ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 12 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8045-1 Related CVEs: CVE-2024-31884 CVE-2024-47866 CVE-2023-43040 CVE-2021-3979 CVE-2022-0670 CVE-2022-3650 CVE-2022-3854 CVE-2020-27781  +9 more Upstream summary: Martin Schobert discovered that Ceph did not properly verify SSL certificates when using Pybind for […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 March 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6970-1 Related CVEs: CVE-2023-45897 Upstream summary: It was discovered that exfatprogs incorrectly handled certain memory operations. If a user or automated system were tricked into handling specially crafted exfat partitions, […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6569-1 Related CVEs: CVE-2022-30333 CVE-2023-40477 Upstream summary: it was discovered that libclamunrar incorrectly handled directories when extracting RAR archives. A remote attacker could possibly use this issue to overwrite arbitrary […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 March 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6858-1 Related CVEs: CVE-2023-49990 CVE-2023-49991 CVE-2023-49992 CVE-2023-49993 CVE-2023-49994 Upstream summary: It was discovered that eSpeak NG did not properly manage memory under certain circumstances. An attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 7 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6744-1 Related CVEs: CVE-2024-28219 CVE-2023-44271 CVE-2023-50447 CVE-2022-24303 CVE-2022-45198 CVE-2022-22817 CVE-2021-23437 CVE-2021-34552  +12 more Upstream summary: Hugo van Kemenade discovered that Pillow was not properly performing bounds checks when processing an […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 March 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6671-1 Related CVEs: CVE-2023-29197 Upstream summary: It was discovered that php-nyholm-psr7 incorrectly parsed HTTP headers. A remote attacker could possibly use this issue to perform an HTTP header injection attack. […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 March 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6755-1 Related CVEs: CVE-2023-7207 CVE-2021-38185 Upstream summary: Ingo Brückl discovered that cpio contained a path traversal vulnerability. If a user or automated system were tricked into extracting a specially crafted […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 March 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6408-2 Related CVEs: CVE-2023-43786 CVE-2023-43787 CVE-2023-43788 CVE-2023-43789 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 Upstream summary: USN-6408-1 fixed several vulnerabilities in libXpm. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 […]