Overview

John and Maximé have been talking about Ubuntu’s AppArmor user namespace
restrictions at the the Linux Security Summit in Europe this past week, plus we
cover some more details from the official announcement of permission prompting
in Ubuntu 24.10, a new release of Intel TDX for Ubuntu 24.04 LTS and more.

This week in Ubuntu Security Updates (01:11 )

613 unique CVEs addressed in the past fortnight

[USN-6989-1] OpenStack vulnerability

• 1 CVEs addressed in Jammy (22.04 LTS), Noble (24.04 LTS)
  
  
  
  • CVE-2024-44082
  
  
  
  

[USN-6990-1] znc vulnerability

• 1 CVEs addressed in Trusty ESM (14.04 ESM), Xenial ESM (16.04 ESM), Bionic ESM (18.04 ESM), Focal (20.04 LTS), Jammy (22.04 LTS), Noble (24.04 LTS)
  
  
  
  • CVE-2024-39844
  
  
  
  

[USN-6992-1] Firefox vulnerabilities

• 8 CVEs addressed in Focal (20.04 LTS)
  
  
  
  • CVE-2024-8385
  
  
  • CVE-2024-8384
  
  
  • CVE-2024-8381
  
  
  • CVE-2024-8389
  
  
  • CVE-2024-8387
  
  
  • CVE-2024-8386
  
  
  • CVE-2024-8383
  
  
  • CVE-2024-8382
  
  
  
  

[USN-6993-1] Vim vulnerabilities

• 2 CVEs addressed in Trusty ESM (14.04 ESM), Xenial ESM (16.04 ESM), Bionic ESM (18.04 ESM), Focal (20.04 LTS), Jammy (22.04 LTS), Noble (24.04 LTS)
  
  
  
  • CVE-2024-43374
  
  
  • CVE-2024-41957
  
  
  
  

[USN-6991-1] AIOHTTP vulnerability

• 1 CVEs addressed in Bionic ESM (18.04 ESM), Focal (20.04 LTS), Jammy (22.04 LTS), Noble (24.04 LTS)
  
  
  
  • CVE-2024-23334
  
  
  
  

[USN-6995-1] Thunderbird vulnerabilities

• 10 CVEs addressed in Focal (20.04 LTS), Jammy (22.04 LTS)
  
  
  
  • CVE-2024-8384
  
  
  • CVE-2024-8381
  
  
  • CVE-2024-7525
  
  
  • CVE-2024-7522
  
  
  • CVE-2024-7519
  
  
  • CVE-2024-8382
  
  
  • CVE-2024-7529
  
  
  • CVE-2024-7527
  
  
  • CVE-2024-7526
  
  
  • CVE-2024-7521
  
  
  
  

[USN-6996-1] WebKitGTK vulnerabilities

• 6 CVEs addressed in Jammy (22.04 LTS), Noble (24.04 LTS)
  
  
  
  • CVE-2024-4558
  
  
  • CVE-2024-40789
  
  
  • CVE-2024-40782
  
  
  • CVE-2024-40780
  
  
  • CVE-2024-40779
  
  
  • CVE-2024-40776
  
  
  
  

[USN-6841-2] PHP vulnerability

• 1 CVEs addressed in Xenial ESM (16.04 ESM), Bionic ESM (18.04 ESM)
  
  
  
  • CVE-2024-5458
  
  
  
  

[USN-6997-1, USN-6997-2] LibTIFF vulnerability

• 1 CVEs addressed in Trusty ESM (14.04 ESM), Xenial ESM (16.04 ESM), Bionic ESM (18.04 ESM), Focal (20.04 LTS), Jammy (22.04 LTS), Noble (24.04 LTS)
  
  
  
  • CVE-2024-7006
  
  
  
  

[USN-6994-1] Netty vulnerabilities

• 2 CVEs addressed in Jammy (22.04 LTS)
  
  
  
  • CVE-2023-44487
  
  
  • CVE-2023-34462
  
  
  
  


• HTTP/2 DoS, seen exploited in the wild and listen on the CISA KEV

[USN-6998-1] Unbound vulnerabilities

• 2 CVEs addressed in Trusty ESM (14.04 ESM), Xenial ESM (16.04 ESM), Bionic ESM (18.04 ESM), Focal (20.04 LTS), Jammy (22.04 LTS), Noble (24.04 LTS)
  
  
  
  • CVE-2024-43168
  
  
  • CVE-2024-43167
  
  
  
  

[USN-6999-1] Linux kernel vulnerabilities

• 220 CVEs addressed in Noble (24.04 LTS)


• Full CVE list elided - see USN for details

[USN-7003-1, USN-7003-2, USN-7003-3] Linux kernel vulnerabilities

• 85 CVEs addressed in Bionic ESM (18.04 ESM), Focal (20.04 LTS)


• Full CVE list elided - see USN for details

[USN-7004-1] Linux kernel vulnerabilities

• 221 CVEs addressed in Noble (24.04 LTS)


• Full CVE list elided - see USN for details

[USN-7005-1, USN-7005-2] Linux kernel vulnerabilities

• 219 CVEs addressed in Jammy (22.04 LTS), Noble (24.04 LTS)


• Full CVE list elided - see USN for details

[USN-7006-1] Linux kernel vulnerabilities

• 94 CVEs addressed in Focal (20.04 LTS)


• Full CVE list elided - see USN for details

[USN-7007-1] Linux kernel vulnerabilities

• 219 CVEs addressed in Focal (20.04 LTS), Jammy (22.04 LTS)


• Full CVE list elided - see USN for details

[USN-7008-1] Linux kernel vulnerabilities

• 222 CVEs addressed in Jammy (22.04 LTS)


• Full CVE list elided - see USN for details

[USN-7009-1] Linux kernel vulnerabilities

• 219 CVEs addressed in Focal (20.04 LTS), Jammy (22.04 LTS)


• Full CVE list elided - see USN for details

[USN-7019-1] Linux kernel vulnerabilities

• 429 CVEs addressed in Jammy (22.04 LTS)</