ubuntu

Ubuntu 20.04 — paramiko — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — paramiko — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6598-1 Related CVEs: CVE-2023-48795 CVE-2022-24302 Upstream summary: Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk discovered that the SSH protocol was vulnerable to a prefix truncation attack. If a remote attacker was […]

Read more
Ubuntu 20.04 — libhtmlcleaner-java — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — libhtmlcleaner-java — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6683-1 Related CVEs: CVE-2023-34624 Upstream summary: It was discovered that HtmlCleaner incorrectly handled certain html documents. An attacker could possibly use this issue to cause a denial of service via […]

Read more
Ubuntu 20.04 — rapidjson — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — rapidjson — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 10 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8189-1 Related CVEs: CVE-2024-39684 CVE-2024-38517 Upstream summary: It was discovered that RapidJSON did not properly protect against integer overflows in certain instances when parsing JSON text. A remote attacker could […]

Read more
Ubuntu 24.04 — gtk+2.0 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 24.04

Ubuntu 24.04 — gtk+2.0 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 July 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6899-1 Related CVEs: CVE-2024-6655 Upstream summary: It was discovered that GTK would attempt to load modules from the current directory, contrary to expectations. If users started GTK applications from shared […]

Read more
Ubuntu 20.04 — libde265 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — libde265 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 July 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6764-1 Related CVEs: CVE-2023-51792 CVE-2023-27102 CVE-2023-27103 CVE-2023-43887 CVE-2023-47471 CVE-2023-49465 CVE-2023-49467 CVE-2023-49468  +12 more Upstream summary: It was discovered that libde265 could be made to allocate memory that exceeds the maximum […]

Read more
Ubuntu 22.04 — nodejs — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — nodejs — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 July 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7469-3 Related CVEs: CVE-2023-44487 CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 CVE-2023-23919  +12 more Upstream summary: USN-7469-1 fixed a vulnerability in Apache Traffic Server. This update provides the corresponding updates for […]

Read more
Ubuntu 16.04 — gawk — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — gawk — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 6 July 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6373-1 Related CVEs: CVE-2023-4156 Upstream summary: It was discovered that gawk could be made to read out of bounds when processing certain inputs. If a user or an automated system […]

Read more
Ubuntu 14.04 — linux-aws — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — linux-aws — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8274-1 Related CVEs: CVE-2022-49033 CVE-2024-27388 CVE-2024-49938 CVE-2024-50008 CVE-2024-50142 CVE-2021-47142 CVE-2021-47145 CVE-2021-47254  +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]

Read more
Ubuntu 18.04 — sox — multiple vulnerabilities (14 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — sox — multiple vulnerabilities (14 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 July 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6345-1 Related CVEs: CVE-2023-32627 CVE-2021-33844 CVE-2019-13590 CVE-2021-23159 CVE-2021-23172 CVE-2021-23210 CVE-2021-3643 CVE-2021-40426  +6 more Upstream summary: It was discovered that SoX incorrectly handled certain inputs. If a user or an automated […]

Read more
Ubuntu 14.04 — libspreadsheet-parseexcel-perl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — libspreadsheet-parseexcel-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 July 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6781-1 Related CVEs: CVE-2023-7101 Upstream summary: Le Dinh Hai discovered that Spreadsheet::ParseExcel was passing unvalidated input from a file into a string-type "eval". An attacker could craft a malicious file […]

Read more
CHAT