IT, Cloud & DevOps Blog

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7826-2 Related CVEs: CVE-2025-9640 CVE-2025-10230 https://launchpad.net/bugs/2115450 CVE-2022-3437 CVE-2022-42898 CVE-2022-45141 CVE-2023-34966 CVE-2021-44142  +12 more Upstream summary: USN-7826-1 fixed vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 14.04 LTS, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5947-1 Related CVEs: CVE-2019-9942 CVE-2022-23614 CVE-2022-39261 Upstream summary: Fabien Potencier discovered that Twig was not properly enforcing sandbox policies when dealing with objects automatically cast to strings by PHP. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7476-1 Related CVEs: CVE-2021-41125 CVE-2022-0577 CVE-2024-1892 CVE-2024-1968 CVE-2024-3572 CVE-2024-3574 Upstream summary: It was discovered that Scrapy improperly exposed HTTP authentication credentials to request targets, including during redirects. An attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7545-4 Related CVEs: https://launchpad.net/bugs/2117236 https://launchpad.net/bugs/2112466 https://launchpad.net/bugs/2112272 CVE-2025-5054 CVE-2023-1326 https://launchpad.net/bugs/2016023 CVE-2021-3899 CVE-2022-1242  +12 more Upstream summary: USN-7545-1 fixed vulnerabilities in Apport. The update incorrectly handled logging if a crashing process was […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6488-1 Related CVEs: CVE-2023-41913 CVE-2022-40617 CVE-2021-45079 CVE-2021-41990 CVE-2021-41991 Upstream summary: Florian Picca discovered that strongSwan incorrectly handled certain DH public values. A remote attacker could use this issue to cause […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7648-3 Related CVEs: CVE-2025-1735 https://launchpad.net/bugs/2121643 CVE-2025-1220 CVE-2025-6491 CVE-2025-1734 CVE-2025-1861 CVE-2025-1736 CVE-2025-1217  +12 more Upstream summary: USN-7648-2 fixed vulnerabilities in PHP. The patch for CVE-2025-1735 caused a regression in php7.0, php7.2 […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5718-1 Related CVEs: CVE-2022-44638 Upstream summary: Maddie Stone discovered that pixman incorrectly handled certain memory operations. A remote attacker could use this issue to cause pixman to crash, resulting in […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7894-2 Related CVEs: https://launchpad.net/bugs/2133157 CVE-2024-9143 CVE-2024-4741 CVE-2023-0464 CVE-2024-6119 CVE-2024-13176 CVE-2023-2650 CVE-2024-0727  +12 more Upstream summary: USN-7894-1 fixed vulnerabilities in EDK II. The update introduced a regression in the UEFI network […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6908-1 Related CVEs: CVE-2019-0221 CVE-2020-9484 CVE-2021-25329 CVE-2018-11784 CVE-2018-1336 CVE-2018-8034 CVE-2017-12616 CVE-2017-12617  +12 more Upstream summary: It was discovered that the Tomcat SSI printenv command echoed user provided data without escaping […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7870-1 Related CVEs: CVE-2024-24258 CVE-2024-24259 Upstream summary: It was discovered that Freeglut incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a […]