Ubuntu 18.04

🟡 Medium   ⏱ 10–30 min  Last verified: 15 December 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7404-1 Related CVEs: CVE-2021-30130 CVE-2023-52892 CVE-2024-27354 CVE-2024-27355 Upstream summary: It was discovered that phpseclib did not correctly handle RSA PKCS#1 v1.5 signature verification. An attacker could possibly use this issue […]

🟠 High   ⏱ 15–60 min  Last verified: 15 December 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7320-1 Related CVEs: CVE-2023-5520 CVE-2024-0321 CVE-2024-0322 CVE-2018-1000100 CVE-2018-13005 CVE-2018-13006 CVE-2018-20760 CVE-2018-20761  +3 more Upstream summary: It was discovered that the GPAC MP4Box utility incorrectly handled certain AC3 files, which could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 December 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7441-1 Related CVEs: CVE-2024-10525 CVE-2024-3935 CVE-2017-7655 CVE-2017-7653 CVE-2017-7654 Upstream summary: It was discovered that Eclipse Mosquitto client incorrectly handled memory when receiving a SUBACK packet. An attacker with a malicious […]

🟠 High   ⏱ 15–60 min  Last verified: 11 December 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7027-1 Related CVEs: CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2023-28617 CVE-2024-30203 CVE-2024-30204 CVE-2024-30205  +2 more Upstream summary: It was discovered that Emacs incorrectly handled input sanitization. An attacker could possibly use this […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 December 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7985-1 Related CVEs: CVE-2022-24107 CVE-2022-24106 CVE-2023-32668 CVE-2024-25262 CVE-2023-32700 CVE-2015-5700 CVE-2018-17407 Upstream summary: Shin Ando discovered that the Xpdf toolkit embedded in TeX Live incorrectly handled memory when decoding certain data […]

🟠 High   ⏱ 15–60 min  Last verified: 29 November 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6939-1 Related CVEs: CVE-2024-39929 CVE-2021-38371 CVE-2023-51766 CVE-2023-42117 CVE-2023-42119 CVE-2023-42114 CVE-2023-42115 CVE-2023-42116  +12 more Upstream summary: Phillip Szelat discovered that Exim misparses multiline MIME header filenames. A remote attacker could use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 November 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7117-1 Related CVEs: CVE-2024-10224 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 Upstream summary: Qualys discovered that needrestart passed unsanitized data to a library (libmodule-scandeps-perl) which expects safe input. A local attacker could possibly […]

🟠 High   ⏱ 15–60 min  Last verified: 11 November 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7630-1 Related CVEs: CVE-2016-6347 CVE-2016-7050 CVE-2020-25633 CVE-2016-6348 CVE-2016-6345 CVE-2016-6346 CVE-2021-20289 CVE-2024-9622  +3 more Upstream summary: It was discovered that RESTEasy made insufficient use of random values in asynchronous jobs. An […]

🟠 High   ⏱ 15–60 min  Last verified: 10 November 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7011-2 Related CVEs: CVE-2024-20505 CVE-2024-20506 CVE-2023-20197 CVE-2023-20032 CVE-2023-20052 CVE-2022-20770 CVE-2022-20771 CVE-2022-20785  +12 more Upstream summary: USN-7011-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 16.04 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 November 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7646-1 Related CVEs: CVE-2019-5418 CVE-2024-41128 CVE-2024-47887 CVE-2024-47888 CVE-2024-47889 Upstream summary: It was discovered that Rails did not correctly handle headers. An attacker could potentially use this issue to view arbitrary […]