Ubuntu Developers - vulnerabilities (CVEs)

2 CVEs in 4 products, 0 in the last 30 days, newest from 2014-02-10.

Products

• Language-selector - 1 CVEs
• Obby - 1 CVEs
• Apt-xapian-index - 0 CVEs
• Systemd - 0 CVEs

Newest CVEs of Ubuntu Developers

• CVE-2011-4092 - CVSS 5.8 (medium), 2014-02-10: obby (aka libobby) does not verify SSL server certificates, which allows remote attackers to spoof servers via an arbitrary certificate.
• CVE-2013-1066 - CVSS 4.6 (medium), 2013-10-03: language-selector 0.110.x before 0.110.1, 0.90.x before 0.90.1, and 0.79.x before 0.79.4 does not properly use D-Bus for communication with a polkit…