Ubuntu 22.04

Ubuntu 22.04 — jhead — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — jhead — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6110-1 Related CVEs: CVE-2021-28275 CVE-2021-28277 CVE-2021-3496 https://launchpad.net/bugs/2020068 CVE-2021-34055 CVE-2022-41751 Upstream summary: It was discovered that Jhead did not properly handle certain crafted Canon images when processing them. An attacker could […]

Read more
Ubuntu 22.04 — cpio — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — cpio — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6755-1 Related CVEs: CVE-2023-7207 Upstream summary: Ingo Brückl discovered that cpio contained a path traversal vulnerability. If a user or automated system were tricked into extracting a specially crafted cpio […]

Read more
Ubuntu 22.04 — netplan.io — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — netplan.io — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6851-2 Related CVEs: https://launchpad.net/bugs/2071333 CVE-2022-4968 https://launchpad.net/bugs/2066258 https://launchpad.net/bugs/1987842 https://launchpad.net/bugs/2065738 Upstream summary: USN-6851-1 fixed vulnerabilities in Netplan. The update lead to the discovery of a regression in netplan which caused systemctl enable […]

Read more
Ubuntu 22.04 — numpy — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — numpy — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 18 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5763-1 Related CVEs: CVE-2021-33430 CVE-2021-34141 CVE-2021-41495 CVE-2021-41496 Upstream summary: It was discovered that NumPy did not properly manage memory when specifying arrays of large dimensions. If a user were tricked […]

Read more
Ubuntu 22.04 — tinyproxy — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — tinyproxy — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 17 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7190-1 Related CVEs: CVE-2023-49606 CVE-2022-40468 Upstream summary: It was discovered that Tinyproxy did not properly manage memory during the parsing of HTTP connection headers. An attacker could use this issue […]

Read more
Ubuntu 22.04 — mod-wsgi — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — mod-wsgi — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 13 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5551-1 Related CVEs: CVE-2022-2255 Upstream summary: It was discovered that mod-wsgi did not correctly remove the X-Client-IP header when processing requests from untrusted proxies. A remote attacker could use this […]

Read more
Ubuntu 22.04 — atril — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — atril — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 12 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7274-1 Related CVEs: CVE-2019-1010006 CVE-2019-11459 CVE-2023-51698 CVE-2023-52076 Upstream summary: It was discovered that Atril incorrectly handled certain PDF files. An attacker could possibly use this issue to cause a denial […]

Read more
Ubuntu 22.04 — tinyxml — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — tinyxml — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 8 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6612-1 Related CVEs: CVE-2023-34194 Upstream summary: It was discovered that TinyXML incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted XML […]

Read more
Ubuntu 22.04 — freeimage — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — freeimage — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6586-1 Related CVEs: CVE-2019-12211 CVE-2019-12213 CVE-2020-21427 CVE-2020-21428 CVE-2020-22524 Upstream summary: It was discovered that FreeImage incorrectly handled certain memory operations. If a user were tricked into opening a crafted TIFF […]

Read more
Ubuntu 22.04 — openldap — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — openldap — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6616-1 Related CVEs: CVE-2023-2953 CVE-2022-29155 Upstream summary: It was discovered that OpenLDAP was not properly performing bounds checks when executing functions related to LDAP URLs. An attacker could possibly use […]

Read more
CHAT