Ubuntu 20.04

Ubuntu 20.04 — json-smart — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — json-smart — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 26 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6011-1 Related CVEs: CVE-2021-31684 CVE-2023-1370 Upstream summary: It was discovered that Json-smart incorrectly handled memory when processing input containing unclosed quotes. A remote attacker could possibly use this issue to […]

Read more
Ubuntu 20.04 — proftpd-dfsg — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — proftpd-dfsg — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7297-1 Related CVEs: CVE-2023-48795 CVE-2023-51713 CVE-2024-48651 Upstream summary: Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that the transport protocol implementation in ProFTPD had weak integrity checks. An attacker could […]

Read more
Ubuntu 20.04 — util-linux — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — util-linux — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8091-1 Related CVEs: https://launchpad.net/bugs/2143850 CVE-2024-28085 CVE-2021-3995 CVE-2021-3996 Upstream summary: It was discovered that the util-linux su utility did not drop capabilities when being used with the –pty option. While not […]

Read more
Ubuntu 20.04 — bluez — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — bluez — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7222-1 Related CVEs: CVE-2023-50229 CVE-2023-50230 CVE-2022-3563 CVE-2023-27349 CVE-2023-45866 https://launchpad.net/bugs/1977968 CVE-2022-0204 CVE-2021-3658  +5 more Upstream summary: Lucas Leong discovered that BlueZ incorrectly handled the Phone Book Access profile. If a user […]

Read more
Ubuntu 20.04 — rails — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — rails — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7290-1 Related CVEs: CVE-2024-41128 CVE-2024-47887 CVE-2024-47888 CVE-2024-47889 Upstream summary: It was discovered that Rails did not correctly handle parsing block formats in email service layers. An attacker could possibly use […]

Read more
Ubuntu 20.04 — twitter-bootstrap4 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — twitter-bootstrap4 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7556-1 Related CVEs: CVE-2024-6484 CVE-2024-6531 CVE-2024-6485 Upstream summary: It was discovered that Bootstrap did not correctly sanitize certain input in the carousel component. An attacker could possibly use this issue […]

Read more
Ubuntu 20.04 — unbound — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — unbound — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 15 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7080-1 Related CVEs: CVE-2024-8508 CVE-2024-43167 CVE-2024-43168 CVE-2024-33655 CVE-2023-50387 CVE-2023-50868 CVE-2022-3204 CVE-2022-30698  +12 more Upstream summary: Toshifumi Sakaguchi discovered that Unbound incorrectly handled name compression for large RRsets, which could lead […]

Read more
Ubuntu 20.04 — logback — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — logback — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7616-1 Related CVEs: CVE-2023-6378 CVE-2021-42550 Upstream summary: It was discovered that logback could read malicious configuration files from LDAP servers. An attacker with the required permissions could possibly use this […]

Read more
Ubuntu 20.04 — libcue — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — libcue — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6423-1 Related CVEs: CVE-2023-43641 Upstream summary: It was discovered that CUE incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive information or execute arbitrary code. […]

Read more
CHAT