Ubuntu 22.04

🟢 Low   ⏱ 5–15 min  Last verified: 17 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5636-1 Related CVEs: CVE-2022-2806 Upstream summary: It was discovered that SoS incorrectly handled certain data. An attacker could possibly use this issue to expose sensitive information. Table of contents Symptom […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5245-1 Related CVEs: CVE-2021-26291 Upstream summary: It was discovered that Apache Maven followed repositories that are defined in a dependency's Project Object Model (pom) even if the repositories weren't encrypted […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7913-1 Related CVEs: CVE-2022-34300 CVE-2018-16981 CVE-2021-46143 Upstream summary: It was discovered that the stb library, included in MAME, had a heap-based buffer overflow. An attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5838-1 Related CVEs: CVE-2022-35014 CVE-2022-35015 CVE-2022-35016 CVE-2022-35017 CVE-2022-35018 CVE-2022-35019 CVE-2022-35020 Upstream summary: It was discovered that AdvanceCOMP did not properly manage memory while performing read operations on MNG file. If […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6781-1 Related CVEs: CVE-2023-7101 Upstream summary: Le Dinh Hai discovered that Spreadsheet::ParseExcel was passing unvalidated input from a file into a string-type "eval". An attacker could craft a malicious file […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7146-1 Related CVEs: CVE-2017-7537 CVE-2020-25715 CVE-2022-2414 Upstream summary: Christina Fu discovered that Dogtag PKI accidentally enabled a mock authentication plugin by default. An attacker could potentially use this flaw to […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6226-1 Related CVEs: CVE-2023-25399 CVE-2023-29824 Upstream summary: It was discovered that SciPy did not properly manage memory operations during reference counting. An attacker could possibly use this issue to cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6569-1 Related CVEs: CVE-2022-30333 CVE-2023-40477 Upstream summary: it was discovered that libclamunrar incorrectly handled directories when extracting RAR archives. A remote attacker could possibly use this issue to overwrite arbitrary […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 May 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6178-1 Related CVEs: CVE-2019-6246 CVE-2021-44960 Upstream summary: It was discovered that in SVG++ library that the demo application incorrectly managed memory resulting in a memory access violation under certain circumstances. […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 April 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6753-1 Related CVEs: CVE-2023-46233 Upstream summary: Thomas Neil James Shadwell discovered that CryptoJS was using an insecure cryptographic default configuration. A remote attacker could possibly use this issue to expose […]