USN-3623-1
ubuntu-release-upgrader vulnerability
No scoreFix available
It was discovered that ubuntu-release-upgrader did not correctly drop permissions before opening a browser to view the release notes. This update fixes the issue.
What each source reports
OSV No score
ubuntu-release-upgrader vulnerability
It was discovered that ubuntu-release-upgrader did not correctly drop permissions before opening a browser to view the release notes. This update fixes the issue.
- Record
USN-3623-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ubuntu-release-upgraderUbuntu:14.04:LTS |
before 1:0.220.10, plus listed versions 1:0.2051:0.2061:0.2071:0.2081:0.209 Show 24 moreShow less1:0.2101:0.2111:0.2121:0.2131:0.2141:0.2151:0.2161:0.216.11:0.2171:0.2181:0.2191:0.219.11:0.219.21:0.219.31:0.219.41:0.2201:0.220.11:0.220.21:0.220.41:0.220.51:0.220.61:0.220.71:0.220.81:0.220.9 |
1:0.220.10 |
ubuntu-release-upgraderUbuntu:16.04:LTS |
before 1:16.04.25, plus listed versions 1:15.10.131:16.04.11:16.04.21:16.04.31:16.04.4 Show 17 moreShow less1:16.04.61:16.04.71:16.04.81:16.04.101:16.04.111:16.04.121:16.04.141:16.04.151:16.04.161:16.04.171:16.04.181:16.04.191:16.04.201:16.04.211:16.04.221:16.04.231:16.04.24 |
1:16.04.25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-3623-1 is a vulnerability with no CVSS score yet in ubuntu-release-upgrader, published April 9, 2018. No source lists public exploit code. Fixed in ubuntu-release-upgrader 1:0.220.10.