USN-6275-1: Cargo vulnerability ›
3 August 2023
Cargo could be made to run programs as your login if it installed a specially crafted crate.
Developers issue an Ubuntu Security Notice when a security issue is fixed in an official Ubuntu package.
To report a security vulnerability in an Ubuntu package, please contact the Security Team.
The Security Team also produces OVAL files for each Ubuntu release. These are an industry-standard machine-readable format dataset that contain details of all known security vulnerabilities and fixes relevant to the Ubuntu release, and can be used to determine whether a particular patch is appropriate. OVAL files can also be used to audit a system to check whether the latest security fixes have been applied.
3 August 2023
Cargo could be made to run programs as your login if it installed a specially crafted crate.
3 August 2023
poppler could be made to crash if it opened a specially crafted file.
3 August 2023
GNU cpio could be made to crash or run programs if it opened a specially crafted file.
3 August 2023
Several security issues were fixed in OpenJDK 20.
CVE-2023-22044 , CVE-2023-22045 , CVE-2023-25193 , and 4 others
3 August 2023
Several security issues were fixed in MaraDNS.
3 August 2023
Several security issues were fixed in Vim.
CVE-2022-2208 , CVE-2022-2182 , CVE-2022-2264 , and 8 others
2 August 2023
GStreamer Good Plugins could be made to crash or run programs if it opened a specially crafted file.
2 August 2023
GStreamer Base Plugins could be made to crash or run programs if it opened a specially crafted file.
2 August 2023
Several security issues were fixed in Firefox.
CVE-2023-4048 , CVE-2023-4051 , CVE-2023-4047 , and 9 others
1 August 2023
librsvg could be made to expose sensitive information.