canonical update-manager 1 vulnerabilities and exploits

(subscribe to this query)

DistUpgrade/DistUpgradeFetcherCore.py in Update Manager prior to 1:0.87.31.1, 1:0.134.x prior to 1:0.134.11.1, 1:0.142.x prior to 1:0.142.23.1, 1:0.150.x prior to 1:0.150.5.1, and 1:0.152.x prior to 1:0.152.25.5 on Ubuntu 8.04 up to and including 11.10 does not verify the GPG sig...

Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 11.04 Canonical Update-manager 1 Canonical Ubuntu Linux 11.10 Canonical Update-manager Canonical Ubuntu Linux 10.04

DistUpgrade/DistUpgradeViewKDE.py in Update Manager prior to 1:0.87.31.1, 1:0.134.x prior to 1:0.134.11.1, 1:0.142.x prior to 1:0.142.23.1, 1:0.150.x prior to 1:0.150.5.1, and 1:0.152.x prior to 1:0.152.25.5 does not properly create temporary files, which allows local users to ob...

Canonical Ubuntu Linux 10.10 Canonical Ubuntu Linux 8.04 Canonical Ubuntu Linux 11.04 Canonical Update-manager 1 Canonical Ubuntu Linux 11.10 Canonical Update-manager Canonical Ubuntu Linux 10.04

DistUpgrade/DistUpgradeMain.py in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uses weak permissions for (1) apt-clone_system_state.tar.gz and (2) system_state.tar.gz, which allows local users to obtain repository credentials.

Canonical Ubuntu Linux 11.04 Gnome Update-manager-core 0.152.25.10 Gnome Update-manager-core 0.150.5.2 Canonical Ubuntu Linux 11.10 Canonical Ubuntu Linux 12.04 Gnome Update-manager-core 0.156.14.3

The Apport hook in Update Manager as used by Ubuntu 12.04 LTS, 11.10, and 11.04 uploads certain system state archive files when reporting bugs to Launchpad, which allows remote malicious users to read repository credentials by viewing a public bug report.

Canonical Ubuntu Linux 11.04 Canonical Ubuntu Linux 11.10 Canonical Ubuntu Linux 12.04

The Apport hook (DistUpgradeApport.py) in Update Manager, as used by Ubuntu 12.04 LTS, 11.10, and 11.04, uploads the /var/log/dist-upgrade directory when reporting bugs to Launchpad, which allows remote malicious users to read repository credentials by viewing a public bug report...

Canonical Ubuntu Linux 11.04 Canonical Ubuntu Linux 11.10 Canonical Ubuntu Linux 12.04

Race condition in mm/gup.c in the Linux kernel 2.x up to and including 4.x prior to 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka ...

Canonical Ubuntu Linux 16.10 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 12.04 Linux Linux Kernel Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 6.0 Redhat Enterprise Linux Tus 6.5 Redhat Enterprise Linux Eus 6.7 Redhat Enterprise Linux Long Life 5.6 Redhat Enterprise Linux Aus 6.4 Redhat Enterprise Linux 5 Redhat Enterprise Linux Long Life 5.9 Redhat Enterprise Linux Aus 6.2 Redhat Enterprise Linux Eus 7.1 Redhat Enterprise Linux Eus 6.6 Redhat Enterprise Linux Aus 6.5 Debian Debian Linux 8.0 Debian Debian Linux 7.0

5 EDB exploits183 Github repositories6 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook