ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 1 September 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6801-1 Related CVEs: CVE-2024-36039 Upstream summary: It was discovered that PyMySQL incorrectly escaped untrusted JSON input. An attacker could possibly use this issue to perform SQL injection attacks. Table of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 September 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7320-1 Related CVEs: CVE-2023-5520 CVE-2024-0321 CVE-2024-0322 Upstream summary: It was discovered that the GPAC MP4Box utility incorrectly handled certain AC3 files, which could lead to an out-of-bounds read. A remote […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 August 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7063-1 Related CVEs: CVE-2024-6388 Upstream summary: Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon leaked the Pro token to unprivileged users by passing the token as an argument in […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 August 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6988-1 Related CVEs: CVE-2024-41671 CVE-2024-41810 Upstream summary: Ben Kallus discovered that Twisted incorrectly handled response order when processing multiple HTTP requests. A remote attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 August 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7227-1 Related CVEs: CVE-2024-53432 Upstream summary: It was discovered that PCL incorrectly handled certain malformed files. If a user or automated system were tricked into opening a specially crafted file, […]

🟠 High   ⏱ 15–60 min  Last verified: 29 August 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6968-3 Related CVEs: CVE-2024-7348 CVE-2018-10915 CVE-2018-10925 CVE-2018-1058 https://launchpad.net/bugs/1752271 CVE-2018-1053 CVE-2017-15098 CVE-2017-15099  +12 more Upstream summary: USN-6968-1 fixed CVE-2024-7348 in PostgreSQL-12, PostgreSQL-14, and PostgreSQL-16. This update provides the corresponding updates for […]

🟠 High   ⏱ 15–60 min  Last verified: 28 August 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7630-1 Related CVEs: CVE-2016-6347 CVE-2016-7050 CVE-2020-25633 CVE-2016-6348 CVE-2016-6345 CVE-2016-6346 CVE-2021-20289 CVE-2024-9622  +3 more Upstream summary: It was discovered that RESTEasy made insufficient use of random values in asynchronous jobs. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 August 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8217-1 Related CVEs: CVE-2022-0155 CVE-2022-0536 CVE-2023-26159 CVE-2024-28849 Upstream summary: It was discovered that follow-redirects did not properly protect sensitive user information during redirects. An attacker could possibly use this issue […]