ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 31 December 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6800-1 Related CVEs: CVE-2023-46234 Upstream summary: It was discovered that browserify-sign incorrectly handled an upper bound check in signature verification. If a user or an automated system were tricked into […]

🟡 Medium   ⏱ 10–30 min  Last verified: 31 December 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6708-1 Related CVEs: CVE-2023-46045 CVE-2018-10196 CVE-2019-11023 CVE-2020-18032 CVE-2014-9157 Upstream summary: It was discovered that Graphviz incorrectly handled certain config6a files. An attacker could possibly use this issue to cause a […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 December 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6477-1 Related CVEs: CVE-2023-4016 Upstream summary: It was discovered that the procps-ng ps tool incorrectly handled memory. An attacker could possibly use this issue to cause procps-ng to crash, resulting […]

🟠 High   ⏱ 15–60 min  Last verified: 28 December 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6369-2 Related CVEs: CVE-2023-4863 CVE-2023-1999 CVE-2018-25009 CVE-2018-25010 CVE-2018-25011 CVE-2018-25012 CVE-2018-25013 CVE-2018-25014  +5 more Upstream summary: USN-6369-1 fixed a vulnerability in libwebp. This update provides the corresponding update for Ubuntu 18.04 […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 December 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8247-1 Related CVEs: CVE-2023-27476 Upstream summary: It was discovered that OWSLib did not properly disable entity resolution within its XML parser. An attacker could possibly use this issue to read […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 December 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7077-1 Related CVEs: CVE-2023-31315 CVE-2023-20569 CVE-2023-20593 CVE-2017-5715 Upstream summary: Enrique Nissim and Krzysztof Okupski discovered that some AMD processors did not properly restrict access to the System Management Mode (SMM) […]

🟠 High   ⏱ 15–60 min  Last verified: 24 December 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7109-1 Related CVEs: CVE-2022-41723 CVE-2022-41724 CVE-2022-41725 CVE-2023-24531 CVE-2023-24536 CVE-2023-29402 CVE-2023-29403 CVE-2023-29404  +12 more Upstream summary: Philippe Antoine discovered that Go incorrectly handled crafted HTTP/2 streams. An attacker could possibly use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 December 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6574-1 Related CVEs: CVE-2023-39318 CVE-2023-39319 CVE-2023-39323 CVE-2023-39325 CVE-2023-39326 CVE-2023-44487 CVE-2023-45285 Upstream summary: Takeshi Kaneko discovered that Go did not properly handle comments and special tags in the script context of […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 December 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6358-1 Related CVEs: CVE-2023-31606 Upstream summary: It was discovered that RedCloth incorrectly handled certain inputs during html sanitisation. An attacker could possibly use this issue to cause a denial of […]