ubuntu

Ubuntu 20.04 — cyrus-sasl2 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — cyrus-sasl2 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5301-1 Related CVEs: CVE-2022-24407 Upstream summary: It was discovered that the Cyrus SASL SQL plugin incorrectly handled SQL input. A remote attacker could use this issue to execute arbitrary SQL […]

Read more
Ubuntu 18.04 — gmp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — gmp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5672-1 Related CVEs: CVE-2021-43618 Upstream summary: It was discovered that GMP did not properly manage memory on 32-bit platforms when processing a specially crafted input. An attacker could possibly use […]

Read more
Ubuntu 20.04 — linuxptp — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — linuxptp — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6097-1 Related CVEs: CVE-2021-3570 Upstream summary: It was discovered that Linux PTP did not properly perform a length check when forwarding a PTP message between ports. A remote attacker could […]

Read more
Ubuntu 20.04 — linux-hwe-5.8 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — linux-hwe-5.8 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 3 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5016-1 Related CVEs: CVE-2021-23134 CVE-2021-32399 CVE-2021-33034 CVE-2021-33909 CVE-2021-3506 CVE-2020-24586 CVE-2020-24587 CVE-2020-24588  +12 more Upstream summary: It was discovered that the virtual file system implementation in the Linux kernel contained an […]

Read more
Ubuntu 18.04 — sosreport — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — sosreport — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5636-1 Related CVEs: CVE-2022-2806 Upstream summary: It was discovered that SoS incorrectly handled certain data. An attacker could possibly use this issue to expose sensitive information. Table of contents Symptom […]

Read more
Ubuntu 18.04 — golang-yaml.v2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — golang-yaml.v2 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 April 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6287-1 Related CVEs: CVE-2021-4235 CVE-2022-3064 Upstream summary: Simon Ferquel discovered that the Go yaml package incorrectly handled certain YAML documents. If a user or an automated system were tricked into […]

Read more
Ubuntu 20.04 — stunnel4 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — stunnel4 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 1 April 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6901-1 Related CVEs: CVE-2021-20230 Upstream summary: It was discovered that stunnel did not properly validate client certificates when configured to use both the redirect and verifyChain options. A remote attacker […]

Read more
Ubuntu 20.04 — lz4 — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — lz4 — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 March 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4968-1 Related CVEs: CVE-2021-3520 Upstream summary: It was discovered that LZ4 incorrectly handled certain memory operations. If a user or automated system were tricked into uncompressing a specially- crafted LZ4 […]

Read more
Ubuntu 18.04 — usbredir — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — usbredir — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 31 March 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5784-1 Related CVEs: CVE-2021-3700 Upstream summary: It was discovered that usbredir incorrectly handled memory when serializing large amounts of data in the case of a slow or blocked destination. An […]

Read more
CHAT