Linux

🟡 Medium   ⏱ 10–30 min  Last verified: 22 November 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7117-1 Related CVEs: CVE-2024-10224 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 Upstream summary: Qualys discovered that needrestart passed unsanitized data to a library (libmodule-scandeps-perl) which expects safe input. A local attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 November 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6912-1 Related CVEs: CVE-2024-6714 https://bugs.launchpad.net/ubuntu/+source/provd/+bug/2071574 Upstream summary: James Henstridge discovered that provd incorrectly handled environment variables. A local attacker could possibly use this issue to run arbitrary programs and escalate […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 November 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7092-2 Related CVEs: CVE-2024-10573 https://launchpad.net/bugs/2089680 Upstream summary: USN-7092-1 fixed a vulnerability in mpg123. Bastien Roucariès discovered that the fix was incomplete on Ubuntu 20.04 LTS. This update fixes the problem. […]