8,435 results · Feed
-
Critical max 9.8USN-5825-2 1 CVE
pam regressions
USN-5825-1 fixed vulnerabilities in PAM. Unfortunately that update was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that PAM did not correctly rest…
first Feb 6, 2023 -
Critical max 9.8USN-5825-1 1 CVE
pam vulnerability
It was discovered that PAM did not correctly restrict login from an IP address that is not resolvable via DNS. An attacker could possibly use this issue to bypass authentication.
first Jan 25, 2023 -
UnscoredUSN-5821-4 0 CVEs
python-pip regression
USN-5821-3 fixed a vulnerability in pip. The update introduced a minor regression in Ubuntu 14.04 ESM, Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Sebastian Chnelik disco…
first Mar 2, 2023 -
High max 7.5USN-5821-3 1 CVE
python-pip regression
USN-5821-1 fixed a vulnerability in wheel and pip. Unfortunately, it was missing a commit to fix it properly in pip. We apologize for the inconvenience. Original advisory details: Sebastian Chnelik discovered that wheel incorrectly handled certain file names …
first Feb 28, 2023 -
High max 7.5USN-5821-1 1 CVE
wheel vulnerability
Sebastian Chnelik discovered that wheel incorrectly handled certain file names when validated against a regex expression. An attacker could possibly use this issue to cause a denial of service.
first Jan 24, 2023 -
Medium max 5.9USN-5817-1 1 CVE
python-setuptools, setuptools vulnerability
Sebastian Chnelik discovered that setuptools incorrectly handled certain regex inputs. An attacker could possibly use this issue to cause a denial of service.
first Jan 23, 2023 -
High max 7.8USN-5811-3 1 CVE
sudo vulnerability
USN-5811-1 fixed a vulnerability in Sudo. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly handled user-specified editors when using the sudoed…
first Jan 30, 2023 -
Critical max 9.8USN-5810-4 2 CVEs
git vulnerabilities
USN-5810-1 fixed several vulnerabilities in Git. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Markus Vervier and Eric Sesterhenn discovered that Git incorrectly handled certain gitattributes. An attacker could…
first Mar 1, 2023 -
High max 7.5USN-5807-3 1 CVE
libxpm vulnerability
USN-5807-1 fixed a vulnerability in libXpm. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Marco Ivaldi discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked in…
first Jul 26, 2023 -
Critical max 9.8USN-5800-1 4 CVEs
heimdal vulnerabilities
It was discovered that Heimdal incorrectly handled certain SPNEGO tokens. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-44758) Evgeny Legerov discovered that Heimdal incorrectly handled memory when performing certain …
first Jan 12, 2023 -
Medium max 6.5USN-5795-2 8 CVEs
net-snmp vulnerabilities
USN-5795-1 and 5543-1 fixed several vulnerabilities in Net-SNMP. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Net-SNMP incorrectly handled certain requests. A remote…
first Jan 16, 2023 -
UnscoredUSN-5796-2 1 CVE
w3m vulnerability
USN-5796-1 fixed a vulnerability in w3m. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that w3m incorrectly handled certain HTML files. A remote attacker could use this issue to cause w3m to c…
first Jan 10, 2023 -
Critical max 9.8USN-5787-2 1 CVE
libksba vulnerability
USN-5787-1 fixed vulnerabilities in Libksba. This update provides the corresponding updates for Ubuntu 16.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Libksba incorrectly handled parsing CRL signatures. A remote attacker coul…
first Jan 9, 2023 -
UnscoredUSN-5784-1 1 CVE
usbredir vulnerability
It was discovered that usbredir incorrectly handled memory when serializing large amounts of data in the case of a slow or blocked destination. An attacker could possibly use this issue to cause applications using usbredir to crash, resulting in a denial of s…
first Jan 3, 2023 -
High max 8.8USN-5778-2 7 CVEs
xorg-server, xorg-server-hwe-16.04 vulnerabilities
USN-5778-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Jan-Niklas Sohn discovered that X.Org X Server extensions contained multiple security issues…
first Feb 16, 2023 -
Medium max 6.5USN-5772-1 5 CVEs
qemu vulnerabilities
It was discovered that QEMU incorrectly handled bulk transfers from SPICE clients. A remote attacker could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 14.04 ESM a…
first Dec 12, 2022 -
UnscoredUSN-5761-2 0 CVEs
ca-certificates update
USN-5761-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Due to security concerns, the TrustCor certificate authority has been marked as distrusted in Mozilla's roo…
first Dec 6, 2022 -
High max 7.5USN-5767-2 1 CVE
python2.7, python3.5 vulnerability
USN-5767-1 fixed a vulnerability in Python. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that Python incorrectly handled certain IDNA inputs. An attacker could possibly u…
first Dec 8, 2022 -
Medium max 5.9USN-5766-1 1 CVE
heimdal vulnerability
It was discovered that Heimdal did not properly manage memory when normalizing Unicode. An attacker could possibly use this issue to cause a denial of service.
first Dec 7, 2022 -
High max 7.8USN-5760-2 2 CVEs
libxml2 vulnerabilities
USN-5760-1 fixed vulnerabilities in libxml2. This update provides the corresponding updates for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly …
first Dec 5, 2022 -
UnscoredUSN-5747-1 2 CVEs
bind9 vulnerabilities
It was discovered that Bind incorrectly handled large query name when using lightweight resolver protocol. A remote attacker could use this issue to consume resources, leading to a denial of service. (CVE-2016-2775) It was discovered that Bind incorrectly han…
first Nov 29, 2022 -
UnscoredUSN-5745-2 0 CVEs
shadow regression
USN-5745-1 fixed vulnerabilities in shadow. Unfortunately that update introduced a regression that caused useradd to behave incorrectly in Ubuntu 14.04 ESM, Ubuntu 16.04 ESM, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update reverts the security fix pending …
first Nov 29, 2022 -
UnscoredUSN-5745-1 1 CVE
shadow vulnerability
Florian Weimer discovered that shadow was not properly copying and removing user directory trees, which could lead to a race condition. A local attacker could possibly use this issue to setup a symlink attack and alter or remove directories without authorizat…
first Nov 28, 2022 -
UnscoredUSN-5742-1 1 CVE
jbigkit vulnerability
It was discovered that JBIG-KIT incorrectly handled decoding certain large image files. If a user or automated system using JBIG-KIT were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service.
first Nov 24, 2022 -
Medium max 5.5USN-5740-1 2 CVEs
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04, xwayland vulnerabilities
It was discovered that X.Org X Server incorrectly handled certain inputs. An attacker could use these issues to cause the server to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Nov 23, 2022 -
UnscoredUSN-5737-1 1 CVE
apr-util vulnerability
It was discovered that APR-util did not properly handle memory when using SDBM database files. A local attacker with write access to the database can make a program or process using these functions crash, and cause a denial of service.
first Nov 23, 2022 -
Medium max 4.4USN-5736-1 17 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled certain values when processing PDF files. If a user or automated system using ImageMagick were tricked into opening a specially crafted PDF file, an attacker could exploit this to cause a denial of servic…
first Nov 24, 2022 -
UnscoredUSN-5733-1 3 CVEs
flac vulnerabilities
It was discovered that FLAC was not properly performing memory management operations, which could result in a memory leak. An attacker could possibly use this issue to cause FLAC to consume resources, leading to a denial of service. This issue only affected U…
first Nov 21, 2022 -
High max 7.1USN-5722-1 2 CVEs
nginx vulnerabilities
It was discovered that nginx incorrectly handled certain memory operations in the ngx_http_mp4_module module. A local attacker could possibly use this issue with a specially crafted mp4 file to cause nginx to crash, stop responding, or access arbitrary memory…
first Nov 15, 2022 -
High max 8.8USN-5718-2 1 CVE
pixman vulnerability
USN-5718-1 fixed a vulnerability in pixman. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Maddie Stone discovered that pixman incorrectly handled certain memory operations. A remote attacke…
first Nov 30, 2022 -
High max 7.7USN-5714-1 7 CVEs
tiff vulnerabilities
It was discovered that LibTIFF incorrectly handled certain memory operations when using tiffcrop. An attacker could trick a user into processing a specially crafted tiff image file and potentially use this issue to cause a denial of service. This issue only a…
first Nov 8, 2022 -
High max 7.5USN-5716-2 1 CVE
sqlite3 vulnerability
USN-5716-1 fixed a vulnerability in SQLite. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that SQLite incorrectly handled certain long string arguments. An attacker could use this issue to cau…
first Nov 21, 2022 -
High max 7.8USN-5711-2 1 CVE
ntfs-3g vulnerability
USN-5711-1 fixed a vulnerability in NTFS-3G. This update provides the corresponding update for Ubuntu 14.04 ESM Ubuntu 16.04 ESM. Original advisory details: Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A lo…
first Nov 3, 2022 -
Medium max 6.5USN-5704-1 3 CVEs
dbus vulnerabilities
It was discovered that DBus incorrectly handled messages with invalid type signatures. A local attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service. (CVE-2022-42010) It was discovered that DBus was incorrectly valida…
first Oct 27, 2022 -
Critical max 9.8USN-5702-2 1 CVE
curl vulnerability
USN-5702-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Robby Simpson discovered that curl incorrectly handled certain POST operations after PUT operations. …
first Oct 26, 2022 -
Medium max 6.5USN-5690-1 1 CVE
libxdmcp vulnerability
It was discovered that libXdmcp was generating weak session keys. A local attacker could possibly use this issue to perform a brute force attack and obtain another user's key.
first Oct 19, 2022 -
UnscoredUSN-5689-1 1 CVE
perl vulnerability
It was discovered that Perl incorrectly handled certain signature verification. An remote attacker could possibly use this issue to bypass signature verification.
first Oct 19, 2022 -
Critical max 9.8USN-5688-1 1 CVE
libksba vulnerability
It was discovered that an integer overflow could be triggered in Libksba when decoding certain data. An attacker could use this issue to cause a denial of service (application crash) or possibly execute arbitrary code.
first Oct 19, 2022 -
UnscoredUSN-5672-2 1 CVE
gmp vulnerability
USN-5672-1 fixed a vulnerability in GMP. This update provides the corresponsing update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that GMP did not properly manage memory on 32-bit platforms when processing a specially crafted input. An…
first Mar 6, 2023 -
UnscoredUSN-5662-1 5 CVEs
libonig vulnerabilities
It was discovered that Oniguruma incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service, obtain sensitive information or other unspecified impact. This issue only affected Ubuntu 16.04 ESM and U…
first Oct 10, 2022