{"id":"USN-3623-1","aliases":[],"status":"published","title":"ubuntu-release-upgrader vulnerability","description":"It was discovered that ubuntu-release-upgrader did not correctly drop\npermissions before opening a browser to view the release notes. This update\nfixes the issue.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-04-09T16:50:18Z","modified":"2026-02-10T04:41:19Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"ubuntu-release-upgrader","fixed_in":["1:0.220.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ubuntu-release-upgrader","fixed_in":["1:16.04.25"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ubuntu-release-upgrader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.220.10"}]}],"versions":["1:0.205","1:0.206","1:0.207","1:0.208","1:0.209","1:0.210","1:0.211","1:0.212","1:0.213","1:0.214","1:0.215","1:0.216","1:0.216.1","1:0.217","1:0.218","1:0.219","1:0.219.1","1:0.219.2","1:0.219.3","1:0.219.4","1:0.220","1:0.220.1","1:0.220.2","1:0.220.4","1:0.220.5","1:0.220.6","1:0.220.7","1:0.220.8","1:0.220.9"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ubuntu-release-upgrader","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:16.04.25"}]}],"versions":["1:15.10.13","1:16.04.1","1:16.04.2","1:16.04.3","1:16.04.4","1:16.04.6","1:16.04.7","1:16.04.8","1:16.04.10","1:16.04.11","1:16.04.12","1:16.04.14","1:16.04.15","1:16.04.16","1:16.04.17","1:16.04.18","1:16.04.19","1:16.04.20","1:16.04.21","1:16.04.22","1:16.04.23","1:16.04.24"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-3623-1","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1174007","tags":["report"]}],"sources":{"osv":[{"id":"USN-3623-1","title":"ubuntu-release-upgrader vulnerability","description":"It was discovered that ubuntu-release-upgrader did not correctly drop\npermissions before opening a browser to view the release notes. This update\nfixes the issue.\n","status":"published","published":"2018-04-09T16:50:18Z","modified":"2026-02-10T04:41:19Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}