1,181 results · Clear filters · Feed
-
Medium max 5.6USN-7467-2 2 CVEs
libxml2 vulnerabilities
USN-7467-1 fixed several vulnerabilities in libxml2. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that the libxml2 Python bindings incorrectly handled certain return valu…
first Apr 28, 2025 -
Medium max 6.5USN-7465-1 3 CVEs
mistral, python-mistral-lib vulnerabilities
It was discovered that Mistral incorrectly handled nested anchors in YAML files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-16848) Pierre Gaxatte discovered that Mistral incorre…
first Apr 28, 2025 -
Medium max 6.6USN-7442-1 4 CVEs
ruby2.3, ruby2.5 vulnerabilities
It was discovered that the Ruby CGI gem incorrectly handled parsing certain cookies. A remote attacker could possibly use this issue to consume resources, leading to a denial of service. (CVE-2025-27219) It was discovered that the Ruby CGI gem incorrectly han…
first Apr 17, 2025 -
Medium max 4.0USN-7426-2 2 CVEs
poppler vulnerabilities
USN-7426-1 fixed several vulnerabilities in poppler. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that poppler incorrectly handled memory when opening certain PDF files. …
first Apr 9, 2025 -
Medium max 4.2USN-7419-1 2 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled memory when using invalid input with the log option. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 24.10. (CVE-2025-1215) It was disc…
first Apr 7, 2025 -
Medium max 6.5USN-7398-1 4 CVEs
libtar vulnerabilities
It was discovered that libtar may perform out-of-bounds reads when processing specially crafted tar files. An attacker could possibly use this issue to cause libtar to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2021-33643, CVE-20…
first Mar 31, 2025 -
Medium max 4.6USN-7374-1 1 CVE
containerd vulnerability
Benjamin Koltermann discovered that containerd incorrectly handled large user id values. This could result in containers possibly being run as root, contrary to expectations.
first Mar 26, 2025 -
Medium max 6.6USN-7290-1 4 CVEs
rails vulnerabilities
It was discovered that Rails did not correctly handle parsing block formats in email service layers. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-47889) It was discovered that Rails did not correctly handle parsing block q…
first Feb 25, 2025 -
Medium max 5.5USN-7284-1 2 CVEs
netty vulnerabilities
Jonathan Leitschuh discovered that Netty did not correctly handle file permissions when writing temporary files. An attacker could possibly use this issue to leak sensitive information. (CVE-2022-24823) It was discovered that Netty did not correctly handle li…
first Feb 24, 2025 -
Medium max 6.3USN-7280-2 1 CVE
python vulnerability
USN-7280-1 fixed a vulnerability in Python. This update provides the corresponding updates for some additional Python packages in Ubuntu releases. Original advisory details: It was discovered that Python incorrectly handled parsing domain names that included …
first May 22, 2025 -
Medium max 6.8USN-7270-2 1 CVE
openssh vulnerability
USN-7270-1 fixed a vulnerability in OpenSSH. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that the OpenSSH client incorrectly handled the non-default VerifyHostKeyDNS opt…
first Feb 18, 2025 -
Medium max 6.5USN-7269-1 3 CVEs
intel-microcode vulnerabilities
Ke Sun, Paul Grosen and Alyssa Milburn discovered that some Intel® Processors did not properly implement Finite State Machines (FSMs) in Hardware Logic. A local privileged attacker could use this issue to cause a denial of service. (CVE-2024-31068) It was dis…
first Feb 17, 2025 -
Medium max 5.3USN-7267-1 1 CVE
libsndfile vulnerability
It was discovered that libsndfile incorrectly handled certain malformed OggVorbis files. An attacker could possibly use this issue to cause libsndfile to crash, resulting in a denial of service.
first Feb 13, 2025 -
Medium max 6.2USN-7259-2 1 CVE
glibc vulnerability
USN-7259-1 fixed a vulnerability in GNU C Library. This update provides the corresponding update for Ubuntu 16.04 LTS. Original advisory details: It was discovered that GNU C Library incorrectly handled memory when using the assert function. An attacker could…
first Feb 10, 2025 -
Medium max 6.1USN-7258-1 5 CVEs
ckeditor vulnerabilities
Kevin Backhouse discovered that CKEditor did not properly sanitize HTML content. An attacker could possibly use this issue to perform cross site scripting and obtain sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20…
first Feb 6, 2025 -
Medium max 5.9USN-7249-1 1 CVE
libvpx vulnerability
Xiantong Hou discovered that libvpx would overflow when attempting to allocate memory for very large images. If an application using libvpx opened a specially crafted file, a remote attacker could possibly use this issue to cause the application to crash, res…
first Feb 3, 2025 -
Medium max 5.6USN-7223-1 2 CVEs
openjpeg2 vulnerabilities
Frank Zeng discovered that OpenJPEG incorrectly handled memory when using the decompression utility. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2024-56826, CVE-2024-56827)
first Jan 22, 2025 -
Medium max 4.3USN-7213-1 1 CVE
poppler vulnerability
It was discovered that poppler incorrectly handled memory when opening certain PDF files. An attacker could possibly use this issue to cause denial of service or obtain sensitive information.
first Jan 16, 2025 -
Medium max 6.5USN-7112-1 1 CVE
libgd2 vulnerability
It was discovered that the GD Graphics Library did not perform proper bounds checking while handling BMP and WebP files. If a user were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service (appl…
first Nov 15, 2024 -
Medium max 5.3USN-7197-1 1 CVE
golang-golang-x-net vulnerability
Guido Vranken discovered that Go Networking handled input to the Parse functions inefficiently. An attacker could possibly use this issue to cause denial of service. This update addresses the issue in the golang-golang-x-net and golang-golang-x-net-dev packag…
first Jan 9, 2025 -
Medium max 6.2USN-7188-1 1 CVE
ffmpeg vulnerability
It was discovered that FFmpeg incorrectly handled certain input, which could lead to an integer overflow. An attacker could possibly use this issue to cause a denial of service by crashing the application.
first Jan 8, 2025 -
Medium max 5.9USN-7146-1 3 CVEs
dogtag-pki vulnerabilities
Christina Fu discovered that Dogtag PKI accidentally enabled a mock authentication plugin by default. An attacker could potentially use this flaw to bypass the regular authentication process and trick the CA server into issuing certificates. This issue only a…
first Dec 10, 2024 -
Medium max 5.9USN-7145-1 1 CVE
expat vulnerability
It was discovered that Expat did not properly handle its internal state when attempting to resume an unstarted parser. An attacker could use this issue to cause a denial of service (application crash).
first Dec 10, 2024 -
Medium max 6.8USN-7125-1 1 CVE
rapidjson vulnerability
It was discovered that RapidJSON incorrectly parsed numbers written in scientific notation, leading to an integer underflow. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code.
first Nov 25, 2024 -
Medium max 4.4USN-7084-2 1 CVE
python-pip vulnerability
USN-7084-1 fixed vulnerability in urllib3. This update provides the corresponding update for the urllib3 module bundled into pip. Original advisory details: It was discovered that urllib3 didn't strip HTTP Proxy-Authorization header on cross-origin redirects.…
first Oct 30, 2024 -
Medium max 4.4USN-7084-1 1 CVE
python-urllib3 vulnerability
It was discovered that urllib3 didn't strip HTTP Proxy-Authorization header on cross-origin redirects. A remote attacker could possibly use this issue to obtain sensitive information.
first Oct 29, 2024 -
Medium max 6.7USN-7064-1 1 CVE
nano vulnerability
It was discovered that nano allowed a possible privilege escalation through an insecure temporary file. If nano was killed while editing, the permissions granted to the emergency save file could be used by an attacker to escalate privileges using a malicious …
first Oct 15, 2024 -
Medium max 5.9USN-7063-1 1 CVE
ubuntu-advantage-desktop-daemon vulnerability
Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon leaked the Pro token to unprivileged users by passing the token as an argument in plaintext. An attacker could use this issue to gain unauthorized access to an Ubuntu Pro subscription. (CVE-20…
first Oct 11, 2024 -
Medium max 4.8USN-7052-1 2 CVEs
gnome-shell vulnerabilities
It was discovered that GNOME Shell mishandled extensions that fail to reload, possibly leading to extensions staying enabled on the lock screen. An attacker could possibly use this issue to launch applications, view sensitive information, or execute arbitrary…
first Oct 3, 2024 -
Medium max 4.5USN-7048-1 1 CVE
vim vulnerability
Suyue Guo discovered that Vim incorrectly handled memory when flushing the typeahead buffer, leading to heap-buffer-overflow. An attacker could possibly use this issue to cause a denial of service.
first Oct 1, 2024 -
Medium max 5.3USN-7043-3 1 CVE
cups-filters vulnerability
USN-7043-1 fixed a vulnerability in cups-filters. This update provides the corresponding update for Ubuntu 16.04 LTS Original advisory details: Simone Margaritelli discovered that the cups-filters cups-browsed component could be used to create arbitrary print…
first Oct 7, 2024 -
Medium max 5.5USN-7038-1 1 CVE
apr vulnerability
Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime (APR) library. A local attacker could possibly use this issue to read named shared memory segments, potentially exposing sensitive application data.
first Sep 26, 2024 -
Medium max 4.7USN-7014-2 1 CVE
nginx vulnerability
USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that the nginx ngx_http_mp4 module incorrectly handled certain malformed mp4 file…
first Oct 8, 2024 -
Medium max 4.3USN-7037-1 1 CVE
openjpeg2 vulnerability
It was discovered that OpenJPEG could enter a large loop and continuously print warning messages when given specially crafted input. An attacker could potentially use this issue to cause a denial of service.
first Sep 26, 2024 -
Medium max 5.3USN-7033-1 2 CVEs
intel-microcode vulnerabilities
It was discovered that some Intel(R) Processors did not properly restrict access to the Running Average Power Limit (RAPL) interface. This may allow a local privileged attacker to obtain sensitive information. (CVE-2024-23984) It was discovered that some Inte…
first Sep 25, 2024 -
Medium max 5.3USN-7015-7 1 CVE
python2.7 regression
USN-7015-4 fixed vulnerabilities in Python. It was discovered that the fix for CVE-2023-27043 for python2.7 was incorrectly applied on Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory …
first Sep 29, 2025 -
Medium max 5.3USN-7015-3 1 CVE
python2.7, python3.5 vulnerability
USN-7015-1 fixed several vulnerabilities in Python. This update provides the corresponding updates for CVE-2023-27043 for python2.7 in Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS, and for python3.5 in Ubuntu 16.04 LTS. Original …
first Oct 1, 2024 -
Medium max 6.1USN-7011-2 2 CVEs
clamav vulnerabilities
USN-7011-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that ClamAV incorrectly handled certain PDF files. A remote attacker coul…
first Sep 17, 2024 -
Medium max 6.3USN-6940-2 3 CVEs
snapd vulnerabilities
USN-6940-1 fixed vulnerabilities in snapd. This update provides the corresponding updates for Ubuntu 18.04 LTS and Ubuntu 16.04 LTS. Original advisory details: Neil McPhail discovered that snapd did not properly restrict writes to the /home/jslarraz/bin path …
first Jan 13, 2025 -
Medium max 5.4USN-6939-1 1 CVE
exim4 vulnerability
Phillip Szelat discovered that Exim misparses multiline MIME header filenames. A remote attacker could use this issue to bypass a MIME filename extension-blocking protection mechanism and possibly deliver executable attachments to the mailboxes of end users.
first Jul 31, 2024