Canonical Security Advisories — February 2024 — Canonical Security Advisories

linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities

CVEs:CVE-2023-6915 CVE-2023-51780 CVE-2023-51781 CVE-2024-0565 CVE-2024-0646

Upstream advisory

USN-6652-1

USNExploited2024-02-23

linux-azure vulnerabilities

CVEs:CVE-2023-5972 CVE-2023-6176 CVE-2023-6531 CVE-2023-6622 CVE-2023-6915 CVE-2023-34324 CVE-2023-35827 CVE-2023-46813 CVE-2023-46862 CVE-2023-51780 CVE-2023-51781 CVE-2024-0565 CVE-2024-0582 CVE-2024-0641 CVE-2024-0646

Upstream advisory

USN-6651-1

USNExploitedHIGH2024-02-23

linux, linux-aws, linux-gcp, linux-hwe-6.5, linux-laptop, linux-oracle, linux-raspi, linux-starfive vulnerabilities

CVEs:CVE-2023-6915 CVE-2023-51780 CVE-2023-51781 CVE-2024-0565 CVE-2024-0582 CVE-2024-0646

Upstream advisory

USN-6650-1

USNMEDIUM2024-02-23

inux-oem-6.1 vulnerability

CVEs:CVE-2023-6915

Upstream advisory

USN-6649-1

USN2024-02-22

firefox vulnerabilities

Upstream advisory

USN-6648-1

USNHIGH2024-02-22

linux, linux-aws, linux-aws-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4, linux-xilinx-zynqmp vulnerabilities

CVEs:CVE-2023-6915 CVE-2023-51781 CVE-2024-0565 CVE-2024-0646

Upstream advisory

USN-6647-1

USNHIGH2024-02-21

linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities

CVEs:CVE-2023-7192 CVE-2023-51780 CVE-2023-51782

Upstream advisory

USN-6584-2

USN2024-02-21

libspf2 vulnerabilities

Upstream advisory

USN-6646-1

USNHIGH2024-02-20

linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

CVEs:CVE-2023-7192 CVE-2023-51780 CVE-2023-51782

Upstream advisory

USN-6645-1

USNMEDIUM2024-02-20

linux vulnerability

CVEs:CVE-2023-7192

Upstream advisory

USN-6625-3

USNHIGH2024-02-20

linux-raspi, linux-raspi-5.4 vulnerabilities

CVEs:CVE-2023-34324 CVE-2023-35827 CVE-2023-45863 CVE-2023-46343

Upstream advisory

USN-6644-1

USNHIGH2024-02-19

tiff vulnerabilities

CVEs:CVE-2023-6228 CVE-2023-6277 CVE-2023-52356

Upstream advisory

USN-6643-1

USNHIGH2024-02-19

node-ip vulnerability

CVEs:CVE-2023-42282

Upstream advisory

USN-6642-1

USNCRITICAL2024-02-19

bind9 vulnerabilities

CVEs:CVE-2023-4408 CVE-2023-5517 CVE-2023-6516 CVE-2023-50387 CVE-2023-50868

Upstream advisory

USN-6641-1

USN2024-02-19

curl vulnerability

Upstream advisory

UBUNTU-CVE-2020-36774

USN2024-02-19

CVEs:CVE-2020-36774

Upstream advisory

USN-6626-3

USNHIGH2024-02-15

linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15 vulnerabilities

CVEs:CVE-2023-6039 CVE-2023-6176 CVE-2023-6622 CVE-2023-32250 CVE-2023-32252 CVE-2023-32257 CVE-2023-34324 CVE-2023-35827 CVE-2023-46813 CVE-2024-0641

Upstream advisory

USN-6640-1

USNHIGH2024-02-15

shadow vulnerability

CVEs:CVE-2023-4641

Upstream advisory

USN-6639-1

USNHIGH2024-02-15

linux-oem-6.1 vulnerabilities

CVEs:CVE-2023-6121 CVE-2023-6531 CVE-2023-6622 CVE-2023-6932 CVE-2023-51780 CVE-2023-51781 CVE-2023-51782 CVE-2024-0565 CVE-2024-0607 CVE-2024-0646 CVE-2024-22705

Upstream advisory

USN-6628-2

USNHIGH2024-02-15

linux-intel-iotg-5.15 vulnerabilities

CVEs:CVE-2023-6039 CVE-2023-6040 CVE-2023-6176 CVE-2023-6606 CVE-2023-6622 CVE-2023-6817 CVE-2023-6931 CVE-2023-6932 CVE-2023-32250 CVE-2023-32252 CVE-2023-32257 CVE-2023-34324 CVE-2023-35827 CVE-2023-46813 CVE-2024-0193 CVE-2024-0641

Upstream advisory

USN-6638-1

USNCRITICAL2024-02-15

edk2 vulnerabilities

CVEs:CVE-2022-36763 CVE-2022-36764 CVE-2022-36765 CVE-2023-45230 CVE-2023-45231 CVE-2023-45232 CVE-2023-45233 CVE-2023-45234 CVE-2023-45235 CVE-2023-48733

Upstream advisory

USN-6636-1

USN2024-02-14

clamav vulnerabilities

CVEs:CVE-2024-20290 CVE-2024-20328

Upstream advisory

USN-6629-3

USNHIGH2024-02-14

ujson vulnerabilities

CVEs:CVE-2022-31116 CVE-2022-31117

Upstream advisory

USN-6635-1

USNHIGH2024-02-14

linux-gcp-6.2 vulnerabilities

CVEs:CVE-2023-5158 CVE-2023-5178 CVE-2023-5717 CVE-2023-6606 CVE-2023-6817 CVE-2023-6931 CVE-2023-6932 CVE-2023-37453 CVE-2023-39189 CVE-2023-39192 CVE-2023-39193 CVE-2023-42754 CVE-2024-0193

Upstream advisory

USN-6608-2

USNHIGH2024-02-14

linux-nvidia-6.2 vulnerabilities

CVEs:CVE-2023-6606 CVE-2023-6817 CVE-2023-6931 CVE-2023-6932 CVE-2024-0193

Upstream advisory

USN-6626-2

USNHIGH2024-02-14

linux-lowlatency, linux-raspi vulnerabilities

CVEs:CVE-2023-6039 CVE-2023-6176 CVE-2023-6622 CVE-2023-32250 CVE-2023-32252 CVE-2023-32257 CVE-2023-34324 CVE-2023-35827 CVE-2023-46813 CVE-2024-0641

Upstream advisory

USN-6629-2

USNHIGH2024-02-14

ujson vulnerability

CVEs:CVE-2021-45958

Upstream advisory

USN-6629-1

USNHIGH2024-02-14

ujson vulnerabilities

CVEs:CVE-2021-45958 CVE-2022-31116 CVE-2022-31117

Upstream advisory

USN-6634-1

USN2024-02-13

dotnet6, dotnet7, dotnet8 vulnerabilities

Upstream advisory

USN-6633-1

USNCRITICAL2024-02-13

bind9 vulnerabilities

CVEs:CVE-2023-4408 CVE-2023-5517 CVE-2023-5679 CVE-2023-50387 CVE-2023-50868

Upstream advisory

USN-6632-1

USNCRITICAL2024-02-13

openssl vulnerabilities

CVEs:CVE-2023-5678 CVE-2024-0727

Upstream advisory

USN-6631-1

USN2024-02-12

webkit2gtk vulnerabilities

Upstream advisory

USN-6630-1

USNNONE2024-02-12

python-glance-store vulnerability

CVEs:CVE-2024-1141

Upstream advisory

USN-6628-1

USNHIGH2024-02-09

linux-intel-iotg vulnerabilities

CVEs:CVE-2023-6039 CVE-2023-6040 CVE-2023-6176 CVE-2023-6606 CVE-2023-6622 CVE-2023-6817 CVE-2023-6931 CVE-2023-6932 CVE-2023-32250 CVE-2023-32252 CVE-2023-32257 CVE-2023-34324 CVE-2023-35827 CVE-2023-46813 CVE-2024-0193 CVE-2024-0641

Upstream advisory

USN-6625-2

USNHIGH2024-02-08

linux-gcp, linux-gcp-5.4 vulnerabilities

CVEs:CVE-2023-34324 CVE-2023-35827 CVE-2023-45863 CVE-2023-46343

Upstream advisory

USN-6627-1

USN2024-02-08

libde265 vulnerabilities

Upstream advisory

USN-6626-1

USNHIGH2024-02-08

linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-kvm, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15 vulnerabilities

CVEs:CVE-2023-6039 CVE-2023-6176 CVE-2023-6622 CVE-2023-32250 CVE-2023-32252 CVE-2023-32257 CVE-2023-34324 CVE-2023-35827 CVE-2023-46813 CVE-2024-0641

Upstream advisory

USN-6625-1

USNHIGH2024-02-07

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

CVEs:CVE-2023-34324 CVE-2023-35827 CVE-2023-45863 CVE-2023-46343

Upstream advisory

USN-6624-1

USNHIGH2024-02-07

linux, linux-aws, linux-gcp, linux-hwe-6.5, linux-laptop, linux-lowlatency, linux-lowlatency-hwe-6.5, linux-oem-6.5, linux-oracle, linux-raspi, linux-starfive vulnerabilities

CVEs:CVE-2023-5972 CVE-2023-6176 CVE-2023-6531 CVE-2023-6622 CVE-2023-34324 CVE-2023-35827 CVE-2023-46813 CVE-2023-46862 CVE-2024-0641

Upstream advisory