ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 18 June 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6668-1 Related CVEs: CVE-2023-6110 Upstream summary: It was discovered that when python-openstackclient attempted to delete a non-existing access rule, it would delete another existing access rule instead, contrary to expectations. […]

🟠 High   ⏱ 15–60 min  Last verified: 18 June 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6369-1 Related CVEs: CVE-2023-4863 CVE-2023-1999 CVE-2018-25009 CVE-2018-25010 CVE-2018-25011 CVE-2018-25012 CVE-2018-25013 CVE-2018-25014  +5 more Upstream summary: It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5763-1 Related CVEs: CVE-2021-33430 CVE-2021-34141 CVE-2021-41495 CVE-2021-41496 Upstream summary: It was discovered that NumPy did not properly manage memory when specifying arrays of large dimensions. If a user were tricked […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7190-1 Related CVEs: CVE-2023-49606 CVE-2022-40468 Upstream summary: It was discovered that Tinyproxy did not properly manage memory during the parsing of HTTP connection headers. An attacker could use this issue […]

🟠 High   ⏱ 15–60 min  Last verified: 17 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6842-1 Related CVEs: CVE-2022-4285 CVE-2023-1972 CVE-2023-39128 CVE-2023-39129 CVE-2023-39130 CVE-2014-8501 CVE-2014-9939 CVE-2016-2226  +8 more Upstream summary: It was discovered that gdb incorrectly handled certain memory operations when parsing an ELF file. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 June 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5847-1 Related CVEs: CVE-2020-7729 CVE-2022-0436 CVE-2022-1537 Upstream summary: It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 June 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6402-1 Related CVEs: CVE-2023-36328 Upstream summary: It was discovered that LibTomMath incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code and cause a denial […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 June 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7292-1 Related CVEs: CVE-2021-36369 CVE-2023-48795 Upstream summary: Manfred Kaiser discovered that Dropbear through 2020.81 does not properly check the available authentication methods in the client-side SSH code. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 June 2023 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5947-1 Related CVEs: CVE-2019-9942 CVE-2022-23614 CVE-2022-39261 Upstream summary: Fabien Potencier discovered that Twig was not properly enforcing sandbox policies when dealing with objects automatically cast to strings by PHP. An […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 June 2023 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5301-2 Related CVEs: CVE-2022-24407 CVE-2019-19906 Upstream summary: USN-5301-1 fixed a vulnerability in Cyrus. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: […]