Ubuntu 20.04

🟡 Medium   ⏱ 10–30 min  Last verified: 13 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5956-1 Related CVEs: CVE-2016-10033 CVE-2016-10045 CVE-2017-11503 CVE-2017-5223 CVE-2018-19296 CVE-2020-13625 CVE-2021-3603 Upstream summary: Dawid Golunski discovered that PHPMailer was not properly escaping user input data used as arguments to functions executed […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6419-1 Related CVEs: CVE-2016-7103 CVE-2021-41182 CVE-2021-41183 CVE-2021-41184 CVE-2022-31160 Upstream summary: Hong Phat Ly discovered that jQuery UI did not properly manage parameters from untrusted sources, which could lead to arbitrary […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5026-1 Related CVEs: CVE-2018-18020 CVE-2021-36978 Upstream summary: It was discovered that QPDF incorrectly handled certain malformed PDF files. A remote attacker could use this issue to cause QPDF to consume […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4760-1 Related CVEs: CVE-2021-24031 CVE-2021-24032 Upstream summary: It was discovered that libzstd incorrectly handled file permissions. A local attacker could possibly use this issue to access certain files, contrary to […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5301-1 Related CVEs: CVE-2022-24407 Upstream summary: It was discovered that the Cyrus SASL SQL plugin incorrectly handled SQL input. A remote attacker could use this issue to execute arbitrary SQL […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6097-1 Related CVEs: CVE-2021-3570 Upstream summary: It was discovered that Linux PTP did not properly perform a length check when forwarding a PTP message between ports. A remote attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 3 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5016-1 Related CVEs: CVE-2021-23134 CVE-2021-32399 CVE-2021-33034 CVE-2021-33909 CVE-2021-3506 CVE-2020-24586 CVE-2020-24587 CVE-2020-24588  +12 more Upstream summary: It was discovered that the virtual file system implementation in the Linux kernel contained an […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6901-1 Related CVEs: CVE-2021-20230 Upstream summary: It was discovered that stunnel did not properly validate client certificates when configured to use both the redirect and verifyChain options. A remote attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4968-1 Related CVEs: CVE-2021-3520 Upstream summary: It was discovered that LZ4 incorrectly handled certain memory operations. If a user or automated system were tricked into uncompressing a specially- crafted LZ4 […]

🟠 High   ⏱ 15–60 min  Last verified: 30 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5849-1 Related CVEs: CVE-2022-45142 CVE-2021-44758 CVE-2022-3437 CVE-2022-42898 CVE-2022-44640 CVE-2022-41916 CVE-2018-16860 CVE-2019-12098  +2 more Upstream summary: Helmut Grohne discovered that Heimdal GSSAPI incorrectly handled logical conditions that are related to memory […]