Aggregator

USN-7573-2: X.Org X Server vulnerabilities

Ubuntu Security Advisories
1 week 1 day ago
USN-7573-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Nils Emmerich discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these issues to cause the X Server to crash, leading to a denial of service, obtain sensitive information, or possibly execute arbitrary code.

USN-7574-1: Go vulnerabilities

Ubuntu Security Advisories
1 week 2 days ago
Kyle Seely discovered that the Go net/http module did not properly handle sensitive headers during repeated redirects. An attacker could possibly use this issue to obtain sensitive information. (CVE-2024-45336) Juho Forsén discovered that the Go crypto/x509 module incorrectly handled IPv6 addresses during URI parsing. An attacker could possibly use this issue to bypass certificate URI constraints. (CVE-2024-45341) It was discovered that the Go crypto module did not properly handle variable time instructions under certain circumstances on 64-bit Power (ppc64el) systems. An attacker could possibly use this issue to expose sensitive information. (CVE-2025-22866) It was discovered that the Go http/httpproxy module did not properly handle IPv6 zone IDs during hostname matching. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-22870) Takeshi Kaneko discovered that the Go net/http module did not properly strip sensitive proxy headers during redirect requests. An attacker could possibly use this issue to obtain sensitive information. (CVE-2025-4673)

USN-7575-1: MuJS vulnerabilities

Ubuntu Security Advisories
1 week 2 days ago
It was discovered that MuJS did not correctly handle try/finally statements, which could lead to a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2021-45005) Han Zheng discovered that MuJS did not correctly handle recursion, which could lead to stack exhaustion. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-30974) Han Zheng discovered that MuJS did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. (CVE-2022-30975)

USN-7573-1: X.Org X Server vulnerabilities

Ubuntu Security Advisories
1 week 2 days ago
Nils Emmerich discovered that the X.Org X Server incorrectly handled certain memory operations. An attacker could use these issues to cause the X Server to crash, leading to a denial of service, obtain sensitive information, or possibly execute arbitrary code.

USN-7555-3: Django vulnerability

Ubuntu Security Advisories
1 week 2 days ago
USN-7555-1 fixed a vulnerability in Django. This update provides an additional fix for Ubuntu 20.04 LTS. Original advisory details: It was discovered that Django incorrectly handled certain unescaped request paths. An attacker could possibly use this issue to perform a log injection.