ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 24 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5708-1 Related CVEs: CVE-2022-41674 CVE-2022-42719 CVE-2022-42720 CVE-2022-42721 CVE-2022-42722 https://launchpad.net/bugs/1994525 Upstream summary: Sönke Huster discovered that an integer overflow vulnerability existed in the WiFi driver stack in the Linux kernel, leading […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5232-1 Related CVEs: CVE-2021-32749 Upstream summary: Jakub Żoczek discovered that certain Fail2ban actions handled whois responses in an insecure way. If Fail2ban was configured to use certain mail actions like […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5019-1 Related CVEs: CVE-2021-1093 CVE-2021-1094 CVE-2021-1095 CVE-2021-1076 CVE-2021-1077 Upstream summary: It was discovered that an assert() could be triggered in the NVIDIA graphics drivers. A local attacker could use this […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5969-1 Related CVEs: CVE-2021-45909 CVE-2021-45910 CVE-2021-45911 Upstream summary: It was discovered that gif2apng contained multiple heap-base overflows. An attacker could potentially exploit this to cause a denial of service (system […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2022 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5378-2 Related CVEs: CVE-2022-1271 Upstream summary: Cleemy Desu Wayo discovered that XZ Utils incorrectly handled certain filenames. If a user or automated system were tricked into performing xzgrep operations with […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5787-2 Related CVEs: CVE-2022-47629 CVE-2022-3515 CVE-2016-4353 CVE-2016-4354 CVE-2016-4355 CVE-2016-4356 CVE-2016-4574 CVE-2016-4579 Upstream summary: USN-5787-1 fixed vulnerabilities in Libksba. This update provides the corresponding updates for Ubuntu 16.04 ESM and Ubuntu […]

🟢 Low   ⏱ 5–15 min  Last verified: 17 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5821-2 Related CVEs: CVE-2022-40898 Upstream summary: USN-5821-1 fixed a vulnerability in wheel. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Sebastian Chnelik discovered that wheel […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7614-1 Related CVEs: CVE-2017-2661 CVE-2022-2735 CVE-2018-1086 CVE-2022-1049 Upstream summary: Cedric Buissart discovered that pcs did not correctly handle certain parameters. An attacker could possibly use this issue to leak sensitive […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 February 2022 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4760-1 Related CVEs: CVE-2021-24031 CVE-2021-24032 CVE-2019-11922 Upstream summary: It was discovered that libzstd incorrectly handled file permissions. A local attacker could possibly use this issue to access certain files, contrary […]

🟠 High   ⏱ 15–60 min  Last verified: 15 February 2022 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8197-1 Related CVEs: CVE-2022-29501 CVE-2016-10030 CVE-2018-10995 CVE-2017-15566 CVE-2018-7033 CVE-2019-6438 CVE-2020-12693 CVE-2020-27745  +2 more Upstream summary: It was discovered that Slurm did not properly handle access control when dealing with RPC […]