-01-13

python-django vulnerabilities

CVEs:CVE-2015-0219 CVE-2015-0220 CVE-2015-0221 CVE-2015-0222

Affected products

Product	Status	Vendor	Package	Ecosystem
python-django	affected	Ubuntu:14.04:LTS	python-django	—

Upstream advisory

UBUNTU-CVE-2014-9597

USNEPSS <= 49%MEDIUM2015-01-21

CVEs:CVE-2014-9597

Affected products

Product	Status	Vendor	Package	Ecosystem
vlc	affected	Ubuntu:14.04:LTS	vlc	—

Upstream advisory

UBUNTU-CVE-2014-5352

USNEPSS <= 49%MEDIUM2015-01-21

CVEs:CVE-2014-5352

Affected products

Product	Status	Vendor	Package	Ecosystem
krb5	affected	Ubuntu:14.04:LTS	krb5	—

Upstream advisory

UBUNTU-CVE-2014-9421

USNEPSS <= 49%MEDIUM2015-01-21

CVEs:CVE-2014-9421

Affected products

Product	Status	Vendor	Package	Ecosystem
krb5	affected	Ubuntu:14.04:LTS	krb5	—

Upstream advisory

UBUNTU-CVE-2015-1196

USNEPSS <= 49%MEDIUM2015-01-21

CVEs:CVE-2015-1196

Affected products

Product	Status	Vendor	Package	Ecosystem
patch	affected	Ubuntu:14.04:LTS	patch	—

Upstream advisory

UBUNTU-CVE-2014-8738

USNEPSS <= 49%MEDIUM2015-01-15

CVEs:CVE-2014-8738

Affected products

Product	Status	Vendor	Package	Ecosystem
binutils	affected	Ubuntu:14.04:LTS	binutils	—

Upstream advisory

USN-2478-1

USNEPSS <= 49%HIGH2015-01-19

libssh vulnerability

CVEs:CVE-2014-8132

Affected products

Product	Status	Vendor	Package	Ecosystem
libssh	affected	Ubuntu:14.04:LTS	libssh	—

Upstream advisory

USN-2482-1

USNEPSS <= 49%HIGH2015-01-23

elfutils vulnerability

CVEs:CVE-2014-9447

Affected products

Product	Status	Vendor	Package	Ecosystem
elfutils	affected	Ubuntu:14.04:LTS	elfutils	—

Upstream advisory

UBUNTU-CVE-2014-9447

USNEPSS <= 49%MEDIUM2015-01-02

CVEs:CVE-2014-9447

Affected products

Product	Status	Vendor	Package	Ecosystem
elfutils	affected	Ubuntu:14.04:LTS	elfutils	—

Upstream advisory

UBUNTU-CVE-2014-9620

USNEPSS <= 49%LOW2015-01-21

CVEs:CVE-2014-9620

Affected products

Product	Status	Vendor	Package	Ecosystem
file	affected	Ubuntu:14.04:LTS	file	—

Upstream advisory

UBUNTU-CVE-2014-7928

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7928

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
libv8-3.14	affected	Ubuntu:18.04:LTS	libv8-3.14	—
libv8-3.14	affected	Ubuntu:16.04:LTS	libv8-3.14	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

USN-2481-1

USNEPSS <= 49%2015-01-22

samba vulnerability

CVEs:CVE-2014-8143

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:14.04:LTS	samba	—

Upstream advisory

UBUNTU-CVE-2014-8143

USNEPSS <= 49%MEDIUM2015-01-15

CVEs:CVE-2014-8143

Affected products

Product	Status	Vendor	Package	Ecosystem
samba	affected	Ubuntu:14.04:LTS	samba	—

Upstream advisory

UBUNTU-CVE-2014-7927

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7927

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-8641

USNEPSS <= 49%MEDIUM2015-01-13

CVEs:CVE-2014-8641

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2014-9330

USNEPSS <= 49%LOW2015-01-20

CVEs:CVE-2014-9330

Affected products

Product	Status	Vendor	Package	Ecosystem
tiff	affected	Ubuntu:14.04:LTS	tiff	—

Upstream advisory

UBUNTU-CVE-2014-8635

USNEPSS <= 49%MEDIUM2015-01-14

CVEs:CVE-2014-8635

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2014-9423

USNEPSS <= 49%LOW2015-01-21

CVEs:CVE-2014-9423

Affected products

Product	Status	Vendor	Package	Ecosystem
krb5	affected	Ubuntu:14.04:LTS	krb5	—

Upstream advisory

USN-2460-1

USNEPSS <= 49%HIGH2015-01-19

thunderbird vulnerabilities

CVEs:CVE-2014-8634 CVE-2014-8638 CVE-2014-8639

Affected products

Product	Status	Vendor	Package	Ecosystem
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2014-8634

USNEPSS <= 49%MEDIUM2015-01-13

CVEs:CVE-2014-8634

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—

Upstream advisory

USN-2450-1

USNEPSS <= 49%2015-01-05

strongswan vulnerability

CVEs:CVE-2014-9221

Affected products

Product	Status	Vendor	Package	Ecosystem
strongswan	affected	Ubuntu:14.04:LTS	strongswan	—

Upstream advisory

UBUNTU-CVE-2014-9638

USNEPSS <= 49%2015-01-23

CVEs:CVE-2014-9638

Affected products

Product	Status	Vendor	Package	Ecosystem
vorbis-tools	affected	Ubuntu:16.04:LTS	vorbis-tools	—

Upstream advisory

UBUNTU-CVE-2014-9639

USNEPSS <= 49%LOW2015-01-23

CVEs:CVE-2014-9639

Affected products

Product	Status	Vendor	Package	Ecosystem
vorbis-tools	affected	Ubuntu:16.04:LTS	vorbis-tools	—

Upstream advisory

UBUNTU-CVE-2014-8625

USNEPSS <= 49%LOW2015-01-20

CVEs:CVE-2014-8625

Affected products

Product	Status	Vendor	Package	Ecosystem
dpkg	affected	Ubuntu:Pro:14.04:LTS	dpkg	—

Upstream advisory

UBUNTU-CVE-2015-1038

USNEPSS <= 49%MEDIUM2015-01-21

CVEs:CVE-2015-1038

Affected products

Product	Status	Vendor	Package	Ecosystem
p7zip	affected	Ubuntu:14.04:LTS	p7zip	—

Upstream advisory

UBUNTU-CVE-2014-9622

USNEPSS <= 49%MEDIUM2015-01-21

CVEs:CVE-2014-9622

Affected products

Product	Status	Vendor	Package	Ecosystem
xdg-utils	affected	Ubuntu:14.04:LTS	xdg-utils	—

Upstream advisory

UBUNTU-CVE-2014-9640

USNEPSS <= 49%2015-01-23

CVEs:CVE-2014-9640

Affected products

Product	Status	Vendor	Package	Ecosystem
vorbis-tools	affected	Ubuntu:16.04:LTS	vorbis-tools	—

Upstream advisory

UBUNTU-CVE-2015-1396

USNEPSS <= 49%2015-01-28

CVEs:CVE-2015-1396

Affected products

Product	Status	Vendor	Package	Ecosystem
patch	affected	Ubuntu:14.04:LTS	patch	—

Upstream advisory

UBUNTU-CVE-2014-9621

USNEPSS <= 49%LOW2015-01-21

CVEs:CVE-2014-9621

Affected products

Product	Status	Vendor	Package	Ecosystem
file	affected	Ubuntu:14.04:LTS	file	—

Upstream advisory

UBUNTU-CVE-2014-9556

USNEPSS <= 49%MEDIUM2015-01-30

CVEs:CVE-2014-9556

Affected products

Product	Status	Vendor	Package	Ecosystem
cabextract	affected	Ubuntu:Pro:14.04:LTS	cabextract	—
libmspack	affected	Ubuntu:Pro:14.04:LTS	libmspack	—

Upstream advisory

UBUNTU-CVE-2014-7933

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7933

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
libav	affected	Ubuntu:14.04:LTS	libav	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-4476

USNEPSS <= 49%MEDIUM2015-01-28

CVEs:CVE-2014-4476

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—

Upstream advisory

UBUNTU-CVE-2014-4477

USNEPSS <= 49%MEDIUM2015-01-28

CVEs:CVE-2014-4477

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—

Upstream advisory

UBUNTU-CVE-2014-4479

USNEPSS <= 49%MEDIUM2015-01-28

CVEs:CVE-2014-4479

Affected products

Product	Status	Vendor	Package	Ecosystem
qtwebkit-opensource-src	affected	Ubuntu:16.04:LTS	qtwebkit-opensource-src	—
qtwebkit-source	affected	Ubuntu:16.04:LTS	qtwebkit-source	—

Upstream advisory

UBUNTU-CVE-2014-9422

USNEPSS <= 49%MEDIUM2015-01-21

CVEs:CVE-2014-9422

Affected products

Product	Status	Vendor	Package	Ecosystem
krb5	affected	Ubuntu:14.04:LTS	krb5	—

Upstream advisory

UBUNTU-CVE-2014-7939

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7939

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2015-0361

USNEPSS <= 49%MEDIUM2015-01-07

CVEs:CVE-2015-0361

Affected products

Product	Status	Vendor	Package	Ecosystem
xen	affected	Ubuntu:14.04:LTS	xen	—

Upstream advisory

UBUNTU-CVE-2014-9604

USNEPSS <= 49%MEDIUM2015-01-16

CVEs:CVE-2014-9604

Affected products

Product	Status	Vendor	Package	Ecosystem
libav	affected	Ubuntu:14.04:LTS	libav	—

Upstream advisory

UBUNTU-CVE-2014-8640

USNEPSS <= 49%MEDIUM2015-01-14

CVEs:CVE-2014-8640

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2012-6684

USNEPSS <= 49%MEDIUM2015-01-08

CVEs:CVE-2012-6684

Affected products

Product	Status	Vendor	Package	Ecosystem
ruby-redcloth	affected	Ubuntu:18.04:LTS	ruby-redcloth	—
ruby-redcloth	affected	Ubuntu:16.04:LTS	ruby-redcloth	—

Upstream advisory

UBUNTU-CVE-2015-0217

USNEPSS <= 49%MEDIUM2015-01-19

CVEs:CVE-2015-0217

Affected products

Product	Status	Vendor	Package	Ecosystem
moodle	affected	Ubuntu:16.04:LTS	moodle	—
moodle	affected	Ubuntu:18.04:LTS	moodle	—

Upstream advisory

UBUNTU-CVE-2014-8637

USNEPSS <= 49%MEDIUM2015-01-14

CVEs:CVE-2014-8637

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2013-7252

USNEPSS <= 49%LOW2015-01-18

CVEs:CVE-2013-7252

Affected products

Product	Status	Vendor	Package	Ecosystem
kde-runtime	affected	Ubuntu:14.04:LTS	kde-runtime	—

Upstream advisory

UBUNTU-CVE-2015-1370

USNEPSS <= 49%MEDIUM2015-01-27

CVEs:CVE-2015-1370

Affected products

Product	Status	Vendor	Package	Ecosystem
node-marked	affected	Ubuntu:16.04:LTS	node-marked	—

Upstream advisory

UBUNTU-CVE-2014-8153

USNEPSS <= 49%MEDIUM2015-01-08

CVEs:CVE-2014-8153

Affected products

Product	Status	Vendor	Package	Ecosystem
neutron	affected	Ubuntu:14.04:LTS	neutron	—

Upstream advisory

UBUNTU-CVE-2014-7944

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7944

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2014-8639

USNEPSS <= 49%MEDIUM2015-01-13

CVEs:CVE-2014-8639

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—
thunderbird	affected	Ubuntu:14.04:LTS	thunderbird	—

Upstream advisory

UBUNTU-CVE-2014-7937

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7937

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2015-1205

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2015-1205

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-7931

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7931

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
libv8-3.14	affected	Ubuntu:16.04:LTS	libv8-3.14	—
libv8-3.14	affected	Ubuntu:18.04:LTS	libv8-3.14	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-7945

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7945

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
openjpeg2	affected	Ubuntu:16.04:LTS	openjpeg2	—
vxl	affected	Ubuntu:16.04:LTS	vxl	—

Upstream advisory

UBUNTU-CVE-2014-7925

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7925

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-7934

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7934

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-7947

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7947

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
openjpeg2	affected	Ubuntu:16.04:LTS	openjpeg2	—
vxl	affected	Ubuntu:16.04:LTS	vxl	—

Upstream advisory

UBUNTU-CVE-2015-0214

USNEPSS <= 49%MEDIUM2015-01-19

CVEs:CVE-2015-0214

Affected products

Product	Status	Vendor	Package	Ecosystem
moodle	affected	Ubuntu:18.04:LTS	moodle	—
moodle	affected	Ubuntu:16.04:LTS	moodle	—

Upstream advisory

UBUNTU-CVE-2015-1194

USNEPSS <= 49%LOW2015-01-21

CVEs:CVE-2015-1194

Affected products

Product	Status	Vendor	Package	Ecosystem
pax	affected	Ubuntu:25.10	pax	—
pax	affected	Ubuntu:16.04:LTS	pax	—
pax	affected	Ubuntu:22.04:LTS	pax	—
pax	affected	Ubuntu:14.04:LTS	pax	—
pax	affected	Ubuntu:24.04:LTS	pax	—
pax	affected	Ubuntu:18.04:LTS	pax	—
pax	affected	Ubuntu:20.04:LTS	pax	—

Upstream advisory

UBUNTU-CVE-2014-7924

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7924

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2015-0215

USNEPSS <= 49%MEDIUM2015-01-19

CVEs:CVE-2015-0215

Affected products

Product	Status	Vendor	Package	Ecosystem
moodle	affected	Ubuntu:18.04:LTS	moodle	—
moodle	affected	Ubuntu:16.04:LTS	moodle	—

Upstream advisory

UBUNTU-CVE-2015-1029

USNEPSS <= 49%MEDIUM2015-01-16

CVEs:CVE-2015-1029

Affected products

Product	Status	Vendor	Package	Ecosystem
puppet-module-puppetlabs-stdlib	affected	Ubuntu:16.04:LTS	puppet-module-puppetlabs-stdlib	—

Upstream advisory

UBUNTU-CVE-2014-7946

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7946

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-7929

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7929

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-7930

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7930

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-7932

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7932

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-7935

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7935

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2014-7938

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7938

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-7941

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7941

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2014-7943

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7943

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-7942

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7942

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-8642

USNEPSS <= 49%LOW2015-01-14

CVEs:CVE-2014-8642

Affected products

Product	Status	Vendor	Package	Ecosystem
firefox	affected	Ubuntu:14.04:LTS	firefox	—

Upstream advisory

UBUNTU-CVE-2015-1193

USNEPSS <= 49%LOW2015-01-21

CVEs:CVE-2015-1193

Affected products

Product	Status	Vendor	Package	Ecosystem
pax	affected	Ubuntu:22.04:LTS	pax	—
pax	affected	Ubuntu:25.10	pax	—
pax	affected	Ubuntu:16.04:LTS	pax	—
pax	affected	Ubuntu:14.04:LTS	pax	—
pax	affected	Ubuntu:24.04:LTS	pax	—
pax	affected	Ubuntu:18.04:LTS	pax	—
pax	affected	Ubuntu:20.04:LTS	pax	—

Upstream advisory

USN-2455-1

USNEPSS <= 49%2015-01-07

bsd-mailx vulnerability

CVEs:CVE-2014-7844

Affected products

Product	Status	Vendor	Package	Ecosystem
bsd-mailx	affected	Ubuntu:14.04:LTS	bsd-mailx	—

Upstream advisory

UBUNTU-CVE-2015-1359

USNEPSS <= 49%MEDIUM2015-01-27

CVEs:CVE-2015-1359

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2015-1192

USNEPSS <= 49%MEDIUM2015-01-21

CVEs:CVE-2015-1192

Affected products

Product	Status	Vendor	Package	Ecosystem
kgb	affected	Ubuntu:16.04:LTS	kgb	—

Upstream advisory

UBUNTU-CVE-2014-7936

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7936

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—

Upstream advisory

UBUNTU-CVE-2015-0212

USNEPSS <= 49%MEDIUM2015-01-19

CVEs:CVE-2015-0212

Affected products

Product	Status	Vendor	Package	Ecosystem
moodle	affected	Ubuntu:18.04:LTS	moodle	—
moodle	affected	Ubuntu:16.04:LTS	moodle	—

Upstream advisory

UBUNTU-CVE-2014-7948

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2014-7948

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2014-9494

USNEPSS <= 49%LOW2015-01-20

CVEs:CVE-2014-9494

Affected products

Product	Status	Vendor	Package	Ecosystem
rabbitmq-server	affected	Ubuntu:14.04:LTS	rabbitmq-server	—

Upstream advisory

UBUNTU-CVE-2015-1201

USNEPSS <= 49%MEDIUM2015-01-20

CVEs:CVE-2015-1201

Affected products

Product	Status	Vendor	Package	Ecosystem
privoxy	affected	Ubuntu:Pro:14.04:LTS	privoxy	—

Upstream advisory

UBUNTU-CVE-2015-1360

USNEPSS <= 49%MEDIUM2015-01-27

CVEs:CVE-2015-1360

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2015-1361

USNEPSS <= 49%MEDIUM2015-01-27

CVEs:CVE-2015-1361

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—

Upstream advisory

UBUNTU-CVE-2015-1346

USNEPSS <= 49%MEDIUM2015-01-22

CVEs:CVE-2015-1346

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser	affected	Ubuntu:14.04:LTS	chromium-browser	—
libv8-3.14	affected	Ubuntu:16.04:LTS	libv8-3.14	—
libv8-3.14	affected	Ubuntu:18.04:LTS	libv8-3.14	—
oxide-qt	affected	Ubuntu:14.04:LTS	oxide-qt	—