ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 30 May 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5292-4 Related CVEs: https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1961365 https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1961791 CVE-2021-3155 CVE-2021-4120 CVE-2021-44730 CVE-2021-44731 CVE-2019-7303 https://launchpad.net/bugs/1812973  +2 more Upstream summary: USN-5292-1 fixed a vulnerability in snapd. Unfortunately that update introduced a regression that could break […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6758-1 Related CVEs: CVE-2022-46175 Upstream summary: It was discovered that the JSON5 parse method incorrectly handled the parsing of keys named \_\_proto\_\_. An attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 May 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5843-1 Related CVEs: CVE-2022-47016 Upstream summary: It was discovered that tmux incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. Table of […]

🟢 Low   ⏱ 5–15 min  Last verified: 27 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5378-1 Related CVEs: CVE-2022-1271 Upstream summary: Cleemy Desu Wayo discovered that Gzip incorrectly handled certain filenames. If a user or automated system were tricked into performing zgrep operations with specially […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 May 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7353-1 Related CVEs: CVE-2022-1231 Upstream summary: Tobias S. Fink discovered that PlantUML was susceptible to cross-site scripting attacks (XSS) in instances where SVG images were rendered. An attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5731-1 Related CVEs: CVE-2022-41973 CVE-2022-41974 Upstream summary: It was discovered that multipath-tools incorrectly handled symlinks. A local attacker could possibly use this issue, in combination with other issues, to escalate […]