8,437 results · Feed
-
Medium max 6.3USN-5169-1 1 CVE
oddjob vulnerability
Matthias Gerstner discovered that there was a race condition in the mkhomedir tool shipped with the oddjob package. An authenticated attacker could use this to setup a symlink attack and change permissions on files on the host filesystem.
first Aug 9, 2022 -
UnscoredUSN-5167-1 29 CVEs
ffmpeg vulnerabilities
It was discovered that FFmpeg did not properly verify certain input when processing video and audio files. An attacker could possibly use this to send specially crafted input to the application, force a division by zero, and cause a denial of service (applica…
first Jun 13, 2022 -
Medium max 6.5USN-5159-1 1 CVE
node-bl vulnerability
It was discovered that bl incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service.
first Feb 8, 2022 -
UnscoredUSN-5151-1 2 CVEs
mailman vulnerabilities
It was discovered that Mailman incorrectly handled certain URL. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-43331) It was discovered that Mailman incorrectly handled certain inputs. An attacker could possibly use this issue …
first Nov 18, 2021 -
UnscoredUSN-5150-1 1 CVE
openexr vulnerability
It was discovered that OpenEXR incorrectly handled certain EXR image files. An attacker could possibly use this issue to cause a crash.
first Nov 17, 2021 -
UnscoredUSN-5144-1 1 CVE
openexr vulnerability
It was discovered that OpenEXR incorrectly handled certain EXR image files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.
first Nov 11, 2021 -
Medium max 5.5USN-5123-2 2 CVEs
mysql-5.7 vulnerabilities
USN-5123-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first Oct 25, 2021 -
UnscoredUSN-5121-1 2 CVEs
mailman vulnerabilities
Andre Protas, Richard Cloke, and Andy Nuttall discovered that Mailman did not properly associate cross-site request forgery (CSRF) tokens to specific accounts. A remote attacker could use this to perform a CSRF attack to gain access to another account. (CVE-2…
first Oct 22, 2021 -
Low max 2.8USN-5103-1 1 CVE
docker.io vulnerability
Lei Wang and Ruizhi Xiao discovered that the Moby Docker engine in Docker incorrectly allowed the docker cp command to make permissions changes in the host filesystem in some situations. A local attacker could possibly use to this to expose sensitive informat…
first Oct 4, 2021 -
UnscoredUSN-5090-4 0 CVEs
apache2 regression
USN-5090-1 fixed vulnerabilities in Apache HTTP Server. One of the upstream fixes introduced a regression in UDS URIs. This update fixes the problem. Original advisory details: James Kettle discovered that the Apache HTTP Server HTTP/2 module incorrectly hand…
first Sep 28, 2021 -
High max 7.5USN-5080-2 2 CVEs
libgcrypt20 vulnerabilities
USN-5080-1 fixed several vulnerabilities in Libgcrypt. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Libgcrypt incorrectly handled ElGamal encryption. An attacker could possibly use this …
first Sep 16, 2021 -
UnscoredUSN-5086-1 0 CVEs
linux, linux-hwe, linux-hwe-5.11, linux-hwe-5.4 vulnerability
Johan Almbladh discovered that the eBPF JIT implementation for IBM s390x systems in the Linux kernel miscompiled operations in some situations, allowing circumvention of the BPF verifier. A local attacker could use this to cause a denial of service (system cr…
first Sep 22, 2021 -
UnscoredUSN-5078-2 2 CVEs
squashfs-tools vulnerabilities
USN-5078-1 fixed several vulnerabilities in Squashfs-Tools. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Etienne Stalmans discovered that Squashfs-Tools mishandled certain malformed SQUASHFS files. An attacker…
first Sep 15, 2021 -
UnscoredUSN-5076-1 1 CVE
git vulnerability
It was discovered that Git allowed newline characters in certain repository paths. An attacker could potentially use this issue to perform cross-protocol requests.
first Sep 13, 2021 -
UnscoredUSN-5073-2 5 CVEs
linux-gcp, linux-gcp-4.15 vulnerabilities
Maxim Levitsky and Paolo Bonzini discovered that the KVM hypervisor implementation for AMD processors in the Linux kernel allowed a guest VM to disable restrictions on VMLOAD/VMSAVE in a nested guest. An attacker in a guest VM could use this to read or write …
first Sep 17, 2021 -
Medium max 6.5USN-5066-2 1 CVE
python-pysaml2 vulnerability
USN-5066-1 fixed a vulnerability in PySAML2. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Brian Wolff discovered that PySAML2 incorrectly validated cryptographic signatures. A remote attacker could possibly us…
first Sep 8, 2021 -
High max 7.8USN-5064-2 1 CVE
cpio vulnerability
USN-5064-1 fixed vulnerabilities in GNU cpio. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Maverick Chung and Qiaoyi Fang discovered that cpio incorrectly handled certain pattern files. A remote attacker coul…
first Jan 27, 2022 -
UnscoredUSN-5048-2 1 CVE
inetutils vulnerability
USN-5048-1 fixed a vulnerability in Inetutils for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update provides the corresponding fixes for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Inetutils telnet server allows remote attackers to ex…
first Aug 20, 2021 -
UnscoredUSN-5061-1 4 CVEs
scilab vulnerabilities
It was discovered that Scilab did not properly sanitize XML inputs. An atacker could use a crafted XML file to cause a denial of service or possibly execute arbitrary code.
first Sep 3, 2021 -
Medium max 5.5USN-5043-1 11 CVEs
exiv2 vulnerabilities
It was discovered that Exiv2 incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service. (CVE-2021-32815, CVE-2021-34334, CVE-2021-37620, CVE-2021-37622) It was discovered that Exiv2 incorrectly handled cer…
first Aug 17, 2021 -
UnscoredUSN-5034-2 1 CVE
c-ares vulnerability
USN-5034-1 fixed a vulnerability in c-ares. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Philipp Jeitner and Haya Shulman discovered that c-ares incorrectly validated certain hostnames returned by DNS servers.…
first Aug 10, 2021 -
UnscoredUSN-5030-2 2 CVEs
libdbi-perl vulnerabilities
USN-5030-1 addressed vulnerabilities in Perl DBI module. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: It was discovered that the Perl DBI module incorrectly opened files outside of the folder specified in the…
first Feb 3, 2022 -
UnscoredUSN-5028-1 1 CVE
exiv2 vulnerability
It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service.
first Aug 2, 2021 -
High max 7.1USN-5027-2 1 CVE
php-pear vulnerability
USN-5027-1 fixed a vulnerability in PEAR. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that PEAR incorrectly handled symbolic links in archives. A remote attacker could possibly use this issu…
first Aug 4, 2021 -
UnscoredUSN-5026-2 2 CVEs
qpdf vulnerabilities
USN-5026-1 fixed several vulnerabilities in QPDF. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that QPDF incorrectly handled certain malformed PDF files. A remote attacker could use this issu…
first Aug 2, 2021 -
Medium max 6.1USN-5022-3 16 CVEs
mysql-5.7 vulnerabilities
USN-5022-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first Oct 7, 2021 -
Medium max 5.3USN-5021-2 2 CVEs
curl vulnerability
USN-5021-1 fixed vulnerabilities in curl. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Harry Sintonen and Tomas Hoger discovered that curl incorrectly handled TELNET connections when the -t option was used on…
first Jan 20, 2022 -
High max 7.0USN-5020-1 3 CVEs
ruby2.3, ruby2.5, ruby2.7 vulnerabilities
It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. (CVE-2021-31799) It was discovered that Ruby incorrectly handled certain inputs. An attacker could possibly use this issue to …
first Jul 21, 2021 -
UnscoredUSN-6584-2 2 CVEs
libspf2 vulnerabilities
USN-6584-1 fixed several vulnerabilities in Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. This update provides the corresponding updates for CVE-2021-33912 and CVE-2021-33913 in Ubuntu 16.04 LTS. We apologize for the inconvenience. Original advisory details: Philipp…
first Feb 21, 2024 -
Medium max 6.1USN-5013-2 2 CVEs
systemd vulnerabilities
USN-5013-1 fixed several vulnerabilities in systemd. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that systemd incorrectly handled certain mount paths. A local attacker could possibly use thi…
first Jul 20, 2021 -
UnscoredUSN-5055-1 1 CVE
grilo vulnerability
Michael Catanzaro discovered that grilo incorrectly handled certain TLS certificate verification. An attacker could possibly use this issue to MITM attacks.
first Aug 30, 2021 -
UnscoredUSN-5005-1 1 CVE
djvulibre vulnerability
It was discovered that DjVuLibre incorrectly handled certain djvu files. An attacker could possibly use this issue to execute arbitrary code or cause a crash.
first Jul 5, 2021 -
Medium max 4.5USN-5004-1 2 CVEs
rabbitmq-server vulnerabilities
It was discovered that RabbitMQ incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2019-11287) Jonathan Knudsen discovered RabbitMQ i…
first Jun 24, 2021 -
UnscoredUSN-4996-2 5 CVEs
openexr vulnerabilities
USN-4996-1 fixed several vulnerabilities in OpenEXR. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that OpenEXR incorrectly handled certain malformed EXR image files. If a user were tricked in…
first Jun 22, 2021 -
Medium max 4.0USN-4976-2 1 CVE
dnsmasq vulnerability
USN-4976-1 fixed a vulnerability in Dnsmasq. This update provides the corresponding update for Ubuntu 16.04 ESM. Dnsmasq has been updated to 2.79-1 for Ubuntu 16.04 ESM in order to fix some security issues. Original advisory details: Petr Mensik discovered th…
first Sep 7, 2022 -
Medium max 4.9USN-4975-2 1 CVE
python-django vulnerability
USN-4975-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Rasmus Lerchedahl Petersen and Rasmus Wriedt Larsen discovered that Django incorrectly handled path sanitation in admind…
first Jun 7, 2021 -
Medium max 4.7USN-4964-1 5 CVEs
exiv2 vulnerabilities
It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10 and Ubuntu 21.04. (CVE-2021-29463) It was discovered that Exiv2 inc…
first May 25, 2021 -
Medium max 5.5USN-4959-1 1 CVE
gst-plugins-base1.0 vulnerability
It was discovered that GStreamer Base Plugins incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information.
first May 18, 2021 -
UnscoredUSN-4957-2 5 CVEs
djvulibre vulnerabilities
USN-4957-1 fixed several vulnerabilities in DjVuLibre. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system…
first May 18, 2021 -
UnscoredUSN-4953-1 3 CVEs
awstats vulnerabilities
Sean Boran discovered that AWStats incorrectly filtered certain parameters. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2020-29600) It was discovered that AWStats incorrectly filtered certain parameters. A remote attacker c…
first May 13, 2021