ubuntu

Ubuntu 20.04 — cyrus-imapd — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — cyrus-imapd — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 23 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7224-1 Related CVEs: CVE-2019-18928 CVE-2021-33582 CVE-2024-34055 Upstream summary: It was discovered that non-authentication-related HTTP requests could be interpreted in an authentication context by a Cyrus IMAP Server when multiple requests […]

Read more
Ubuntu 22.04 — resteasy — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — resteasy — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 July 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7351-1 Related CVEs: CVE-2020-10688 CVE-2020-1695 CVE-2020-25633 CVE-2021-20289 CVE-2023-0482 CVE-2024-9622 Upstream summary: Nikos Papadopoulos discovered that RESTEasy improperly handled URL encoding when certain errors occur. An attacker could possibly use this […]

Read more
Ubuntu 18.04 — nginx — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — nginx — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 22 July 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7014-2 Related CVEs: CVE-2024-7347 CVE-2022-41741 CVE-2022-41742 CVE-2020-11724 CVE-2020-36309 CVE-2021-3618 CVE-2021-23017 CVE-2019-20372  +6 more Upstream summary: USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding updates for Ubuntu 16.04 […]

Read more
Ubuntu 14.04 — less — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — less — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 22 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8079-1 Related CVEs: CVE-2022-48624 CVE-2024-32487 Upstream summary: It was discovered that less incorrectly handled certain file names. An attacker could possibly use this issue to cause a denial of service […]

Read more
Ubuntu 18.04 — subversion — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — subversion — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 July 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7818-2 Related CVEs: CVE-2024-46901 CVE-2018-11782 CVE-2019-0203 CVE-2020-17525 Upstream summary: USN-7818-1 fixed vulnerabilities in Apache Subversion. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 […]

Read more
Ubuntu 24.04 — dwarfutils — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 24.04

Ubuntu 24.04 — dwarfutils — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 21 July 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7576-1 Related CVEs: CVE-2022-32200 Upstream summary: It was discovered that dwarfutils did not correctly certain memory operations, which could lead to a buffer overflow. An attacker could possibly use this […]

Read more
Ubuntu 22.04 — qtbase-opensource-src — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — qtbase-opensource-src — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 July 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8076-1 Related CVEs: CVE-2024-39936 CVE-2023-51714 CVE-2022-25255 CVE-2020-13962 CVE-2020-17507 CVE-2024-25580 CVE-2023-24607 CVE-2023-32762  +2 more Upstream summary: It was discovered that Qt did not correctly handle OpenSSL's error queue. An attacker could […]

Read more
Ubuntu 18.04 — python-scrapy — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — python-scrapy — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 July 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7476-1 Related CVEs: CVE-2021-41125 CVE-2022-0577 CVE-2024-1892 CVE-2024-1968 CVE-2024-3572 CVE-2024-3574 Upstream summary: It was discovered that Scrapy improperly exposed HTTP authentication credentials to request targets, including during redirects. An attacker could […]

Read more
Ubuntu 16.04 — unixodbc — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — unixodbc — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 July 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6715-1 Related CVEs: CVE-2024-1013 CVE-2018-7409 Upstream summary: It was discovered that unixODBC incorrectly handled certain bytes. An attacker could use this issue to execute arbitrary code or cause a crash. […]

Read more
Ubuntu 16.04 — node-express — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — node-express — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 July 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7581-1 Related CVEs: CVE-2024-29041 CVE-2024-43796 Upstream summary: It was discovered that Express incorrectly handled certain URLs, leading to an open redirect attack. A remote attacker could possibly use this issue […]

Read more
CHAT