ubuntu

Ubuntu 18.04 — htmldoc — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — htmldoc — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 21 April 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7225-1 Related CVEs: CVE-2022-0137 CVE-2022-0534 CVE-2022-24191 CVE-2022-27114 CVE-2022-28085 CVE-2022-34033 CVE-2022-34035 CVE-2024-45508  +12 more Upstream summary: It was discovered that HTMLDOC incorrectly handled memory in the image_set_mask, git_read_lzw, write_header and write_node […]

Read more
Ubuntu 22.04 — libjettison-java — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — libjettison-java — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 April 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6179-1 Related CVEs: CVE-2023-1436 CVE-2022-40149 CVE-2022-40150 CVE-2022-45685 CVE-2022-45693 Upstream summary: It was discovered that Jettison incorrectly handled certain inputs. If a user or an automated system were tricked into opening […]

Read more
Ubuntu 22.04 — lambdaisland-uri-clojure — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — lambdaisland-uri-clojure — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 April 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8151-1 Related CVEs: CVE-2023-28628 Upstream summary: It was discovered that lambdaisland/uri did not properly sanitize the backslash character in URI strings. An attacker could possibly use this issue to bypass […]

Read more
Ubuntu 22.04 — pcl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — pcl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 20 April 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7227-1 Related CVEs: CVE-2024-53432 Upstream summary: It was discovered that PCL incorrectly handled certain malformed files. If a user or automated system were tricked into opening a specially crafted file, […]

Read more
Ubuntu 20.04 — busybox — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — busybox — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 20 April 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6961-1 Related CVEs: CVE-2022-48174 CVE-2023-42363 CVE-2023-42364 CVE-2023-42365 CVE-2021-28831 CVE-2021-42374 CVE-2021-42378 CVE-2021-42379  +7 more Upstream summary: It was discovered that BusyBox did not properly validate user input when performing certain arithmetic […]

Read more
Ubuntu 20.04 — sssd — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — sssd — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 20 April 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6836-1 Related CVEs: CVE-2023-3758 https://launchpad.net/bugs/2023598 CVE-2022-4254 CVE-2018-10852 CVE-2018-16838 CVE-2019-3811 CVE-2021-3621 Upstream summary: It was discovered that SSSD did not always correctly apply the GPO policy for authenticated users, contrary to […]

Read more
Ubuntu 18.04 — anope — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — anope — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 19 April 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6761-1 Related CVEs: CVE-2024-30187 Upstream summary: It was discovered that Anope did not properly process credentials for suspended accounts. An attacker could possibly use this issue to normally login to […]

Read more
Ubuntu 22.04 — google-osconfig-agent — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — google-osconfig-agent — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6746-1 Related CVEs: CVE-2024-24786 Upstream summary: It was discovered that Google Guest Agent and Google OS Config Agent incorrectly handled certain JSON files. An attacker could possibly use this issue […]

Read more
Ubuntu 22.04 — python-pymysql — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — python-pymysql — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6801-1 Related CVEs: CVE-2024-36039 Upstream summary: It was discovered that PyMySQL incorrectly escaped untrusted JSON input. An attacker could possibly use this issue to perform SQL injection attacks. Table of […]

Read more
Ubuntu 20.04 — docker-registry — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — docker-registry — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6336-1 Related CVEs: CVE-2017-11468 CVE-2023-2253 Upstream summary: It was discovered that Docker Registry incorrectly handled certain crafted input, A remote attacker could possibly use this issue to cause a denial […]

Read more
CHAT