Ubuntu 16.04

🟠 High   ⏱ 15–60 min  Last verified: 6 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5785-1 Related CVEs: CVE-2019-17185 CVE-2022-41860 CVE-2022-41861 CVE-2017-10978 CVE-2017-10979 CVE-2017-10980 CVE-2017-10981 CVE-2017-10982  +5 more Upstream summary: It was discovered that FreeRADIUS incorrectly handled multiple EAP-pwd handshakes. An attacker could possibly use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5966-2 Related CVEs: https://launchpad.net/bugs/2012536 CVE-2022-37703 CVE-2022-37704 CVE-2022-37705 Upstream summary: USN-5966-1 fixed vulnerabilities in amanda. Unfortunately it introduced a regression in GNUTAR-based backups. This update reverts all of the changes in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6640-1 Related CVEs: CVE-2023-4641 https://launchpad.net/bugs/1998169 CVE-2013-4235 CVE-2017-12424 CVE-2018-7169 https://launchpad.net/bugs/1690820 CVE-2016-6252 CVE-2017-2616 Upstream summary: It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6275-1 Related CVEs: CVE-2023-38497 Upstream summary: Addison Crump discovered that Cargo incorrectly set file permissions on UNIX-like systems when extracting crate archives. If the crate would contain files writable by […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5532-2 Related CVEs: CVE-2022-31799 Upstream summary: USN-5532-1 fixed a vulnerability in Bottle. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM Original advisory details: It […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 May 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6287-1 Related CVEs: CVE-2021-4235 CVE-2022-3064 Upstream summary: Simon Ferquel discovered that the Go yaml package incorrectly handled certain YAML documents. If a user or an automated system were tricked into […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 May 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5899-1 Related CVEs: CVE-2022-46391 CVE-2017-1000501 CVE-2020-29600 CVE-2020-35176 Upstream summary: It was discovered that AWStats did not properly sanitize the content of whois responses in the hostinfo plugin. An attacker could […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6834-1 Related CVEs: CVE-2021-42392 CVE-2022-23221 Upstream summary: It was discovered that H2 was vulnerable to deserialization of untrusted data. An attacker could possibly use this issue to execute arbitrary code. […]