11635 matches found
USN-9027-2: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Hardware monitoring drivers; - OCFS2 file system; - IPv4 networking; - Ethernet bridge; -...
USN-9091-1: Linux kernel (NVIDIA Tegra) vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...
USN-9090-1: Apache HTTP Server vulnerabilities
Zhenpeng Lin discovered that Apache HTTP Server's moddav module incorrectly calculated memory sizes when handling WebDAV locks. An attacker with permission to create WebDAV locks could possibly use this issue to cause Apache HTTP Server to crash, resulting in a denial of service. CVE-2026-42528 I...
USN-9068-1: Debian-LAN vulnerability
Wolfgang Schweer discovered that Debian-LAN configured overly permissive ACLs for the Kerberos admin server. An authenticated user could possibly use this issue to change the credentials of other users, leading to privilege escalation...
USN-9089-1: x11vnc vulnerability
It was discovered that x11vnc created shared memory segments with insecure permissions. A local attacker could possibly use this issue to obtain sensitive information or modify screen contents...
USN-9088-1: TigerVNC vulnerability
It was discovered that the TigerVNC viewer stored TLS certificate exceptions as trusted certificate authorities. A remote attacker could possibly use this issue to impersonate any VNC server after a user had added a certificate exception for the attacker's server...
USN-9087-1: signing-party vulnerability
It was discovered that the gpg-key2ps tool in signing-party did not properly sanitize user IDs before passing them to a shell. If a user were tricked into processing a specially crafted OpenPGP key, an attacker could possibly use this issue to execute arbitrary commands...
USN-9086-1: SA-Exim vulnerability
It was discovered that SA-Exim unsafely evaluated the parameters of its greylisting SpamAssassin rule. An attacker able to write SpamAssassin configuration files or rules could possibly use this issue to execute arbitrary code...
USN-9085-1: Ruby OpenID vulnerability
It was discovered that Ruby OpenID sent a request to the claimed identifier URL before verifying the signature of an OpenID response. A remote attacker could possibly use this issue to perform server-side request forgery attacks...
USN-9084-1: Radicale vulnerability
It was discovered that Radicale did not delay failed authentication attempts when using htpasswd authentication. A remote attacker could possibly use this issue to obtain user passwords through timing or brute-force attacks...
USN-9083-1: gevent vulnerability
It was discovered that the gevent WSGI server incorrectly validated chunked transfer encoding trailers in HTTP requests. A remote attacker could possibly use this issue to perform HTTP request smuggling attacks, leading to privilege escalation...
USN-9082-1: pngquant vulnerability
Choi Jaeseung discovered that pngquant incorrectly handled certain PNG images, leading to a buffer overflow. An attacker could possibly use this issue to cause pngquant to crash or execute arbitrary code...
USN-9081-1: OpenConnect vulnerability
It was discovered that OpenConnect incorrectly handled certain certificate data, leading to a buffer overflow. A remote attacker could possibly use this issue to cause OpenConnect to crash, resulting in a denial of service, or possibly execute arbitrary code...
USN-9080-1: tough-cookie vulnerability
It was discovered that tough-cookie incorrectly handled cookies when the rejectPublicSuffixes option was disabled, leading to prototype pollution. An attacker could possibly use this issue to modify the behavior of applications using tough-cookie, resulting in a denial of service, or another...
USN-9079-1: nfdump vulnerabilities
It was discovered that nfdump incorrectly handled certain input files, leading to a buffer overflow. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to cause nfdump to crash or execute arbitrary code. CVE-2019-1010057 ...
USN-9078-1: ncmpc vulnerability
It was discovered that ncmpc incorrectly handled long chat messages. A remote attacker could possibly use this issue to cause ncmpc to crash, resulting in a denial of service...
USN-9077-1: MiniSSDPd vulnerability
It was discovered that MiniSSDPd incorrectly handled device updates under certain circumstances, leading to a use-after-free. A remote attacker could possibly use this issue to cause MiniSSDPd to crash, resulting in a denial of service...
USN-9076-1: libsolv vulnerability
It was discovered that libsolv incorrectly handled certain repository data, leading to a heap-based buffer over-read. An attacker could possibly use this issue to cause libsolv to crash, resulting in a denial of service...
USN-9075-1: libjwt vulnerability
It was discovered that libjwt did not use a constant-time comparison when verifying HMAC signatures. A remote attacker could possibly use this issue to forge signatures through a timing side-channel attack and bypass authentication...
USN-9074-1: JGraphX vulnerability
It was discovered that JGraphX did not disable XML external entity processing when converting certain XML input to images. An attacker could possibly use this issue to obtain sensitive information or cause a denial of service...
USN-9073-1: Lhasa vulnerability
It was discovered that Lhasa incorrectly handled certain LHA archive headers, leading to an integer underflow. If a user or automated system were tricked into opening a specially crafted archive, an attacker could possibly use this issue to cause Lhasa to crash or execute arbitrary code...
USN-9072-1: IMAPFilter vulnerability
It was discovered that IMAPFilter did not validate the hostname in SSL/TLS server certificates. A remote attacker could possibly use this issue to intercept secure communications...
USN-9071-1: HTTPie vulnerability
It was discovered that HTTPie used the final URL after following redirects to determine the output filename when downloading files. A remote attacker could possibly use this issue to write arbitrary files to the current directory...
USN-9070-1: Hiredis vulnerability
It was discovered that Hiredis did not check the return values of memory allocation functions in some places, leading to a NULL pointer dereference. An attacker could possibly use this issue to cause applications using Hiredis to crash, resulting in a denial of service...
USN-9069-1: libseccomp-golang vulnerability
It was discovered that libseccomp-golang incorrectly generated BPF filters for rules that specified multiple syscall arguments, matching any one of the arguments instead of all of them. An attacker could possibly use this issue to bypass intended seccomp restrictions...
USN-9067-1: Charybdis vulnerability
It was discovered that Charybdis incorrectly validated AUTHENTICATE parameters during SASL authentication. A remote attacker could possibly use this issue to spoof certificate fingerprints and log in as another user...
USN-8895-2: Sudo vulnerability
USN-8895-1 fixed a vulnerability in Sudo. This update provides the corresponding updates for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Sudo did not properly handle time-based access restrictions when sudoers rules used NOTBEFORE or NOTAFTER with...
USN-9066-1: Linux kernel (HWE) vulnerabilities
It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...
USN-9018-2: Linux kernel (HWE) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file systems library; - Stream parser; - ARM64 architecture; - PowerPC architecture; - RISC-V architecture;...
USN-9064-1: Pillow vulnerabilities
It was discovered that Pillow could enter an infinite loop while determining the frame count of a MIC image. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 26.10, Ubuntu 26.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. CVE-2026-112390 It...
USN-9065-1: GNU C Library vulnerabilities
It was discovered that the GNU C Library incorrectly handled the ccs= option in the fopen function. An attacker could possibly use this issue to cause GNU C Library to crash or execute arbitrary code. CVE-2026-18374 It was discovered that the GNU C Library incorrectly handled long domain names in...
USN-9063-1: Yodl vulnerability
It was discovered that Yodl incorrectly handled certain input, leading to a buffer over-read. An attacker could possibly use this issue to cause Yodl to crash, resulting in a denial of service...
USN-9062-1: SNMPTT vulnerability
It was discovered that SNMPTT did not properly sanitize trap data passed to commands run through the EXEC, PREEXEC, and unknowntrapexec options. A remote attacker could possibly use this issue to execute arbitrary shell commands...
USN-9060-1: kramdown vulnerability
It was discovered that kramdown processed the template option in documents by default. An attacker could possibly use this issue to read arbitrary files or execute arbitrary code...
USN-9059-1: ruby-jwt vulnerability
It was discovered that ruby-jwt incorrectly verified HMAC signatures when the verification key was empty or missing. A remote attacker could possibly use this issue to forge tokens and bypass authentication...
USN-9058-1: Action Pack Page Caching vulnerability
It was discovered that Action Pack Page Caching incorrectly handled certain request paths when writing cached pages. A remote attacker could possibly use this issue to write arbitrary files to the web server, and possibly execute arbitrary code...
USN-9057-1: rkhunter vulnerability
It was discovered that rkhunter downloaded mirror updates over an insecure channel. A remote attacker could possibly use this issue to execute arbitrary code...
USN-9056-1: Prosody Community Modules vulnerability
It was discovered that the LDAP authentication modules in Prosody Community Modules did not fully verify XMPP addresses when checking for administrator privileges. A remote attacker could possibly use this issue to gain administrator privileges...
USN-9055-1: pecl_http vulnerability
It was discovered that peclhttp incorrectly handled certain HTTP request parameters, leading to a type confusion. A remote attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service, or execute arbitrary code...
USN-9054-1: Babel vulnerability
It was discovered that Babel incorrectly evaluated certain code during compilation when used with certain plugins. If a user or an automated system were tricked into compiling specially crafted code, an attacker could possibly use this issue to execute arbitrary code...
USN-9053-1: NetworkManager-ssh vulnerability
It was discovered that NetworkManager-ssh did not properly validate extra options in VPN connection settings. A local attacker could possibly use this issue to escalate privileges...
USN-9052-1: Logback vulnerability
It was discovered that Logback incorrectly handled deserialization of untrusted data in its socket server and receiver components. A remote attacker could possibly use this issue to execute arbitrary code...
USN-9050-1: DAViCal vulnerabilities
It was discovered that DAViCal did not properly encode certain request parameters, leading to a reflected cross-site scripting vulnerability. A remote attacker could possibly use this issue to perform actions as another user, including adding administrator accounts. CVE-2019-18345 It was discover...
USN-9049-1: btrbk vulnerability
It was discovered that btrbk incorrectly filtered SSH commands received from remote hosts. A remote attacker could possibly use this issue to execute arbitrary commands...
USN-9047-1: asyncpg vulnerability
It was discovered that asyncpg incorrectly handled certain array data returned by a PostgreSQL server. A remote attacker controlling a PostgreSQL server could possibly use this issue to cause asyncpg to crash, resulting in a denial of service, or execute arbitrary code...
USN-9061-1: Apache Shiro vulnerabilities
It was discovered that Apache Shiro incorrectly handled certain specially crafted requests when used with Spring dynamic controllers. A remote attacker could possibly use this issue to bypass authentication. CVE-2020-1957, CVE-2020-11989...
USN-9051-1: FastCGI vulnerability
It was discovered that FastCGI incorrectly handled certain parameter lengths, leading to an integer overflow and a heap-based buffer overflow. An attacker could possibly use this issue to cause applications using FastCGI to crash, resulting in a denial of service, or execute arbitrary code...
USN-9048-1: AWL vulnerabilities
Andrew Bartlett discovered that AWL did not properly generate session keys. A remote attacker could possibly use this issue to guess a session key and impersonate another user's session. CVE-2020-11728 It was discovered that AWL did not securely generate long-term session cookies. A remote attack...
USN-9046-1: MySQL vulnerabilities
Multiple security issues were discovered in MySQL. MySQL has been updated to 8.4.13 in Ubuntu 26.04 LTS. Ubuntu 26.10 has been updated to MySQL 9.7.4. Ubuntu 22.04 LTS and Ubuntu 24.04 LTS packages have been updated with backported patches. In addition to security fixes, the updated packages...
USN-9042-1: .NET vulnerabilities
Multiple security issues were discovered in .NET and this update includes new upstream .NET versions to fix these issues. .NET 8 has been updated to 8.0.34 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. .NET 10 has been updated to 10.0.15 in Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. .NET 11...