Buscar noticias

Ctrl/Cmd para multiselección
Total: 5002

USN-8502-1: GnuTLS vulnerabilities

⚠️ Importante

It was discovered that GnuTLS had a timing side-channel when processing malformed ciphertexts in RSA-PSK ClientKeyExchange. A remote attacker could possibly use this issue to recover sensitive information. This issue only affected Ubuntu 1…

Ubuntu CVE-2024-0553CVE-2024-12243CVE-2025-9820CVE-2025-14831CVE-2026-3833CVE-2026-5260CVE-2026-33845CVE-2026-33846CVE-2026-42009CVE-2026-42010 CVSS 9.8 2026-07-06 13:37 UTC · 2026-07-06 10:37 -03

USN-8513-1: PHP vulnerabilities

⚠️ Importante

It was discovered that PHP incorrectly handled SOAP object deduplication when processing apache:Map nodes with duplicate keys. An attacker could possibly use this to cause a use-after-free, resulting in remote code execution. (CVE-2026-672…

Ubuntu CVE-2026-6722CVE-2026-7261CVE-2025-14179 CVSS 9.8 2026-07-06 13:22 UTC · 2026-07-06 10:22 -03

USN-8512-1: Gzip vulnerabilities

⚠️ Importante

It was discovered that Gzip's gzexe utility handled temporary files in an insecure manner. When the mktemp utility was not available, gzexe constructed a temporary file path based on the process ID, which could be predicted. A local attack…

Ubuntu CVE-2026-41991CVE-2026-41992 CVSS 7.5 2026-07-06 12:52 UTC · 2026-07-06 09:52 -03

USN-8511-1: socat vulnerabilities

⚠️ Importante

It was discovered that socat incorrectly handled the SOCKS5 proxy server reply parser. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2026-56123) It was discovered that socat incorrectly handled a sample s…

Ubuntu CVE-2026-56123CVE-2024-54661 CVSS 9.8 2026-07-06 12:37 UTC · 2026-07-06 09:37 -03

USN-8510-1: tar vulnerability

⚠️ Importante

It was discovered that tar incorrectly handled symlinks when extracting archives. An attacker could possibly use this issue to overwrite arbitrary files.

Ubuntu 2026-07-06 11:57 UTC · 2026-07-06 08:57 -03