Canonical Ubuntu Linux 21.04

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.

Linux kernel io_uring PROVIDE_BUFFERS MAX_RW_COUNT bypass

A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.

Linux kernel eBPF bitwise ops ALU32 bounds tracking

Linux kernel eBPF RINGBUF map oversized allocation

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata (such as XFS extended attributes or tmpfs ACLs), because of a heap-based buffer overflow.

Free of static data in accountsservice

A flaw was found in python. An improperly handled HTTP response in the HTTP client code of python may allow a remote attacker, who controls the HTTP server, to make the client script enter an infinite loop, consuming CPU time. The highest threat from this vulnerability is to system availability.

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Clam AntiVirus (ClamAV) Denial of Service Vulnerability

In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.

apport read_file() function could follow maliciously constructed symbolic links

apport read_file() function could follow maliciously constructed symbolic links

apport read_file() function could follow maliciously constructed symbolic links

apport read_file() function could follow maliciously constructed symbolic links

apport read_file() function could follow maliciously constructed symbolic links

apport read_file() function could follow maliciously constructed symbolic links

apport read_file() function could follow maliciously constructed symbolic links

apport read_file() function could follow maliciously constructed symbolic links

apport read_file() function could follow maliciously constructed symbolic links

Apport info disclosure via path traversal bug in read_file

Apport file permission bypass through emacs byte compilation errors

A flaw was found in the way samba implemented SMB1 authentication. An attacker could use this flaw to retrieve the plaintext password sent over the wire even if Kerberos authentication was required.