ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 6 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5069-1 Related CVEs: CVE-2021-3639 Upstream summary: It was discovered that mod-auth-mellon incorrectly filtered certain URLs. A remote attacker could possibly use this issue to perform an open redirect attack. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 May 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5066-1 Related CVEs: CVE-2021-21239 Upstream summary: Brian Wolff discovered that PySAML2 incorrectly validated cryptographic signatures. A remote attacker could possibly use this issue to alter SAML documents. Table of contents […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 May 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5080-1 Related CVEs: CVE-2021-33560 CVE-2021-40528 CVE-2019-13627 CVE-2018-0495 Upstream summary: It was discovered that Libgcrypt incorrectly handled ElGamal encryption. An attacker could possibly use this issue to recover sensitive information. Table […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 May 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5843-1 Related CVEs: CVE-2022-47016 Upstream summary: It was discovered that tmux incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. Table of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 May 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7266-1 Related CVEs: CVE-2017-0691 CVE-2020-19858 CVE-2020-22628 CVE-2020-35530 CVE-2020-35531 CVE-2020-35532 CVE-2020-35533 CVE-2021-32142  +1 more Upstream summary: Zinuo Han and Ao Wang discovered that the Android DNG SDK, vendored in digiKam, did […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 May 2022 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7398-1 Related CVEs: CVE-2021-33643 CVE-2021-33644 CVE-2021-33645 CVE-2021-33646 Upstream summary: It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 May 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7959-1 Related CVEs: CVE-2016-9843 CVE-2016-9840 CVE-2016-9841 CVE-2018-25032 CVE-2022-37434 CVE-2021-31870 CVE-2021-31871 CVE-2021-31872  +1 more Upstream summary: It was discovered that zlib, vendored in klibc, did not properly handle integer arithmetic. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 May 2022 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5821-4 Related CVEs: https://launchpad.net/bugs/2009130 CVE-2022-40898 CVE-2021-3572 Upstream summary: USN-5821-3 fixed a vulnerability in pip. The update introduced a minor regression in Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 […]