1,181 results · Clear filters · Feed
-
Medium max 4.9USN-6583-1 2 CVEs
mysql-5.7 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 5.7.44 in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. In addition to security fixes, the updated packages contain …
first Jan 15, 2024 -
Medium max 5.3USN-5898-1 2 CVEs
openjdk-8 vulnerabilities
It was discovered that the Serialization component of OpenJDK did not properly handle the deserialization of some CORBA objects. An attacker could possibly use this to bypass Java sandbox restrictions. (CVE-2023-21830) Markus Loewe discovered that the Java So…
first Feb 28, 2023 -
Medium max 6.1USN-5899-1 1 CVE
awstats vulnerability
It was discovered that AWStats did not properly sanitize the content of whois responses in the hostinfo plugin. An attacker could possibly use this issue to conduct cross-site scripting (XSS) attacks.
first Feb 28, 2023 -
Medium max 4.4USN-7320-1 3 CVEs
gpac vulnerabilities
It was discovered that the GPAC MP4Box utility incorrectly handled certain AC3 files, which could lead to an out-of-bounds read. A remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service (system crash). This issue only …
first Mar 4, 2025 -
Medium max 6.2USN-5871-1 2 CVEs
git vulnerabilities
It was discovered that Git incorrectly handled certain repositories. An attacker could use this issue to make Git uses its local clone optimization even when using a non-local transport. (CVE-2023-22490) Joern Schneeweisz discovered that Git incorrectly handl…
first Feb 14, 2023 -
Medium max 5.3USN-5839-2 1 CVE
apache2 vulnerability
USN-5839-1 fixed a vulnerability in Apache. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Dimas Fariski Setyawan Putra discovered that the Apache HTTP Server mod_proxy module incorrectly truncated certain respo…
first Feb 2, 2023 -
Medium max 4.9USN-5823-2 1 CVE
mysql-5.7 vulnerability
USN-5823-1 fixed a vulnerability in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issue…
first Jan 24, 2023 -
Medium max 6.1USN-6473-2 3 CVEs
python-pip vulnerabilities
USN-6473-1 fixed vulnerabilities in urllib3. This update provides the corresponding updates for the urllib3 module bundled into pip. Original advisory details: It was discovered that urllib3 didn't strip HTTP Authorization header on cross-origin redirects. A …
first Nov 15, 2023 -
Medium max 5.9USN-5768-1 4 CVEs
glibc vulnerabilities
Jan Engelhardt, Tavis Ormandy, and others discovered that the GNU C Library iconv feature incorrectly handled certain input sequences. An attacker could possibly use this issue to cause the GNU C Library to hang or crash, resulting in a denial of service. (CV…
first Dec 8, 2022 -
Medium max 5.2USN-5744-1 1 CVE
libice vulnerability
It was discovered that libICE was using a weak mechanism to generate the session cookies. A local attacker could possibly use this issue to perform a privilege escalation attack.
first Nov 28, 2022 -
Medium max 6.3USN-5743-1 1 CVE
tiff vulnerability
It was discovered that LibTIFF incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image, a remote attacker could crash the application, leading to a denial of service, or possibly execute …
first Nov 24, 2022 -
Medium max 6.1USN-6473-1 3 CVEs
python-urllib3 vulnerabilities
It was discovered that urllib3 didn't strip HTTP Authorization header on cross-origin redirects. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-25091) …
first Nov 7, 2023 -
Medium max 5.3USN-5719-1 6 CVEs
openjdk-8, openjdk-lts, openjdk-17, openjdk-19 vulnerabilities
It was discovered that OpenJDK incorrectly handled long client hostnames. An attacker could possibly use this issue to cause the corruption of sensitive information. (CVE-2022-21619) It was discovered that OpenJDK incorrectly randomized DNS port numbers. A re…
first Nov 9, 2022 -
Medium max 5.3USN-5701-1 1 CVE
jinja2 vulnerability
Yeting Li discovered that Jinja2 incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service.
first Oct 26, 2022 -
Medium max 6.1USN-5698-2 1 CVE
openvswitch vulnerability
USN-5698-1 fixed a vulnerability in Open. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Open vSwitch incorrectly handled comparison of certain minimasks. A remote attacker could use this …
first Oct 25, 2022 -
Medium max 4.9USN-5696-2 4 CVEs
mysql-5.7 vulnerabilities
USN-5696-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first Oct 26, 2022 -
Medium max 5.5USN-5686-4 1 CVE
git vulnerability
USN-5686-1 fixed several vulnerabilities in Git. This update provides the corresponding fix for CVE-2022-39253 on Ubuntu 16.04 ESM. Original advisory details: Cory Snider discovered that Git incorrectly handled certain symbolic links. An attacker could possib…
first Mar 28, 2023 -
Medium max 6.5USN-6508-1 5 CVEs
poppler vulnerabilities
It was discovered that poppler incorrectly handled certain malformed PDF files. If a user or an automated system were tricked into opening a specially crafted PDF file, a remote attacker could possibly use this issue to cause a denial of service. This issue o…
first Nov 23, 2023 -
Medium max 6.5USN-5629-1 1 CVE
python3.5 vulnerability
It was discovered that the Python http.server module incorrectly handled certain URIs. An attacker could potentially use this to redirect web traffic.
first Sep 22, 2022 -
Medium max 5.3USN-6528-1 4 CVEs
openjdk-8 vulnerabilities
It was discovered that the HotSpot VM implementation in OpenJDK did not properly validate bytecode blocks in certain situations. An attacker could possibly use this to cause a denial of service. (CVE-2022-40433) Carter Kozak discovered that OpenJDK, when comp…
first Nov 29, 2023 -
Medium max 6.6USN-5614-2 1 CVE
wayland vulnerability
USN-5614-1 fixed a vulnerability in Wayland. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Wayland incorrectly handled reference counting certain objects. An attacker could use this issue…
first Oct 3, 2022 -
Medium max 4.9USN-5537-2 1 CVE
mysql-5.7 vulnerability
USN-5537-1 fixed a vulnerability in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issue…
first Jul 28, 2022 -
Medium max 6.5USN-5490-1 1 CVE
protobuf vulnerability
It was discovered that Protocol Buffers did not properly parse certain symbols. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.
first Jun 21, 2022 -
Medium max 5.3USN-5419-1 3 CVEs
rsyslog vulnerabilities
It was discovered that Rsyslog improperly handled certain invalid input. An attacker could use this issue to cause Rsyslog to crash.
first May 12, 2022 -
Medium max 6.5USN-5400-2 6 CVEs
mysql-5.7 vulnerabilities
USN-5400-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first May 4, 2022 -
Medium max 4.3USN-5392-1 2 CVEs
mutt vulnerabilities
It was discovered that Mutt incorrectly handled certain requests. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 20.04 LTS. (CVE-2021-32055) It was discovered that Mutt incorrectly handled certain in…
first Apr 28, 2022 -
Medium max 4.9USN-5369-1 1 CVE
python-oslo.utils vulnerability
It was discovered that oslo.utils incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information.
first Apr 7, 2022 -
Medium max 5.9USN-5351-2 1 CVE
paramiko vulnerability
USN-5351-1 fixed a vulnerability in Paramiko. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Jan Schejbal discovered that Paramiko incorrectly handled permissions when writing private key files. A local attacker…
first Mar 30, 2022 -
Medium max 6.2USN-6200-1 20 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled the "-authenticate" option for password-protected PDF files. An attacker could possibly use this issue to inject additional shell commands and perform arbitrary code execution. This issue only affected Ub…
first Jul 4, 2023 -
Medium max 5.3USN-5326-1 1 CVE
fuse vulnerability
It was discovered that FUSE is susceptible to a restriction bypass flaw on a system that has SELinux active. A local attacker with non-root privileges could mount a FUSE file system that is accessible to other users and trick them into accessing files on that…
first Mar 16, 2022 -
Medium max 5.3USN-5300-1 6 CVEs
php7.0 vulnerabilities
It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this issue to cause a denial of service. (CVE-2015-9253, CVE-2017-8923, CVE-2017-9118, CVE-2017-9120) It was discovered that PHP incorrectly handled certain inputs.…
first Feb 22, 2022 -
Medium max 4.6USN-5258-1 5 CVEs
weechat vulnerabilities
Stuart Nevans Locke discovered that WeeChat's relay plugin insecurely handled malformed websocket frames. A remote attacker in control of a server could possibly use this issue to cause denial of service in a client. (CVE-2021-40516) Stuart Nevans Locke disco…
first Feb 4, 2022 -
Medium max 5.5USN-5270-2 6 CVEs
mysql-5.7 vulnerabilities
USN-5270-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first Feb 3, 2022 -
Medium max 4.3USN-5234-1 1 CVE
byobu vulnerability
Sander Bos discovered that Byobu incorrectly handled certain Apport data. An attacker could possibly use this issue to expose sensitive information.
first Jan 18, 2022 -
Medium max 6.3USN-5187-1 1 CVE
glances vulnerability
It was discovered that Glances incorrectly parsed untrusted XML data due to usage of xmlrpclib. An attacker could possibly use this to perform an External Entity (XXE) Injection and cause the host system to crash.
first Jul 25, 2022 -
Medium max 6.3USN-5169-1 1 CVE
oddjob vulnerability
Matthias Gerstner discovered that there was a race condition in the mkhomedir tool shipped with the oddjob package. An authenticated attacker could use this to setup a symlink attack and change permissions on files on the host filesystem.
first Aug 9, 2022 -
Medium max 6.5USN-5159-1 1 CVE
node-bl vulnerability
It was discovered that bl incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service.
first Feb 8, 2022 -
Medium max 5.5USN-5123-2 2 CVEs
mysql-5.7 vulnerabilities
USN-5123-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first Oct 25, 2021 -
Medium max 6.5USN-5066-2 1 CVE
python-pysaml2 vulnerability
USN-5066-1 fixed a vulnerability in PySAML2. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Brian Wolff discovered that PySAML2 incorrectly validated cryptographic signatures. A remote attacker could possibly us…
first Sep 8, 2021 -
Medium max 5.5USN-5043-1 11 CVEs
exiv2 vulnerabilities
It was discovered that Exiv2 incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service. (CVE-2021-32815, CVE-2021-34334, CVE-2021-37620, CVE-2021-37622) It was discovered that Exiv2 incorrectly handled cer…
first Aug 17, 2021