ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 11 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6419-1 Related CVEs: CVE-2016-7103 CVE-2021-41182 CVE-2021-41183 CVE-2021-41184 CVE-2022-31160 Upstream summary: Hong Phat Ly discovered that jQuery UI did not properly manage parameters from untrusted sources, which could lead to arbitrary […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 April 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5720-1 Related CVEs: CVE-2021-24031 CVE-2021-24032 CVE-2019-11922 Upstream summary: It was discovered that Zstandard was not properly managing file permissions when generating output files. A local attacker could possibly use this […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 April 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7398-1 Related CVEs: CVE-2021-33643 CVE-2021-33644 CVE-2021-33645 CVE-2021-33646 Upstream summary: It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5026-1 Related CVEs: CVE-2018-18020 CVE-2021-36978 Upstream summary: It was discovered that QPDF incorrectly handled certain malformed PDF files. A remote attacker could use this issue to cause QPDF to consume […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 April 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4906-1 Related CVEs: CVE-2021-20305 CVE-2016-6489 Upstream summary: It was discovered that Nettle incorrectly handled signature verification. A remote attacker could use this issue to cause Nettle to crash, resulting in […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6225-1 Related CVEs: CVE-2022-40188 Upstream summary: It was discovered that Knot Resolver did not correctly handle certain client options. A remote attacker could send requests to malicous domains and cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8240-1 Related CVEs: CVE-2022-25236 CVE-2022-25235 Upstream summary: It was discovered that Expat, vendored in Swish-e incorrectly handled certain files. An attacker could possibly use this issue to cause a crash […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4760-1 Related CVEs: CVE-2021-24031 CVE-2021-24032 Upstream summary: It was discovered that libzstd incorrectly handled file permissions. A local attacker could possibly use this issue to access certain files, contrary to […]

🟠 High   ⏱ 15–60 min  Last verified: 6 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5483-1 Related CVEs: CVE-2018-12648 CVE-2021-36045 CVE-2021-36046 CVE-2021-36047 CVE-2021-36048 CVE-2021-36050 CVE-2021-36051 CVE-2021-36052  +12 more Upstream summary: It was discovered that Exempi incorrectly handled certain media files. If a user or automated […]

🟠 High   ⏱ 15–60 min  Last verified: 5 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5014-1 Related CVEs: CVE-2021-33909 CVE-2021-3609 https://launchpad.net/bugs/1924611 CVE-2021-29154 CVE-2021-3492 CVE-2021-3493 CVE-2020-27170 CVE-2020-27171  +12 more Upstream summary: It was discovered that the virtual file system implementation in the Linux kernel contained an […]