IT, Cloud & DevOps Blog

Ubuntu 18.04 — libzip — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — libzip — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4811-1 Related CVEs: CVE-2017-14107 Upstream summary: It was discovered that libzip mishandled certain malformed ZIP archives. A remote attacker could use this vulnerability to cause a denial of service. Table […]

Read more
Ubuntu 22.04 — php-league-commonmark — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — php-league-commonmark — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8194-1 Related CVEs: CVE-2026-33347 CVE-2025-46734 CVE-2026-30838 Upstream summary: It was discovered that league/commonmark did not properly restrict unsafe attributes when the Attributes extension was enabled. An attacker could possibly use […]

Read more
Ubuntu 16.04 — libjpeg-turbo — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libjpeg-turbo — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5553-1 Related CVEs: CVE-2018-11813 CVE-2018-14498 CVE-2020-14152 CVE-2020-17541 CVE-2020-13790 CVE-2018-19664 CVE-2018-20330 CVE-2019-2201  +7 more Upstream summary: It was discovered that libjpeg-turbo was not properly handling EOF characters, which could lead to […]

Read more
Ubuntu 14.04 — linux-lts-vivid — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — linux-lts-vivid — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3053-1 Related CVEs: CVE-2016-1237 CVE-2016-4470 CVE-2016-4794 CVE-2016-5243 CVE-2016-3070 CVE-2016-4482 CVE-2016-4569 CVE-2016-4578  +12 more Upstream summary: A missing permission check when settings ACLs was discovered in nfsd. A local user could […]

Read more
Ubuntu 20.04 — linux-gcp-5.13 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — linux-gcp-5.13 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5485-1 Related CVEs: CVE-2022-21123 CVE-2022-21125 CVE-2022-21166 CVE-2022-1158 CVE-2022-1966 CVE-2022-1972 CVE-2022-21499 CVE-2022-24958  +12 more Upstream summary: It was discovered that some Intel processors did not completely perform cleanup actions on multi-core […]

Read more
Ubuntu 18.04 — whoopsie — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — whoopsie — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4450-1 Related CVEs: CVE-2020-11937 CVE-2020-12135 CVE-2020-15570 https://launchpad.net/bugs/1850608 CVE-2019-11484 CVE-2019-11476 Upstream summary: Seong-Joong Kim discovered that Whoopsie incorrectly handled memory. A local attacker could use this issue to cause Whoopsie to […]

Read more
Ubuntu 24.04 — systemd — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 24.04

Ubuntu 24.04 — systemd — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8119-1 Related CVEs: CVE-2026-29111 CVE-2025-4598 Upstream summary: It was discovered that systemd incorrectly handled certain cgroup paths. A local attacker could possibly use this issue to cause systemd to crash, […]

Read more
Ubuntu 20.04 — highlight.js — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — highlight.js — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8276-1 Related CVEs: CVE-2020-26237 Upstream summary: It was discovered that Highlight.js used plain JavaScript objects for internal language name lookups, making them susceptible to prototype pollution attacks. An attacker could […]

Read more
Ubuntu 14.04 — python-rsa — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — python-rsa — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4478-1 Related CVEs: CVE-2020-13757 Upstream summary: It was discovered that Python-RSA incorrectly handled certain ciphertexts. An attacker could possibly use this issue to obtain sensitive information. Table of contents Symptom […]

Read more
Ubuntu 18.04 — mplayer — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — mplayer — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5895-1 Related CVEs: CVE-2022-38850 CVE-2022-38851 CVE-2022-38855 CVE-2022-38858 CVE-2022-38860 CVE-2022-38861 CVE-2022-38863 CVE-2022-38864  +2 more Upstream summary: It was discovered that MPlayer could be made to divide by zero when processing certain […]

Read more
CHAT