Recent content on Ubuntu security notices
USN-5244-1: DBus vulnerability
20 January 2022, 7:51 pmcaused by the incorrect handling of usernames sharing the same UID. An
attacker could possibly use this issue to cause DBus to crash, resulting
in a denial of service.
USN-5243-2: AIDE vulnerability
20 January 2022, 4:12 pmthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
David Bouman discovered that AIDE incorrectly handled base64 operations. A
local attacker could use this issue to cause AIDE to crash, resulting in a
denial of service, or possibly execute arbitrary code.
USN-5243-1: AIDE vulnerability
20 January 2022, 2:48 pmlocal attacker could use this issue to cause AIDE to crash, resulting in a
denial of service, or possibly execute arbitrary code.
USN-5242-1: Open vSwitch vulnerability
20 January 2022, 12:31 pmpackets. A remote attacker could possibly use this issue to cause Open
vSwitch to consume resources, leading to a denial of service.
USN-5021-2: curl vulnerability
20 January 2022, 11:40 amthe corresponding updates for Ubuntu 16.04 ESM.
Original advisory details:
Harry Sintonen and Tomas Hoger discovered that curl incorrectly handled
TELNET connections when the -t option was used on the command line.
Uninitialized data possibly containing sensitive information could be sent
to the remote server, contrary to expectations. (CVE-2021-22898,
CVE-2021-22925)
LSN-0084-1: Kernel Live Patch Security Notice
20 January 2022, 8:11 amfunctionality in the Linux kernel contained an integer underflow
vulnerability, leading to an out-of-bounds write. A local attacker could
use this to cause a denial of service (system crash) or execute arbitrary
code.(CVE-2022-0185)
USN-5241-1: QtSvg vulnerabilities
19 January 2022, 6:06 pmimages. If a user or automated system were tricked into opening a specially
crafted image file, a remote attacker could use this issue to cause QtSvg
to crash, resulting in a denial of service, or possibly execute arbitrary
code.
USN-5240-1: Linux kernel vulnerability
19 January 2022, 5:37 pmfunctionality in the Linux kernel contained an integer underflow
vulnerability, leading to an out-of-bounds write. A local attacker could
use this to cause a denial of service (system crash) or execute arbitrary
code.
USN-5233-2: ClamAV vulnerability
19 January 2022, 12:42 pmthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.
Original advisory details:
It was discovered that ClamAV incorrectly handled memory when the
CL_SCAN_GENERAL_COLLECT_METADATA scan option was enabled. A remote attacker
could possibly use this issue to cause ClamAV to crash, resulting in a
denial of service.
USN-5234-1: Byobu vulnerability
18 January 2022, 6:29 pmAn attacker could possibly use this issue to expose sensitive information.