ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6799-1 Related CVEs: CVE-2024-34069 CVE-2023-23934 CVE-2023-25577 Upstream summary: It was discovered that the debugger in Werkzeug was not restricted to trusted hosts. A remote attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6530-1 Related CVEs: CVE-2023-45539 CVE-2023-40225 CVE-2023-25725 CVE-2023-0056 CVE-2022-0711 CVE-2021-40346 https://launchpad.net/bugs/1940314 Upstream summary: It was discovered that HAProxy incorrectly handled URI components containing the hash character (#). A remote attacker could […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7732-1 Related CVEs: CVE-2024-50624 Upstream summary: It was discovered that KMail Account Wizard used HTTP rather than HTTPS when retrieving certain email server configurations. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7430-1 Related CVEs: CVE-2023-28686 Upstream summary: Kim Alvefur discovered that Dino did not correctly sanitize certain messages. A remote attacker could possibly use this issue to leak sensitive information. Table […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 March 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6969-1 Related CVEs: CVE-2024-25641 CVE-2024-29894 CVE-2024-31443 CVE-2024-31444 CVE-2024-31445 CVE-2024-31458 CVE-2024-31459 CVE-2024-31460  +1 more Upstream summary: It was discovered that Cacti did not properly apply checks to the "Package Import" feature. […]

🟠 High   ⏱ 15–60 min  Last verified: 23 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7562-1 Related CVEs: CVE-2024-24549 CVE-2024-34750 CVE-2024-23672 CVE-2023-42795 CVE-2024-38286 CVE-2023-45648 CVE-2023-28708 CVE-2024-21733  +12 more Upstream summary: It was discovered that Tomcat did not include the secure attribute for session cookies when […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8242-1 Related CVEs: CVE-2023-28447 Upstream summary: Takuya Aramaki discovered that Smarty, vendored in CiviCRM, did not properly escape JavaScript code. An attacker could possibly use this issue to conduct a […]

🟠 High   ⏱ 15–60 min  Last verified: 21 March 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6407-2 Related CVEs: CVE-2023-43785 CVE-2023-43786 CVE-2023-43787 CVE-2023-3138 CVE-2021-31535 CVE-2020-14344 CVE-2020-14363 CVE-2016-7942  +4 more Upstream summary: USN-6407-1 fixed several vulnerabilities in libx11. This update provides the corresponding update for Ubuntu 14.04 […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 March 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6275-1 Related CVEs: CVE-2023-38497 Upstream summary: Addison Crump discovered that Cargo incorrectly set file permissions on UNIX-like systems when extracting crate archives. If the crate would contain files writable by […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6824-1 Related CVEs: CVE-2021-40633 CVE-2022-28506 CVE-2023-39742 Upstream summary: It was discovered that GIFLIB incorrectly handled certain GIF files. An attacker could possibly use this issue to cause a denial of […]