ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 17 May 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6345-1 Related CVEs: CVE-2023-32627 CVE-2021-33844 CVE-2019-13590 CVE-2021-23159 CVE-2021-23172 CVE-2021-23210 CVE-2021-3643 CVE-2021-40426  +2 more Upstream summary: It was discovered that SoX incorrectly handled certain inputs. If a user or an automated […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 May 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6630-1 Related CVEs: CVE-2024-1141 https://launchpad.net/bugs/2020111 CVE-2023-2088 Upstream summary: It was discovered that Glance_store incorrectly handled logging when the DEBUG log level is enabled. A local attacker could use this issue […]

🟠 High   ⏱ 15–60 min  Last verified: 16 May 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6895-4 Related CVEs: CVE-2023-52631 CVE-2023-52637 CVE-2023-52638 CVE-2023-52642 CVE-2023-52643 CVE-2023-52645 CVE-2023-52880 CVE-2023-6270  +12 more Upstream summary: It was discovered that the ATA over Ethernet (AoE) driver in the Linux kernel contained […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 May 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6326-1 Related CVEs: CVE-2023-40267 CVE-2022-24439 Upstream summary: It was discovered that GitPython did not block insecure options from user inputs in the clone command. An attacker could possibly use this […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 May 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6574-1 Related CVEs: CVE-2023-39318 CVE-2023-39319 CVE-2023-39323 CVE-2023-39325 CVE-2023-39326 CVE-2023-44487 CVE-2023-45285 Upstream summary: Takeshi Kaneko discovered that Go did not properly handle comments and special tags in the script context of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7161-2 Related CVEs: CVE-2024-29018 CVE-2024-41110 CVE-2021-41089 CVE-2020-15157 CVE-2019-1020014 CVE-2018-15664 CVE-2019-5736 Upstream summary: USN-7161-1 fixed CVE-2024-29018 in Ubuntu 24.04 LTS. This update fixes it for source package docker.io in Ubuntu 16.04 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 15 May 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8217-1 Related CVEs: CVE-2022-0155 CVE-2022-0536 CVE-2023-26159 CVE-2024-28849 Upstream summary: It was discovered that follow-redirects did not properly protect sensitive user information during redirects. An attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7441-1 Related CVEs: CVE-2024-10525 CVE-2024-3935 CVE-2017-7655 CVE-2017-7653 CVE-2017-7654 Upstream summary: It was discovered that Eclipse Mosquitto client incorrectly handled memory when receiving a SUBACK packet. An attacker with a malicious […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 May 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6306-1 Related CVEs: CVE-2021-38425 CVE-2023-39534 CVE-2023-39945 CVE-2023-39946 CVE-2023-39947 CVE-2023-39948 CVE-2023-39949 Upstream summary: It was discovered that Fast DDS incorrectly handled certain inputs. A remote attacker could possibly use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 May 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6100-1 Related CVEs: CVE-2023-24038 Upstream summary: It was discovered that HTML::StripScripts does not properly parse HTML content with certain style attributes. A remote attacker could use this issue to cause […]