ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7870-1 Related CVEs: CVE-2024-24258 CVE-2024-24259 Upstream summary: It was discovered that Freeglut incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6066-1 Related CVEs: CVE-2023-1625 Upstream summary: It was discovered that OpenStack Heat incorrectly handled certain hidden parameter values. A remote authenticated user could possibly use this issue to obtain sensitive […]

🟠 High   ⏱ 15–60 min  Last verified: 29 January 2024 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6684-1 Related CVEs: CVE-2023-50495 CVE-2020-19189 CVE-2019-17594 CVE-2019-17595 CVE-2021-39537 CVE-2022-29458 CVE-2023-29491 CVE-2017-16879  +12 more Upstream summary: It was discovered that ncurses incorrectly handled certain function return values, possibly leading to segmentation […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2024 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6307-1 Related CVEs: CVE-2023-37464 Upstream summary: It was discovered that JOSE for C/C++ AES GCM decryption routine incorrectly uses the Tag length from the actual Authentication Tag provided in the […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 January 2024 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6280-1 Related CVEs: CVE-2023-36810 CVE-2022-24859 Upstream summary: It was discovered that PyPDF2 incorrectly handled PDF files with certain markers. If a user or automated system were tricked into processing a […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7062-1 Related CVEs: CVE-2024-36474 CVE-2024-42415 Upstream summary: It was discovered that libgsf incorrectly handled certain Compound Document Binary files. If a user or automated system were tricked into opening a […]

🟠 High   ⏱ 15–60 min  Last verified: 28 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7318-1 Related CVEs: CVE-2022-23638 CVE-2022-28959 CVE-2022-28960 CVE-2022-28961 CVE-2022-37155 CVE-2023-24258 CVE-2023-27372 CVE-2024-8517  +4 more Upstream summary: It was discovered that svg-sanitizer, vendored in SPIP, did not properly sanitize SVG/XML content. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7677-1 Related CVEs: CVE-2024-6174 CVE-2024-11584 https://launchpad.net/bugs/2020375 CVE-2023-1786 https://bugs.launchpad.net/cloud-init/+bug/2013967 CVE-2022-2084 Upstream summary: Harry Sintonen discovered that the hotplugd socket in cloud-init was world writable. An attacker could possibly use this issue […]

🟠 High   ⏱ 15–60 min  Last verified: 27 January 2024 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6583-1 Related CVEs: CVE-2023-22028 CVE-2023-22084 CVE-2023-22015 CVE-2023-22026 CVE-2023-22053 CVE-2023-21911 CVE-2023-21912 CVE-2023-21919  +12 more Upstream summary: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions […]

🟡 Medium   ⏱ 10–30 min  Last verified: 27 January 2024 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6407-1 Related CVEs: CVE-2023-43785 CVE-2023-43786 CVE-2023-43787 CVE-2023-3138 CVE-2021-31535 CVE-2020-14344 CVE-2020-14363 Upstream summary: Gregory James Duck discovered that libx11 incorrectly handled certain keyboard symbols. If a user were tricked into connecting […]