Ubuntu 20.04

🟠 High   ⏱ 15–60 min  Last verified: 24 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5946-1 Related CVEs: CVE-2021-39139 CVE-2021-39140 CVE-2021-39141 CVE-2021-39144 CVE-2021-39145 CVE-2021-39146 CVE-2021-39147 CVE-2021-39148  +12 more Upstream summary: Lai Han discovered that XStream incorrectly handled certain inputs. If a user or an automated […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5708-1 Related CVEs: CVE-2022-41674 CVE-2022-42719 CVE-2022-42720 CVE-2022-42721 CVE-2022-42722 https://launchpad.net/bugs/1994525 Upstream summary: Sönke Huster discovered that an integer overflow vulnerability existed in the WiFi driver stack in the Linux kernel, leading […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5378-2 Related CVEs: CVE-2022-1271 Upstream summary: Cleemy Desu Wayo discovered that XZ Utils incorrectly handled certain filenames. If a user or automated system were tricked into performing xzgrep operations with […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7664-1 Related CVEs: CVE-2022-29970 CVE-2022-45442 Upstream summary: It was discovered that Sinatra incorrectly handled serving static files. An attacker could possibly use this issue to perform local file inclusion, obtaining […]

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6038-2 Related CVEs: CVE-2022-1705 CVE-2022-27664 CVE-2022-28131 CVE-2022-2879 CVE-2022-2880 CVE-2022-29526 CVE-2022-30629 CVE-2022-30630  +11 more Upstream summary: USN-6038-1 fixed several vulnerabilities in Go 1.18. This update provides the corresponding updates for Go […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7266-1 Related CVEs: CVE-2017-0691 CVE-2020-19858 CVE-2020-22628 CVE-2020-35530 CVE-2020-35531 CVE-2020-35532 CVE-2020-35533 CVE-2021-32142  +1 more Upstream summary: Zinuo Han and Ao Wang discovered that the Android DNG SDK, vendored in digiKam, did […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5216-1 Related CVEs: CVE-2021-23362 Upstream summary: It was discovered that hosted-git-info incorrectly handled certain inputs. A remote attacker could use this to cause a denial of service. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7913-1 Related CVEs: CVE-2022-34300 CVE-2018-16981 CVE-2021-46143 Upstream summary: It was discovered that the stb library, included in MAME, had a heap-based buffer overflow. An attacker could possibly use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6114-1 Related CVEs: CVE-2021-3803 Upstream summary: Yeting Li discovered that nth-check incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input […]