Ubuntu 20.04

🟡 Medium   ⏱ 10–30 min  Last verified: 23 August 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6117-1 Related CVEs: CVE-2019-17566 CVE-2020-11987 CVE-2022-38398 CVE-2022-38648 CVE-2022-40146 CVE-2022-41704 CVE-2022-42890 Upstream summary: It was discovered that Apache Batik incorrectly handled certain inputs. An attacker could possibly use this to perform […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 August 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7372-1 Related CVEs: CVE-2022-45060 CVE-2020-11653 CVE-2019-20637 CVE-2021-36740 CVE-2022-23959 Upstream summary: Martin van Kervel Smedshammer discovered that Varnish did not properly sanitize certain HTTP headers. A remote attacker could possibly use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 August 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5998-1 Related CVEs: CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVE-2019-17571 CVE-2021-4104 Upstream summary: It was discovered that the SocketServer component of Apache Log4j 1.2 incorrectly handled deserialization. An attacker could possibly use this […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 August 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6851-2 Related CVEs: https://launchpad.net/bugs/2071333 CVE-2022-4968 https://launchpad.net/bugs/2066258 https://launchpad.net/bugs/1987842 https://launchpad.net/bugs/2065738 Upstream summary: USN-6851-1 fixed vulnerabilities in Netplan. The update lead to the discovery of a regression in netplan which caused systemctl enable […]

🟠 High   ⏱ 15–60 min  Last verified: 12 August 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5895-1 Related CVEs: CVE-2022-38850 CVE-2022-38851 CVE-2022-38855 CVE-2022-38858 CVE-2022-38860 CVE-2022-38861 CVE-2022-38863 CVE-2022-38864  +2 more Upstream summary: It was discovered that MPlayer could be made to divide by zero when processing certain […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 August 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5659-1 Related CVEs: CVE-2020-35605 CVE-2022-41322 Upstream summary: Stephane Chauveau discovered that kitty incorrectly handled image filenames with special characters in error messages. A remote attacker could possibly use this to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 August 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5547-1 Related CVEs: CVE-2022-31607 CVE-2022-31608 CVE-2022-31615 CVE-2022-21813 CVE-2022-21814 Upstream summary: Le Wu discovered that the NVIDIA graphics drivers did not properly perform input validation in some situations. A local user […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 August 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5551-1 Related CVEs: CVE-2022-2255 Upstream summary: It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 July 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7659-1 Related CVEs: CVE-2022-29181 CVE-2022-40303 CVE-2020-26247 Upstream summary: It was discovered Nokogiri did not correctly parse XML Schemas. If a user or automated system were tricked into opening a specially […]