Ubuntu 22.04

🟡 Medium   ⏱ 10–30 min  Last verified: 4 July 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7818-2 Related CVEs: CVE-2024-46901 CVE-2021-28544 CVE-2022-24070 Upstream summary: USN-7818-1 fixed vulnerabilities in Apache Subversion. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, […]

🟠 High   ⏱ 15–60 min  Last verified: 4 July 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6922-1 Related CVEs: CVE-2024-24857 CVE-2024-24858 CVE-2024-24859 CVE-2024-25739 CVE-2023-52631 CVE-2023-52637 CVE-2023-52638 CVE-2023-52642  +12 more Upstream summary: It was discovered that a race condition existed in the Bluetooth subsystem in the Linux […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 July 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6643-1 Related CVEs: CVE-2023-42282 Upstream summary: Emre Durmaz discovered that NPM IP package incorrectly distinguished between private and public IP addresses. A remote attacker could possibly use this issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 July 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7476-1 Related CVEs: CVE-2021-41125 CVE-2022-0577 CVE-2024-1892 CVE-2024-1968 CVE-2024-3572 CVE-2024-3574 Upstream summary: It was discovered that Scrapy improperly exposed HTTP authentication credentials to request targets, including during redirects. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 July 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7158-1 Related CVEs: CVE-2018-25047 CVE-2023-28447 CVE-2024-35226 CVE-2022-29221 Upstream summary: It was discovered that Smarty incorrectly handled query parameters in requests. An attacker could possibly use this issue to inject arbitrary […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 June 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6437-1 Related CVEs: CVE-2018-7998 CVE-2019-6976 CVE-2020-20739 CVE-2021-27847 CVE-2023-40032 Upstream summary: Ziqiang Gu discovered that VIPS could be made to dereference a NULL pointer. If a user or automated system were […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 June 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6477-1 Related CVEs: CVE-2023-4016 Upstream summary: It was discovered that the procps-ng ps tool incorrectly handled memory. An attacker could possibly use this issue to cause procps-ng to crash, resulting […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 June 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7732-1 Related CVEs: CVE-2024-50624 Upstream summary: It was discovered that KMail Account Wizard used HTTP rather than HTTPS when retrieving certain email server configurations. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 June 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7354-1 Related CVEs: CVE-2024-21543 Upstream summary: Diego Cebrián discovered that djoser did not properly handle user authentication. An attacker with valid credentials could possibly use this to bypass authentication checks, […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 June 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6011-1 Related CVEs: CVE-2021-31684 CVE-2023-1370 Upstream summary: It was discovered that Json-smart incorrectly handled memory when processing input containing unclosed quotes. A remote attacker could possibly use this issue to […]