ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 21 June 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7115-1 Related CVEs: CVE-2024-49768 CVE-2024-49769 Upstream summary: It was discovered that Waitress could process follow up requests when receiving a specially crafted message. An attacker could use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 June 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7497-1 Related CVEs: CVE-2021-21305 CVE-2023-49090 Upstream summary: Rikita Ishikawa discovered that CarrierWave did not correctly sanitize certain inputs. An attacker could possibly use this issue to execute arbitrary code. This […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 June 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6307-1 Related CVEs: CVE-2023-37464 Upstream summary: It was discovered that JOSE for C/C++ AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the […]

🟠 High   ⏱ 15–60 min  Last verified: 19 June 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6879-1 Related CVEs: CVE-2023-31620 CVE-2023-31622 CVE-2023-31624 CVE-2023-31626 CVE-2023-31627 CVE-2023-31629 CVE-2023-31630 CVE-2023-31631  +12 more Upstream summary: Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL statements. An attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 June 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6984-1 Related CVEs: CVE-2024-42353 Upstream summary: It was discovered that WebOb incorrectly handled certain URLs. An attacker could possibly use this issue to control a redirect or forward to another […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 June 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5992-1 Related CVEs: CVE-2023-0614 CVE-2020-27840 CVE-2021-20277 Upstream summary: Demi Marie Obenour discovered that ldb, when used with Samba, incorrectly handled certain confidential attribute values. A remote authenticated attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 June 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6769-1 Related CVEs: CVE-2024-22368 CVE-2024-23525 Upstream summary: Le Dinh Hai discovered that Spreadsheet::ParseXLSX did not properly manage memory during cell merge operations. An attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 June 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6899-1 Related CVEs: CVE-2024-6655 Upstream summary: It was discovered that GTK would attempt to load modules from the current directory, contrary to expectations. If users started GTK applications from shared […]

🟠 High   ⏱ 15–60 min  Last verified: 16 June 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6374-1 Related CVEs: CVE-2023-4874 CVE-2023-4875 CVE-2021-32055 CVE-2022-1328 CVE-2021-3181 CVE-2020-28896 CVE-2020-14954 https://launchpad.net/bugs/1884588  +2 more Upstream summary: It was discovered that Mutt incorrectly handled certain email header contents. If a user were […]