Package Management

🟡 Medium   ⏱ 10–30 min  Last verified: 15 September 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7422-1 Related CVEs: CVE-2021-44492 CVE-2021-44498 CVE-2021-44500 CVE-2021-44502 CVE-2021-44506 CVE-2021-44508 CVE-2021-44509 CVE-2021-44510 Upstream summary: It was discovered that FIS-GT.M could incorrectly dereference memory in certain instances. An attacker could possibly use […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7731-1 Related CVEs: CVE-2017-17689 CVE-2020-11880 Upstream summary: Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that KMail could be made […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5245-1 Related CVEs: CVE-2021-26291 Upstream summary: It was discovered that Apache Maven followed repositories that are defined in a dependency's Project Object Model (pom) even if the repositories weren't encrypted […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 September 2021 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6424-1 Related CVEs: CVE-2021-28834 CVE-2020-14001 Upstream summary: It was discovered that kramdown did not restrict Rouge formatters to the correct namespace. An attacker could use this issue to cause kramdown […]