Canonical Ubuntu Linux 22.04

is_closing_session() allows users to fill up apport.log

sensitive data exposure in cloud-init logs

Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing

is_closing_session() allows users to consume RAM in the Apport process

~/.config/apport/settings parsing is vulnerable to "billion laughs" attack

Accountsservice incorrectly drops privileges

PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.

In Ubuntu, gnome-control-center did not properly reflect SSH remote login status when the system was configured to use systemd socket activation for openssh-server. This could unknowingly leave the local machine exposed to remote SSH access contrary to expectation of the user.

Race Condition in Canonical Apport

shiftfs lock unbalance in Ubuntu-specific kernels