IT, Cloud & DevOps Blog

Ubuntu 18.04 — exempi — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — exempi — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5483-1 Related CVEs: CVE-2018-12648 CVE-2021-36045 CVE-2021-36046 CVE-2021-36047 CVE-2021-36048 CVE-2021-36050 CVE-2021-36051 CVE-2021-36052  +12 more Upstream summary: It was discovered that Exempi incorrectly handled certain media files. If a user or automated […]

Read more
Ubuntu 24.04 — evolution-data-server — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 24.04

Ubuntu 24.04 — evolution-data-server — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8055-1 Related CVEs: CVE-2026-2604 Upstream summary: It was discovered that Evolution Data Server incorrectly handled removing local cache files. An attacker could possibly use this issue to cause Evolution Data […]

Read more
Ubuntu 22.04 — mbedtls — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — mbedtls — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8123-1 Related CVEs: CVE-2025-47917 CVE-2021-44732 CVE-2025-48965 CVE-2025-52497 CVE-2025-52496 CVE-2025-27810 CVE-2024-23775 Upstream summary: It was discovered that Mbed TLS incorrectly handled memory allocation failures. A remote attacker could possibly use this […]

Read more
Ubuntu 14.04 — klibc — multiple vulnerabilities (9 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — klibc — multiple vulnerabilities (9 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7959-1 Related CVEs: CVE-2016-9843 CVE-2016-9840 CVE-2016-9841 CVE-2018-25032 CVE-2022-37434 CVE-2021-31870 CVE-2021-31871 CVE-2021-31872  +1 more Upstream summary: It was discovered that zlib, vendored in klibc, did not properly handle integer arithmetic. An […]

Read more
Ubuntu 16.04 — jackson-databind — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — jackson-databind — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4813-1 Related CVEs: CVE-2018-11307 CVE-2018-12022 CVE-2018-12023 CVE-2018-14718 CVE-2018-14719 CVE-2018-14720 CVE-2018-14721 CVE-2018-19360  +12 more Upstream summary: It was discovered that Jackson Databind incorrectly handled deserialization. An attacker could possibly use this […]

Read more
Ubuntu 20.04 — linux-hwe-5.11 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — linux-hwe-5.11 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5219-1 Related CVEs: CVE-2021-4204 https://launchpad.net/bugs/1956585 CVE-2021-20321 CVE-2021-3760 CVE-2021-4002 CVE-2021-41864 CVE-2021-43056 CVE-2021-43267  +12 more Upstream summary: It was discovered that the eBPF implementation in the Linux kernel did not properly validate […]

Read more
Ubuntu 18.04 — evince — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — evince — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4024-1 Related CVEs: https://launchpad.net/bugs/1794848 https://launchpad.net/bugs/1788929 CVE-2019-11459 Upstream summary: As a security improvement, this update adjusts the AppArmor profile for the Evince thumbnailer to reduce access to the system and adjusts […]

Read more
Ubuntu 20.04 — rapidjson — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — rapidjson — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8189-1 Related CVEs: CVE-2024-39684 CVE-2024-38517 Upstream summary: It was discovered that RapidJSON did not properly protect against integer overflows in certain instances when parsing JSON text. A remote attacker could […]

Read more
Ubuntu 22.04 — h2o — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — h2o — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7892-1 Related CVEs: CVE-2023-44487 Upstream summary: It was discovered that H2O exhibited poor server resource management in its HTTP/2 protocol. An attacker could possibly use this issue to cause H2O […]

Read more
Ubuntu 20.04 — zsh — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — zsh — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5325-1 Related CVEs: CVE-2019-20044 CVE-2021-45444 Upstream summary: Sam Foxman discovered that Zsh incorrectly handled certain inputs. An attacker could possibly use this issue to regain dropped privileges. (CVE-2019-20044) It was […]

Read more
CHAT