ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 6 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5785-1 Related CVEs: CVE-2019-17185 CVE-2022-41860 CVE-2022-41861 CVE-2017-10978 CVE-2017-10979 CVE-2017-10980 CVE-2017-10981 CVE-2017-10982  +5 more Upstream summary: It was discovered that FreeRADIUS incorrectly handled multiple EAP-pwd handshakes. An attacker could possibly use […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 June 2023 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6116-1 Related CVEs: CVE-2022-29167 Upstream summary: It was discovered that hawk incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5944-1 Related CVEs: CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 Upstream summary: It was discovered that SnakeYAML did not limit the maximal nested depth for collections when parsing YAML data. If a user […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5966-2 Related CVEs: https://launchpad.net/bugs/2012536 CVE-2022-37703 CVE-2022-37704 CVE-2022-37705 Upstream summary: USN-5966-1 fixed vulnerabilities in amanda. Unfortunately it introduced a regression in GNUTAR-based backups. This update reverts all of the changes in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6640-1 Related CVEs: CVE-2023-4641 https://launchpad.net/bugs/1998169 CVE-2013-4235 CVE-2017-12424 CVE-2018-7169 https://launchpad.net/bugs/1690820 CVE-2016-6252 CVE-2017-2616 Upstream summary: It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6275-1 Related CVEs: CVE-2023-38497 Upstream summary: Addison Crump discovered that Cargo incorrectly set file permissions on UNIX-like systems when extracting crate archives. If the crate would contain files writable by […]

🟢 Low   ⏱ 5–15 min  Last verified: 5 June 2023 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8174-1 Related CVEs: CVE-2006-10002 CVE-2006-10003 Upstream summary: It was discovered that XML::Parser incorrectly handled certain multi-byte UTF-8 characters. If a user or automated system were tricked into processing specially crafted […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2023 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5532-2 Related CVEs: CVE-2022-31799 Upstream summary: USN-5532-1 fixed a vulnerability in Bottle. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM Original advisory details: It […]