Ubuntu 20.04

🟢 Low   ⏱ 5–15 min  Last verified: 8 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5286-1 Related CVEs: CVE-2021-4122 CVE-2020-14382 Upstream summary: Milan Broz discovered that cryptsetup incorrectly handled LUKS2 reencryption recovery. An attacker with physical access to modify the encrypted device header may trigger […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5069-1 Related CVEs: CVE-2021-3639 Upstream summary: It was discovered that mod-auth-mellon incorrectly filtered certain URLs. A remote attacker could possibly use this issue to perform an open redirect attack. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5066-1 Related CVEs: CVE-2021-21239 Upstream summary: Brian Wolff discovered that PySAML2 incorrectly validated cryptographic signatures. A remote attacker could possibly use this issue to alter SAML documents. Table of contents […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5382-1 Related CVEs: CVE-2022-1215 Upstream summary: Albin Eldstål-Ahrens and Lukas Lamster discovered libinput did not properly handle input devices with specially crafted names. A local attacker with physical access could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7398-1 Related CVEs: CVE-2021-33643 CVE-2021-33644 CVE-2021-33645 CVE-2021-33646 Upstream summary: It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 28 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5974-1 Related CVEs: CVE-2018-20184 CVE-2018-20189 CVE-2018-5685 CVE-2018-9018 CVE-2019-11006 CVE-2020-12672 CVE-2022-1270 CVE-2019-12921  +4 more Upstream summary: It was discovered that GraphicsMagick was not properly performing bounds checks when processing TGA image […]

🟠 High   ⏱ 15–60 min  Last verified: 26 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7552-1 Related CVEs: CVE-2021-4185 CVE-2022-0582 CVE-2022-0586 CVE-2022-3190 CVE-2021-4182 CVE-2022-0585 CVE-2021-39929 CVE-2021-4186  +7 more Upstream summary: It was discovered that Wireshark did not correctly handle recursion. If a user or system […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6215-1 Related CVEs: CVE-2022-3534 CVE-2022-3606 Upstream summary: It was discovered that dwarves incorrectly handled certain memory operations under certain circumstances. An attacker could possibly use this issue to cause dwarves […]