ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 24 November 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6756-1 Related CVEs: CVE-2024-32487 CVE-2022-48624 Upstream summary: It was discovered that less mishandled newline characters in file names. If a user or automated system were tricked into opening specially crafted […]

🟢 Low   ⏱ 5–15 min  Last verified: 24 November 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7839-1 Related CVEs: CVE-2024-45337 Upstream summary: Damien Tournoud, Patrick Dawkins, Vince Parker, and Jules Duvivier discovered that Go Cryptography incorrectly handled public keys during SSH operations. An attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 November 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7340-1 Related CVEs: CVE-2017-12166 CVE-2024-5594 CVE-2022-0547 CVE-2016-6329 CVE-2017-7479 CVE-2017-7508 CVE-2017-7520 CVE-2017-7521  +1 more Upstream summary: It was discovered that OpenVPN did not perform proper input validation when generating a TLS […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 November 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6619-1 Related CVEs: CVE-2024-21626 CVE-2023-25809 CVE-2023-27561 CVE-2023-28642 Upstream summary: Rory McNamara discovered that runC did not properly manage internal file descriptor while managing containers. An attacker could possibly use this […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 November 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7117-1 Related CVEs: CVE-2024-10224 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 Upstream summary: Qualys discovered that needrestart passed unsanitized data to a library (libmodule-scandeps-perl) which expects safe input. A local attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 November 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6912-1 Related CVEs: CVE-2024-6714 https://bugs.launchpad.net/ubuntu/+source/provd/+bug/2071574 Upstream summary: James Henstridge discovered that provd incorrectly handled environment variables. A local attacker could possibly use this issue to run arbitrary programs and escalate […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 November 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7092-2 Related CVEs: CVE-2024-10573 https://launchpad.net/bugs/2089680 Upstream summary: USN-7092-1 fixed a vulnerability in mpg123. Bastien Roucariès discovered that the fix was incomplete on Ubuntu 20.04 LTS. This update fixes the problem. […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 November 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6796-1 Related CVEs: CVE-2023-22745 CVE-2024-29040 Upstream summary: Fergus Dall discovered that TPM2 Software Stack did not properly handle layer arrays. An attacker could possibly use this issue to cause TPM2 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 November 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6882-2 Related CVEs: CVE-2022-47951 CVE-2024-32498 https://launchpad.net/bugs/2020111 CVE-2023-2088 CVE-2020-10755 Upstream summary: USN-6882-1 fixed vulnerabilities in Cinder. The update caused a regression in certain environments due to incorrect privilege handling. This update […]