Ubuntu 18.04

🟡 Medium   ⏱ 10–30 min  Last verified: 26 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7437-1 Related CVEs: CVE-2022-1325 CVE-2024-26540 CVE-2018-7587 CVE-2018-7588 CVE-2018-7589 Upstream summary: It was discovered that the CImg library did not properly check the size of images before loading them. An attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7732-1 Related CVEs: CVE-2024-50624 Upstream summary: It was discovered that KMail Account Wizard used HTTP rather than HTTPS when retrieving certain email server configurations. An attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 23 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7562-1 Related CVEs: CVE-2024-24549 CVE-2024-34750 CVE-2024-23672 CVE-2023-42795 CVE-2024-38286 CVE-2023-45648 CVE-2023-28708 CVE-2024-21733  +12 more Upstream summary: It was discovered that Tomcat did not include the secure attribute for session cookies when […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6166-2 Related CVEs: CVE-2023-2603 Upstream summary: USN-6166-1 fixed a vulnerability in libcap2. This update provides the corresponding update for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. Original […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7404-1 Related CVEs: CVE-2021-30130 CVE-2023-52892 CVE-2024-27354 CVE-2024-27355 Upstream summary: It was discovered that phpseclib did not correctly handle RSA PKCS#1 v1.5 signature verification. An attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6678-1 Related CVEs: CVE-2020-12278 CVE-2020-12279 CVE-2023-22742 CVE-2024-24575 CVE-2024-24577 Upstream summary: It was discovered that libgit2 mishandled equivalent filenames on NTFS partitions. If a user or automated system were tricked into […]

🟠 High   ⏱ 15–60 min  Last verified: 12 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8045-1 Related CVEs: CVE-2024-31884 CVE-2024-47866 CVE-2023-43040 CVE-2021-3979 CVE-2022-0670 CVE-2022-3650 CVE-2022-3854 CVE-2020-27781  +9 more Upstream summary: Martin Schobert discovered that Ceph did not properly verify SSL certificates when using Pybind for […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6408-2 Related CVEs: CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 Upstream summary: USN-6408-1 fixed several vulnerabilities in libXpm. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6780-1 Related CVEs: CVE-2024-3651 Upstream summary: Guido Vranken discovered that idna did not properly manage certain inputs, which could lead to significant resource consumption. An attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 26 February 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7258-1 Related CVEs: CVE-2022-24728 CVE-2023-28439 CVE-2024-24815 CVE-2024-24816 CVE-2024-43411 CVE-2018-9861 CVE-2020-9281 CVE-2021-32808  +3 more Upstream summary: Kevin Backhouse discovered that CKEditor did not properly sanitize HTML content. An attacker could possibly […]