8,437 results · Feed
-
UnscoredUSN-7626-3 0 CVEs
git regression
USN-7626-1 fixed vulnerabilities in Git. The updates for CVE-2025-27613 and CVE-2025-46835 caused Gitk and Git GUI to not work properly on Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS, and were disabled in USN-7626-2. The problem…
first Jul 10, 2025 -
UnscoredUSN-7626-2 0 CVEs
git regression
USN-7626-1 fixed vulnerabilities in Git. The update introduced a regression in gitk and git-gui. This update reverts the corresponding fixes for CVE-2025-27613 and CVE-2025-46835 pending further investigation. We apologize for the inconvenience. Original advi…
first Jul 9, 2025 -
High max 8.6
git vulnerabilities
Avi Halachmi discovered that Git incorrectly managed file modification constraints with Gitk. An attacker could possibly use this issue to create or write to arbitrary files on the system. (CVE-2025-27613) Avi Halachmi discovered that Git incorrectly handled …
first Jul 8, 2025 -
High max 7.5USN-7625-1 2 CVEs
onionshare vulnerabilities
It was discovered that OnionShare could be exploited when run with the --debug argument. A local attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-19960) It was di…
first Jul 8, 2025 -
Critical max 9.8USN-7623-1 8 CVEs
ghostscript vulnerabilities
It was discovered that OpenJPEG, vendored in Ghostscript did not correctly handle large image files. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue onl…
first Jul 8, 2025 -
Medium max 6.9
jquery vulnerabilities
It was discovered that jQuery did not correctly handle HTML tags. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. This issue only affected Ubuntu 14.04 LTS. (CVE-2012-6708) It was discovered that jQuery did not correc…
first Jul 8, 2025 -
High max 7.1USN-7616-1 2 CVEs
logback vulnerabilities
It was discovered that logback could read malicious configuration files from LDAP servers. An attacker with the required permissions could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubun…
first Jul 2, 2025 -
Medium max 4.3USN-7614-1 4 CVEs
pcs vulnerabilities
Cedric Buissart discovered that pcs did not correctly handle certain parameters. An attacker could possibly use this issue to leak sensitive information or elevate their privileges. This issue only affected Ubuntu 16.04 LTS. (CVE-2018-1086) Ondrej Mular disco…
first Jul 2, 2025 -
Low max 2.8USN-7604-2 1 CVE
sudo vulnerability
USN-7604-1 fixed CVE-2025-32462 in sudo. This update provides the corresponding fixes for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 14.04 LTS. Original advisory details: Rich Mirch discovered that Sudo incorrectly handled the host optio…
first Jun 30, 2025 -
High max 8.8USN-7603-1 5 CVEs
composer vulnerabilities
Thomas Chauchefoin discovered that Composer did not correctly handle certain arguments. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (C…
first Jun 30, 2025 -
UnscoredUSN-7600-1 1 CVE
libxslt vulnerability
It was discovered that libxslt could be made to expose sensitive information about address space layout. An attacker could possibly use this issue to bypass Address Space Layout Randomization (ASLR) protections.
first Jun 26, 2025 -
Medium max 5.3USN-7599-1 2 CVEs
python-urllib3 vulnerabilities
Jacob Sandum discovered that urllib3 handled redirects even when they were explicitly disabled while using the PoolManager. An attacker could possibly use this issue to obtain sensitive information. (CVE-2025-50181) Illia Volochii discovered that urllib3 inco…
first Jun 25, 2025 -
UnscoredUSN-7589-1 7 CVEs
gnuplot vulnerabilities
Tim Blazytko, Cornelius Aschermann, Sergej Schumilo, and Nils Bars discovered that Gnuplot had several memory-related issues. An attacker could possibly use these issues to cause Gnuplot to experience a buffer overflow, resulting in a denial of service or arb…
first Jun 23, 2025 -
High max 7.5USN-7588-1 4 CVEs
gss-ntlmssp vulnerabilities
Phil Turnbull discovered that GSS NTLMSSP may perform out-of-bounds reads when decoding NTLM fields and target information. An attacker could possibly use this issue to cause GSS NTLMSSP to crash, resulting in a denial of service. (CVE-2023-25563, CVE-2023-25…
first Jun 23, 2025 -
Critical max 9.9
roundcube vulnerability
It was discovered that Roundcube Webmail did not properly sanitize the _from parameter in a URL, leading to PHP Object Deserialization. A remote attacker could possibly use this issue to execute arbitrary code.
first Jun 19, 2025 -
UnscoredUSN-7582-2 0 CVEs
samba regression
USN-7582-1 fixed vulnerabilities in Samba. The update introduced a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Evgeny Legerov discovered that Samba incorrectly handled buffers in certain GSSAPI rou…
first Jun 30, 2025 -
Critical max 9.8USN-7582-1 4 CVEs
samba vulnerabilities
Evgeny Legerov discovered that Samba incorrectly handled buffers in certain GSSAPI routines of Heimdal. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service. (CVE-2022-3437) Greg Hudson discovered that Samb…
first Jun 19, 2025 -
Medium max 6.1USN-7581-1 2 CVEs
node-express vulnerabilities
It was discovered that Express incorrectly handled certain URLs, leading to an open redirect attack. A remote attacker could possibly use this issue to perform phishing attacks. (CVE-2024-29041) Adam Korcz discovered that Express did not properly sanitize cer…
first Jun 19, 2025 -
High max 7.8USN-7573-2 5 CVEs
xorg-server, xorg-server-hwe-16.04, xorg-server-hwe-18.04 vulnerabilities
USN-7573-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Nils Emmerich discovered that the X.Org X Server incorrectly handled certa…
first Jun 18, 2025 -
Critical max 9.8USN-7569-1 4 CVEs
dojo vulnerabilities
It was discovered that Dojo did not correctly handle DataGrids. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-15494) It was discovered that Dojo was vulnerable to…
first Jun 16, 2025 -
Medium max 6.1USN-7568-1 2 CVEs
requests vulnerabilities
Dennis Brinkrolf and Tobias Funke discovered that Requests did not correctly handle certain HTTP headers. A remote attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 14.04 LTS. (CVE-2023-32681) Juho Forsén di…
first Jun 16, 2025 -
High max 7.5USN-7567-1 2 CVEs
modsecurity-apache vulnerabilities
Simon Studer discovered that ModSecurity incorrectly handled certain JSON objects. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-47947) It was discovered that ModSecurity incorrectly handled requests when parsing certain fo…
first Jun 13, 2025 -
High max 7.5USN-7565-1 6 CVEs
libsoup2.4 vulnerabilities
It was discovered that libsoup did not correctly handle memory while performing UTF-8 conversions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2024-52531) It…
first Jun 11, 2025 -
Medium max 6.4USN-7556-1 3 CVEs
twitter-bootstrap3, twitter-bootstrap4 vulnerabilities
It was discovered that Bootstrap did not correctly sanitize certain input in the carousel component. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. (CVE-2024-6484, CVE-2024-6531) It was discovered that Bootstrap did …
first Jun 5, 2025 -
High max 7.5USN-7552-1 10 CVEs
wireshark vulnerabilities
It was discovered that Wireshark did not correctly handle recursion. If a user or system were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubu…
first Jun 4, 2025 -
Medium max 5.4USN-7551-1 1 CVE
libvpx vulnerability
It was discovered that libvpx did not properly manage memory. An attacker could possibly use this issue to cause applications using libvpx to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jun 3, 2025 -
UnscoredUSN-7545-4 0 CVEs
apport regression
USN-7545-1 fixed vulnerabilities in Apport. The update incorrectly handled logging if a crashing process was killed while Apport was analyzing it. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Qualys discovered …
first Aug 4, 2025 -
UnscoredUSN-7545-3 0 CVEs
apport regression
USN-7545-1 fixed vulnerabilities in Apport. The update introduced a regression that raised an error if a crashing process was killed while Apport was analyzing it. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Q…
first Jul 14, 2025 -
UnscoredUSN-7545-2 0 CVEs
apport regression
USN-7545-1 fixed a vulnerability in Apport. The update introduced a regression that prevented core dumps from being generated inside containers. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Qualys discovered th…
first Jun 9, 2025 -
Medium max 4.7USN-7545-1 1 CVE
apport vulnerability
Qualys discovered that Apport incorrectly handled metadata when processing application crashes. An attacker could possibly use this issue to leak sensitive information.
first May 29, 2025 -
High max 7.7USN-7544-1 1 CVE
python-setuptools, setuptools vulnerability
It was discovered that setuptools did not properly sanitize paths. An attacker could possibly use this issue to write files to arbitrary locations on the filesystem.
first May 28, 2025 -
High max 7.5USN-7543-1 2 CVEs
libsoup3, libsoup2.4 vulnerabilities
Jan Różański discovered that libsoup incorrectly handled certain headers when sending HTTP/2 requests over TLS. An attacker could possibly use this issue to cause a denial of service. This issue only affected libsoup3 in Ubuntu 24.04 LTS, Ubuntu 24.10, and Ub…
first May 28, 2025 -
Medium max 5.9USN-7542-1 1 CVE
krb5 vulnerability
It was discovered that Kerberos allowed the usage of weak cryptographic standards. An attacker could possibly use this issue to expose sensitive information. This update introduces the allow_rc4 and allow_des3 configuration options, and disables the usage of …
first May 28, 2025 -
Medium max 6.5USN-7538-1 5 CVEs
ffmpeg vulnerabilities
Simcha Kosman discovered that FFmpeg did not correctly handle certain return values. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubun…
first May 28, 2025 -
Medium max 5.3USN-7527-1 1 CVE
libfcgi-perl vulnerability
It was discovered that libfcgi-perl incorrectly handled certain inputs. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first May 22, 2025 -
Medium max 6.1USN-7508-2 1 CVE
open-vm-tools vulnerability
USN-7508-1 fixed a vulnerability in Open VM Tools. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS Original advisory details: It was discovered that Open VM Tools incorrectly handled certain file operations. An attacker…
first Jun 3, 2025 -
High max 7.5USN-7507-1 2 CVEs
ruby-rack vulnerabilities
It was discovered that Rack incorrectly handled deleted rack sessions. An attacker could possibly use this issue to expose sensitive information or to gain unauthorized access to user accounts. (CVE-2025-32441) It was discovered that Rack incorrectly limited …
first May 12, 2025 -
Critical max 9.8USN-7502-1 1 CVE
php-horde-css-parser vulnerability
It was discovered that Horde Css Parser did not correctly handle parsing uncontrolled CSS data. An attacker could possibly use this issue to perform remote code execution. (CVE-2020-13756)
first May 7, 2025 -
Medium max 6.5USN-7490-2 1 CVE
libsoup2.4 regression
USN-7490-1 fixed vulnerabilities in libsoup. It was discovered that the fix for CVE-2025-32912 was incomplete. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Tan Wei Chong discovered that libsoup incorrectly hand…
first May 6, 2025 -
Critical max 9.0USN-7490-1 9 CVEs
libsoup2.4 vulnerabilities
Tan Wei Chong discovered that libsoup incorrectly handled memory when parsing HTTP request headers. An attacker could possibly use this issue to send a maliciously crafted HTTP request to the server, causing a denial of service. (CVE-2025-32906) Alon Zahavi d…
first May 6, 2025