These are the Ubuntu security notices that affect the current supported releases of Ubuntu. These notices are also posted to the ubuntu-security-announce mailing list (list archive). To report a security vulnerability in an Ubuntu package, please contact the Ubuntu Security Team. You may also be interested in learning about Ubuntu security policies. For more details on a specific CVE or source package, please see the Ubuntu CVE Tracker.

You can also view the latest notices by subscribing to the RSS or the Atom feeds.

Latest notices

USN-542-1: poppler vulnerabilities

Secunia Research discovered several vulnerabilities in poppler. If a user were tricked into loading a specially crafted PDF file, a remote attacker could cause a denial of service or possibly execute arbitrary code with the user’s privileges in applications linked against poppler.

14 November 2007 | ubuntu-7.10, ubuntu-7.04, ubuntu-6.10, ubuntu-6.06-lts

USN-541-1: Emacs vulnerability

Drake Wilson discovered that Emacs did not correctly handle the safe mode of “enable-local-variables”. If a user were tricked into opening a specially crafted file while “enable-local-variables” was set to the non-default “:safe”, a remote attacker could execute arbitrary commands with the user’s privileges.

13 November 2007 | ubuntu-7.10

USN-540-1: flac vulnerability

Sean de Regge discovered that flac did not properly perform bounds checking in many situations. An attacker could send a specially crafted FLAC audio file and execute arbitrary code as the user or cause a denial of service in flac or applications that link against flac.

13 November 2007 | ubuntu-7.10, ubuntu-7.04, ubuntu-6.10, ubuntu-6.06-lts

USN-539-1: CUPS vulnerability

Alin Rad Pop discovered that CUPS did not correctly validate buffer lengths when processing IPP tags. Remote attackers successfully exploiting this vulnerability would gain access to the non-root CUPS user in Ubuntu 6.06 LTS, 6.10, and 7.04. In Ubuntu 7.10, attackers would be isolated by the AppArmor CUPS profile.

6 November 2007 | ubuntu-7.10, ubuntu-7.04, ubuntu-6.10, ubuntu-6.06-lts

USN-537-2: Compiz vulnerability

USN-537-1 fixed vulnerabilities in gnome-screensaver. The fixes were incomplete, and only reduced the scope of the vulnerability, without fully solving it. This update fixes related problems in compiz. Original advisory details: Jens Askengren discovered that gnome-screensaver became confused when running under Compiz, and could lose keyboard…

2 November 2007 | ubuntu-7.10

USN-538-1: libpng vulnerabilities

It was discovered that libpng did not properly perform bounds checking and comparisons in certain operations. An attacker could send a specially crafted PNG image and cause a denial of service in applications linked against libpng.

25 October 2007 | ubuntu-7.10, ubuntu-7.04, ubuntu-6.10, ubuntu-6.06-lts

USN-537-1: gnome-screensaver vulnerability

Jens Askengren discovered that gnome-screensaver became confused when running under Compiz, and could lose keyboard lock focus. A local attacker could exploit this to bypass the user’s locked screen saver.

23 October 2007 | ubuntu-7.10

USN-531-2: dhcp vulnerability

USN-531-1 fixed vulnerabilities in dhcp. The fixes were incomplete, and only reduced the scope of the vulnerability, without fully solving it. This update fixes the problem. Original advisory details: Nahuel Riva and Gerardo Richarte discovered that the DHCP server did not correctly handle certain client options. A remote attacker could send …

23 October 2007 | ubuntu-7.10, ubuntu-7.04, ubuntu-6.10, ubuntu-6.06-lts

USN-536-1: Thunderbird vulnerabilities

Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user’s privileges. (CVE-2007-5339, CVE-2007-5340) Flaws were discovered in the file upload form control. By tricking a user into opening a malicious web page, an attacker could…

23 October 2007 | ubuntu-7.10, ubuntu-7.04, ubuntu-6.10, ubuntu-6.06-lts

USN-535-1: Firefox vulnerabilities

Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user’s privileges. (CVE-2007-5336, CVE-2007-5339, CVE-2007-5340) Michal Zalewski discovered that the onUnload event handlers were incorrectly able to access information outside…

22 October 2007 | ubuntu-7.10, ubuntu-7.04, ubuntu-6.10, ubuntu-6.06-lts