ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 8 May 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7038-1 Related CVEs: CVE-2023-49582 Upstream summary: Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime (APR) library. A local attacker could possibly use this issue to read named […]

🟠 High   ⏱ 15–60 min  Last verified: 8 May 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6374-1 Related CVEs: CVE-2023-4874 CVE-2023-4875 CVE-2021-32055 CVE-2022-1328 CVE-2021-3181 CVE-2020-28896 CVE-2020-14954 https://launchpad.net/bugs/1884588  +12 more Upstream summary: It was discovered that Mutt incorrectly handled certain email header contents. If a user were […]

🟠 High   ⏱ 15–60 min  Last verified: 8 May 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6583-1 Related CVEs: CVE-2023-22028 CVE-2023-22084 CVE-2023-22015 CVE-2023-22026 CVE-2023-22053 CVE-2023-21912 CVE-2023-21980 CVE-2023-21840  +12 more Upstream summary: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 May 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7404-1 Related CVEs: CVE-2021-30130 CVE-2023-52892 CVE-2024-27354 CVE-2024-27355 Upstream summary: It was discovered that phpseclib did not correctly handle RSA PKCS#1 v1.5 signature verification. An attacker could possibly use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 May 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6960-1 Related CVEs: CVE-2023-5349 Upstream summary: Nick Browning discovered that RMagick incorrectly handled memory under certain operations. An attacker could possibly use this issue to cause a denial of service […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 May 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5996-1 Related CVEs: CVE-2023-26767 CVE-2023-26768 CVE-2023-26769 CVE-2022-26981 CVE-2022-31783 Upstream summary: It was discovered that Liblouis incorrectly handled certain files. An attacker could possibly use this issue to cause a denial […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 May 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6748-1 Related CVEs: CVE-2023-23627 CVE-2023-36823 CVE-2020-4054 Upstream summary: It was discovered that Sanitize incorrectly handled noscript elements under certain circumstances. An attacker could possibly use this issue to execute a […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 May 2024 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6796-1 Related CVEs: CVE-2023-22745 CVE-2024-29040 Upstream summary: Fergus Dall discovered that TPM2 Software Stack did not properly handle layer arrays. An attacker could possibly use this issue to cause TPM2 […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 May 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6275-1 Related CVEs: CVE-2023-38497 Upstream summary: Addison Crump discovered that Cargo incorrectly set file permissions on UNIX-like systems when extracting crate archives. If the crate would contain files writable by […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 May 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7158-1 Related CVEs: CVE-2018-25047 CVE-2023-28447 CVE-2024-35226 CVE-2018-13982 CVE-2018-16831 CVE-2021-21408 CVE-2021-26119 CVE-2021-26120  +1 more Upstream summary: It was discovered that Smarty incorrectly handled query parameters in requests. An attacker could possibly […]