ubuntu

Ubuntu 20.04 — ncurses — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — ncurses — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 11 October 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6099-1 Related CVEs: CVE-2019-17594 CVE-2019-17595 CVE-2021-39537 CVE-2022-29458 CVE-2023-29491 Upstream summary: It was discovered that ncurses was incorrectly performing bounds checks when processing invalid hashcodes. An attacker could possibly use this […]

Read more
Ubuntu 22.04 — epiphany-browser — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — epiphany-browser — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 10 October 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5561-1 Related CVEs: CVE-2021-45085 CVE-2021-45086 CVE-2021-45087 CVE-2022-29536 Upstream summary: It was discovered that GNOME Web incorrectly filtered certain strings. A remote attacker could use this issue to perform cross-site scripting […]

Read more
Ubuntu 18.04 — gdb — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — gdb — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 9 October 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6842-1 Related CVEs: CVE-2022-4285 CVE-2023-1972 CVE-2023-39128 CVE-2023-39129 CVE-2023-39130 Upstream summary: It was discovered that gdb incorrectly handled certain memory operations when parsing an ELF file. An attacker could possibly use […]

Read more
Ubuntu 16.04 — libspreadsheet-parseexcel-perl — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libspreadsheet-parseexcel-perl — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 9 October 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6781-1 Related CVEs: CVE-2023-7101 Upstream summary: Le Dinh Hai discovered that Spreadsheet::ParseExcel was passing unvalidated input from a file into a string-type "eval". An attacker could craft a malicious file […]

Read more
Ubuntu 18.04 — haproxy — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — haproxy — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 9 October 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7067-1 Related CVEs: CVE-2023-44487 CVE-2023-45539 CVE-2023-25725 CVE-2020-11100 CVE-2019-19330 CVE-2019-18277 CVE-2018-20102 CVE-2018-20103  +3 more Upstream summary: It was discovered that HAProxy did not properly limit the creation of new HTTP/2 streams. […]

Read more
Ubuntu 22.04 — fdkaac — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — fdkaac — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 October 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7660-1 Related CVEs: CVE-2023-34823 CVE-2022-37781 CVE-2022-36148 CVE-2023-34824 Upstream summary: It was discovered that fdkaac did not correctly handle certain input. If a user or automated system were tricked into opening […]

Read more
Ubuntu 20.04 — postfix — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — postfix — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 8 October 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6591-2 Related CVEs: CVE-2023-51764 https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/2049337 https://bugs.launchpad.net/ubuntu/+source/postfix/+bug/2050834 Upstream summary: USN-6591-1 fixed vulnerabilities in Postfix. A fix with less risk of regression has been made available since the last update. This update […]

Read more
Common Problems 116895

Ubuntu 22.04 LTS APT Lock Error During Updates

🟡 Medium   ⏱ 5–30 min  Last verified: 8 October 2023 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors & Cross-Refs References & Further […]

Read more
Ubuntu 22.04 — flask-security — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — flask-security — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 7 October 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6792-1 Related CVEs: CVE-2021-23385 Upstream summary: Naom Moshe discovered that Flask-Security incorrectly validated URLs. An attacker could use this issue to redirect users to arbitrary URLs. Table of contents Symptom […]

Read more
CHAT