ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 12 July 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6287-1 Related CVEs: CVE-2021-4235 CVE-2022-3064 Upstream summary: Simon Ferquel discovered that the Go yaml package incorrectly handled certain YAML documents. If a user or an automated system were tricked into […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 July 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5922-1 Related CVEs: CVE-2022-25308 CVE-2022-25309 CVE-2022-25310 Upstream summary: It was discovered that FriBidi incorrectly handled the processing of input strings, resulting in memory corruption. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 July 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6169-1 Related CVEs: CVE-2022-2469 Upstream summary: It was discovered that GNU SASL's GSSAPI server could make an out-of-bounds reads if given specially crafted GSS-API authentication data. A remote attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 11 July 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6385-1 Related CVEs: CVE-2022-27672 CVE-2022-4269 CVE-2023-0458 CVE-2023-1075 CVE-2023-1076 CVE-2023-1206 CVE-2023-1380 CVE-2023-1611  +12 more Upstream summary: It was discovered that some AMD x86-64 processors with SMT enabled could speculatively execute instructions […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 July 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6166-2 Related CVEs: CVE-2023-2603 Upstream summary: USN-6166-1 fixed a vulnerability in libcap2. This update provides the corresponding update for Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 ESM. Original […]

🟢 Low   ⏱ 5–15 min  Last verified: 11 July 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6204-1 Related CVEs: CVE-2023-34095 Upstream summary: Seth Arnold discovered that CPDB incorrectly handled certain characters. An attacker could possibly use this issue to cause a crash or execute arbitrary code. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 July 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6488-1 Related CVEs: CVE-2023-41913 CVE-2022-40617 CVE-2021-45079 CVE-2021-41990 CVE-2021-41991 Upstream summary: Florian Picca discovered that strongSwan incorrectly handled certain DH public values. A remote attacker could use this issue to cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 July 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7146-1 Related CVEs: CVE-2017-7537 CVE-2020-25715 CVE-2022-2414 Upstream summary: Christina Fu discovered that Dogtag PKI accidentally enabled a mock authentication plugin by default. An attacker could potentially use this flaw to […]

🟠 High   ⏱ 15–60 min  Last verified: 10 July 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5895-1 Related CVEs: CVE-2022-38850 CVE-2022-38851 CVE-2022-38855 CVE-2022-38858 CVE-2022-38860 CVE-2022-38861 CVE-2022-38863 CVE-2022-38864  +2 more Upstream summary: It was discovered that MPlayer could be made to divide by zero when processing certain […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 July 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6067-1 Related CVEs: CVE-2021-20267 CVE-2021-38598 CVE-2021-40085 CVE-2021-40797 CVE-2022-3277 Upstream summary: David Sinquin discovered that OpenStack Neutron incorrectly handled the default Open vSwitch firewall rules. An attacker could possibly use this […]