Ubuntu 22.04

🟡 Medium   ⏱ 10–30 min  Last verified: 17 December 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7317-1 Related CVEs: CVE-2022-23303 CVE-2022-23304 CVE-2022-37660 CVE-2024-5290 https://launchpad.net/bugs/2067613 Upstream summary: George Chatzisofroniou and Panayiotis Kotzanikolaou discovered that wpa_supplicant and hostapd reused encryption elements in the PKEX protocol. An attacker could […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 December 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6990-1 Related CVEs: CVE-2024-39844 Upstream summary: Johannes Kuhn (DasBrain) discovered that znc incorrectly handled user input under certain operations. An attacker could possibly use this issue to execute arbitrary code […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 December 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7272-1 Related CVEs: CVE-2022-24894 CVE-2022-24895 CVE-2023-46734 CVE-2024-50340 CVE-2024-50341 CVE-2024-50342 CVE-2024-50343 CVE-2024-50345  +1 more Upstream summary: Soner Sayakci discovered that Symfony incorrectly handled cookie storage in the web cache. An attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 December 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6852-1 Related CVEs: CVE-2024-38428 Upstream summary: It was discovered that Wget incorrectly handled semicolons in the userinfo subcomponent of a URI. A remote attacker could possibly trick a user into […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 December 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7101-1 Related CVEs: CVE-2024-3772 Upstream summary: It was discovered that Pydantic incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause a denial of service […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 November 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7062-1 Related CVEs: CVE-2024-36474 CVE-2024-42415 Upstream summary: It was discovered that libgsf incorrectly handled certain Compound Document Binary files. If a user or automated system were tricked into opening a […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 November 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8091-1 Related CVEs: https://launchpad.net/bugs/2143850 CVE-2024-28085 Upstream summary: It was discovered that the util-linux su utility did not drop capabilities when being used with the –pty option. While not a security […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 November 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7839-1 Related CVEs: CVE-2024-45337 Upstream summary: Damien Tournoud, Patrick Dawkins, Vince Parker, and Jules Duvivier discovered that Go Cryptography incorrectly handled public keys during SSH operations. An attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 November 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6619-1 Related CVEs: CVE-2024-21626 CVE-2023-25809 CVE-2023-27561 CVE-2023-28642 Upstream summary: Rory McNamara discovered that runC did not properly manage internal file descriptor while managing containers. An attacker could possibly use this […]