Ubuntu 20.04

🟢 Low   ⏱ 5–15 min  Last verified: 8 November 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7354-1 Related CVEs: CVE-2024-21543 Upstream summary: Diego Cebrián discovered that djoser did not properly handle user authentication. An attacker with valid credentials could possibly use this to bypass authentication checks, […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 November 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7568-1 Related CVEs: CVE-2024-47081 CVE-2023-32681 Upstream summary: Dennis Brinkrolf and Tobias Funke discovered that Requests did not correctly handle certain HTTP headers. A remote attacker could possibly use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 November 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6964-1 Related CVEs: CVE-2024-40897 Upstream summary: Noriko Totsuka discovered that ORC incorrectly handled certain crafted file. An attacker could possibly use this issue to execute arbitrary code. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 October 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7476-1 Related CVEs: CVE-2021-41125 CVE-2022-0577 CVE-2024-1892 CVE-2024-1968 CVE-2024-3572 CVE-2024-3574 Upstream summary: It was discovered that Scrapy improperly exposed HTTP authentication credentials to request targets, including during redirects. An attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 24 October 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7494-4 Related CVEs: CVE-2023-52664 CVE-2023-52927 CVE-2022-0995 CVE-2024-26837 CVE-2024-46826 CVE-2024-50248 CVE-2024-50256 CVE-2024-56651  +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]

🟠 High   ⏱ 15–60 min  Last verified: 23 October 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7562-1 Related CVEs: CVE-2024-24549 CVE-2024-34750 CVE-2024-23672 CVE-2023-42795 CVE-2024-38286 CVE-2023-45648 CVE-2023-28708 CVE-2024-21733  +12 more Upstream summary: It was discovered that Tomcat did not include the secure attribute for session cookies when […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 October 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6678-1 Related CVEs: CVE-2020-12278 CVE-2020-12279 CVE-2023-22742 CVE-2024-24575 CVE-2024-24577 Upstream summary: It was discovered that libgit2 mishandled equivalent filenames on NTFS partitions. If a user or automated system were tricked into […]

🟠 High   ⏱ 15–60 min  Last verified: 16 October 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7088-1 Related CVEs: CVE-2021-47212 CVE-2022-36402 CVE-2023-52531 CVE-2023-52614 CVE-2023-52918 CVE-2024-26607 CVE-2024-26640 CVE-2024-26641  +12 more Upstream summary: Ziming Zhang discovered that the VMware Virtual GPU DRM driver in the Linux kernel contained […]

🟠 High   ⏱ 15–60 min  Last verified: 16 October 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7100-1 Related CVEs: CVE-2022-48666 CVE-2023-52889 CVE-2023-52918 CVE-2024-25744 CVE-2024-26607 CVE-2024-26661 CVE-2024-26669 CVE-2024-26800  +12 more Upstream summary: Supraja Sridhara, Benedict Schlüter, Mark Kuhne, Andrin Bertschi, and Shweta Shinde discovered that the Confidential […]