ubuntu

Ubuntu 18.04 — tang — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — tang — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 November 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6489-1 Related CVEs: CVE-2023-1672 Upstream summary: Brian McDermott discovered that Tang incorrectly handled permissions when creating/rotating keys. A local attacker could possibly use this issue to read the keys. Table […]

Read more
Ubuntu 20.04 — kvmtool — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — kvmtool — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 November 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8172-1 Related CVEs: CVE-2023-2861 CVE-2021-45464 Upstream summary: It was discovered that kvmtool did not properly manage memory under certain circumstances. A malicious guest attacker could use this issue to cause […]

Read more
Ubuntu 14.04 — nodejs — multiple vulnerabilities (12 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — nodejs — multiple vulnerabilities (12 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 31 October 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6735-1 Related CVEs: CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 CVE-2016-7099 CVE-2017-1000381 CVE-2018-12115 CVE-2018-12116 CVE-2018-12122  +4 more Upstream summary: It was discovered that Node.js incorrectly handled the use of invalid public keys while creating […]

Read more
Ubuntu 18.04 — request-tracker4 — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — request-tracker4 — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 31 October 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6529-1 Related CVEs: CVE-2021-38562 CVE-2022-25802 CVE-2023-41259 CVE-2023-41260 Upstream summary: It was discovered that Request Tracker incorrectly handled certain inputs. If a user or an automated system were tricked into opening […]

Read more
Common Problems 116897

Ubuntu 22.04 apt Lock Contention During Package Operations

🟡 Medium   ⏱ 5–30 min  Last verified: 31 October 2023 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Ubuntu 16.04 — glusterfs — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — glusterfs — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 30 October 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5989-1 Related CVEs: CVE-2023-26253 CVE-2014-3619 CVE-2018-10841 CVE-2018-1088 CVE-2018-10904 CVE-2018-10907 CVE-2018-10911 CVE-2018-10913  +12 more Upstream summary: Tao Lyu discovered that GlusterFS did not properly handle certain event notifications. An attacker could […]

Read more
Ubuntu 22.04 — grub2-unsigned — multiple vulnerabilities (13 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — grub2-unsigned — multiple vulnerabilities (13 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 29 October 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6410-1 Related CVEs: CVE-2023-4692 CVE-2023-4693 CVE-2022-28737 CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2021-3981 CVE-2022-28733  +5 more Upstream summary: It was discovered that a specially crafted file system image could cause a heap-based out-of-bounds […]

Read more
Common Problems 116890

Ubuntu 22.04 LTS – apt update fails with NO_PUBKEY for third-party repository – Fix & Prevention

🟠 High   ⏱ 5–30 min  Last verified: 29 October 2023 Affected versions: Ubuntu 22.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]

Read more
CHAT