1,181 results · Clear filters · Feed
-
Medium max 6.6USN-7537-1 1 CVE
net-tools vulnerability
It was discovered that net-tools incorrectly handled certain inputs. An attacker could possible use this issue to cause a crash or execute arbitrary code.
first May 27, 2025 -
Medium max 4.8USN-7532-1 1 CVE
glib2.0 vulnerability
It was discovered that Glib incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first May 26, 2025 -
Medium max 5.5USN-7529-1 5 CVEs
tika vulnerabilities
It was discovered that Apache Tika can have an excessive memory usage by using a crafted or corrupt PSD file. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-1950, CVE-2020-1951) It …
first May 23, 2025 -
Medium max 5.9USN-7520-1 1 CVE
postgresql-12, postgresql-14, postgresql-16 vulnerability
It was discovered that PostgreSQL incorrectly handled the GB18030 encoding. An attacker could possibly use this issue to cause PostgreSQL to crash, resulting in a denial of service.
first May 20, 2025 -
Medium max 5.9USN-7505-1 1 CVE
abseil vulnerability
It was discovered that Abseil incorrectly handled memory with the upper bound of the size argument. An attacker could possibly use this issue to cause a denial of service or memory corruption.
first May 12, 2025 -
Medium max 5.3USN-7501-1 1 CVE
python-django vulnerability
Elias Myllymäki discovered that Django incorrectly handled stripping large sequences of incomplete HTML tags. A remote attacker could possibly use this issue to cause Django to consume resources, leading to a denial of service.
first May 7, 2025 -
Medium max 5.3USN-7501-2 1 CVE
python-django vulnerability
USN-7501-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Elias Myllymäki discovered that Django incorrectly handled stripping large sequences of incomplete HTML tags. A remote a…
first May 7, 2025 -
Medium max 6.5USN-7479-1 27 CVEs
mysql-8.0, mysql-8.4 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.42 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. Ubuntu 25.04 has been updat…
first May 5, 2025 -
Medium max 5.3USN-7464-1 1 CVE
jupyter-notebook vulnerability
It was discovered that Jupyter Notebook did not properly parse HTML comments under certain circumstances. An attacker could possibly use this issue to cause a regular expression denial of service (ReDoS).
first Apr 28, 2025 -
Medium max 4.3USN-7457-1 1 CVE
openssh vulnerability
It was discovered that OpenSSH incorrectly handled the DisableForwarding directive. The directive would fail to disable X11 and agent forwarding, contrary to documentation and expectations.
first Apr 24, 2025 -
Medium max 5.3USN-7430-1 1 CVE
dino-im vulnerability
Kim Alvefur discovered that Dino did not correctly sanitize certain messages. A remote attacker could possibly use this issue to leak sensitive information.
first Apr 9, 2025 -
Medium max 4.9USN-7376-2 1 CVE
mariadb vulnerability
USN-7376-1 fixed vulnerabilities in MariaDB. This update provides the corresponding updates for Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Original advisory details: A security issue was discovered in MariaDB and this update includes a new upstream MariaDB versio…
first Mar 31, 2025 -
Medium max 6.5USN-7362-1 1 CVE
golang-github-cli-go-gh-v2 vulnerability
It was discovered that go-gh incorrectly handled authentication tokens. An attacker could possibly use this issue to leak authentication tokens to the wrong host. (CVE-2024-53859)
first Mar 20, 2025 -
Medium max 5.0USN-7335-1 1 CVE
python-django vulnerability
It was discovered that Django incorrectly handled text wrapping. An attacker could possibly use this issue to cause a denial of service.
first Mar 6, 2025 -
Medium max 6.6USN-7091-2 4 CVEs
ruby2.7 vulnerabilities
USN-7091-1 fixed several vulnerabilities in Ruby. This update provides the corresponding update for CVE-2024-35176, CVE-2024-41123, CVE-2024-41946 and CVE-2024-49761 for ruby2.7 in Ubuntu 20.04 LTS. Original advisory details: It was discovered that Ruby incor…
first Nov 21, 2024 -
Medium max 6.6USN-7091-1 5 CVEs
ruby3.0, ruby3.2, ruby3.3 vulnerabilities
It was discovered that Ruby incorrectly handled parsing of an XML document that has specific XML characters in an attribute value using REXML gem. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service. This issue only affec…
first Nov 5, 2024 -
Medium max 6.5USN-7224-1 3 CVEs
cyrus-imapd vulnerabilities
It was discovered that non-authentication-related HTTP requests could be interpreted in an authentication context by a Cyrus IMAP Server when multiple requests arrived over the same connection. An unauthenticated attacker could possibly use this issue to perf…
first Jan 22, 2025 -
Medium max 6.5USN-7204-1 21 CVEs
neomutt vulnerabilities
Jeriko One discovered that NeoMutt incorrectly handled certain IMAP and POP3 responses. An attacker could possibly use this issue to cause NeoMutt to crash, resulting in a denial of service, or the execution of arbitrary code. This issue only affected Ubuntu …
first Jan 15, 2025 -
Medium max 6.8USN-7270-1 2 CVEs
openssh vulnerabilities
It was discovered that the OpenSSH client incorrectly handled the non-default VerifyHostKeyDNS option. If that option were enabled, an attacker could possibly impersonate a server by completely bypassing the server identity check. (CVE-2025-26465) It was disc…
first Feb 18, 2025 -
Medium max 5.5USN-7312-1 1 CVE
opennds vulnerability
It was discovered that openNDS did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Mar 3, 2025 -
Medium max 6.1USN-7287-1 1 CVE
libcap2 vulnerability
Tianjia Zhang discovered the libcap2 PAM module pam_cap incorrectly handled parsing group names in the configuration file. This could result in certain users being granted capabilities, contrary to expectations.
first Feb 24, 2025 -
Medium max 5.1USN-7286-1 1 CVE
iniparser vulnerability
It was discovered that iniParser incorrectly handled certain files. An attacker could possibly use this issue to cause iniParser to crash, resulting in a denial of service.
first Feb 24, 2025 -
Medium max 4.3USN-7285-2 1 CVE
nginx vulnerability
USN-7285-1 fixed vulnerabilities in nginx. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that nginx incorrectly handled when multiple server blocks are configured to share the same IP address…
first Apr 1, 2025 -
Medium max 5.3USN-7281-1 1 CVE
gnutls28 vulnerability
Bing Shi discovered that GnuTLS incorrectly handled decoding certain DER-encoded certificates. A remote attacker could possibly use this issue to cause GnuTLS to consume resources, leading to a denial of service.
first Feb 20, 2025 -
Medium max 6.3USN-7280-1 1 CVE
python3.10, python3.12, python3.8 vulnerability
It was discovered that Python incorrectly handled parsing domain names that included square brackets. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack.
first Feb 20, 2025 -
Medium max 4.3USN-7285-1 1 CVE
nginx vulnerability
It was discovered that nginx incorrectly handled when multiple server blocks are configured to share the same IP address and port. An attacker could use this issue to use session resumption to bypass client certificate authentication requirements on these ser…
first Feb 24, 2025 -
Medium max 5.3USN-7275-1 1 CVE
libtasn1-6 vulnerability
Bing Shi discovered that Libtasn1 inefficiently handled certificates. An attacker could possibly use this issue to increase resource utilization leading to a denial of service.
first Feb 18, 2025 -
Medium max 6.3USN-7280-3 2 CVEs
python2.7 regression
USN-7280-2 fixed vulnerabilities in Python. It was discovered that the fixes for CVE-2025-0938 and CVE-2024-11168 were incorrectly applied on Ubuntu 14.04 LTS as a result. This update fixes the problem. We apologize for the inconvenience. Original advisory de…
first Sep 29, 2025 -
Medium max 6.2USN-7259-3 1 CVE
eglibc vulnerability
USN-7259-1 fixed a vulnerability in GNU C Library. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that GNU C Library incorrectly handled memory when using the assert function. An attacker could…
first Feb 10, 2025 -
Medium max 5.3USN-7275-2 1 CVE
libtasn1-6 vulnerability
USN-7275-1 fixed vulnerabilities in Libtasn1. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: Bing Shi discovered that Libtasn1 inefficiently handled certificates. An attacker could possibly use this issue to in…
first Feb 20, 2025 -
Medium max 5.9USN-7256-1 2 CVEs
ruby2.7 vulnerabilities
It was discovered that Ruby incorrectly handled parsing of an XML document that has specific XML characters in an attribute value using REXML gem. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service.
first Feb 6, 2025 -
Medium max 4.8USN-7254-1 1 CVE
openjdk-21 vulnerability
It was discovered that the Hotspot component of OpenJDK 21 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information.
first Feb 5, 2025 -
Medium max 6.2USN-7259-1 1 CVE
glibc vulnerability
It was discovered that GNU C Library incorrectly handled memory when using the assert function. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Feb 6, 2025 -
Medium max 4.8USN-7253-1 1 CVE
openjdk-17 vulnerability
It was discovered that the Hotspot component of OpenJDK 17 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information.
first Feb 5, 2025 -
Medium max 6.5USN-7245-1 16 CVEs
mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.41 in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 24.10. In addition to security fix…
first Jan 30, 2025 -
Medium max 4.8USN-7252-1 1 CVE
openjdk-lts vulnerability
It was discovered that the Hotspot component of OpenJDK 11 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information.
first Feb 5, 2025 -
Medium max 6.3USN-7218-1 1 CVE
python3.10, python3.8 vulnerability
It was discovered that Python incorrectly handled parsing bracketed hosts. A remote attacker could possibly use this issue to perform a Server-Side Request Forgery (SSRF) attack.
first Jan 20, 2025 -
Medium max 5.8USN-7205-2 1 CVE
python-django vulnerability
USN-7205-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: It was discovered that Django incorrectly handled certain IPv6 strings. An attacker could possibly use this issue to cau…
first Jan 23, 2025 -
Medium max 5.7USN-7202-1 1 CVE
hplip vulnerability
Kevin Backhouse discovered that HPLIP incorrectly handled certain MDNS responses. A remote attacker could use this issue to cause HPLIP to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jan 13, 2025 -
Medium max 4.8USN-7216-1 1 CVE
tqdm vulnerability
It was discovered that tqdm did not properly sanitize non-boolean CLI Arguments. A local attacker could possibly use this issue to execute arbitrary code on the host. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-34062)
first Jan 16, 2025