Package Management

Ubuntu 20.04 — heimdal — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — heimdal — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5849-1 Related CVEs: CVE-2022-45142 CVE-2021-44758 CVE-2022-3437 CVE-2022-42898 CVE-2022-44640 CVE-2022-41916 CVE-2018-16860 CVE-2019-12098  +2 more Upstream summary: Helmut Grohne discovered that Heimdal GSSAPI incorrectly handled logical conditions that are related to memory […]

Read more
Ubuntu 20.04 — pulseaudio — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — pulseaudio — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4640-1 Related CVEs: CVE-2020-16123 CVE-2020-11931 https://launchpad.net/bugs/1877102 Upstream summary: James Henstridge discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle snap client connections. An attacker could possibly use this to […]

Read more
Ubuntu 22.04 — munge — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — munge — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8040-1 Related CVEs: CVE-2026-25506 Upstream summary: Titouan Lazard discovered that MUNGE contained an exploitable buffer overflow in munged (the MUNGE authentication daemon). A local attacker could possibly use this issue […]

Read more
Ubuntu 14.04 — graphite2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 14.04

Ubuntu 14.04 — graphite2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-3398-1 Related CVEs: CVE-2017-7771 CVE-2017-7772 CVE-2017-7773 CVE-2017-7774 CVE-2017-7775 CVE-2017-7776 CVE-2017-7777 CVE-2017-7778  +12 more Upstream summary: Holger Fuhrmannek and Tyson Smith discovered that graphite2 incorrectly handled certain malformed fonts. If a […]

Read more
Ubuntu 20.04 — netqmail — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — netqmail — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4556-1 Related CVEs: CVE-2005-1513 CVE-2005-1514 CVE-2005-1515 CVE-2020-3811 CVE-2020-3812 Upstream summary: It was discovered that netqmail did not properly handle certain input. Both remote and local attackers could use this vulnerability […]

Read more
Ubuntu 16.04 — openvswitch — multiple vulnerabilities (11 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — openvswitch — multiple vulnerabilities (11 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5698-2 Related CVEs: CVE-2022-32166 CVE-2020-35498 CVE-2015-8011 CVE-2020-27827 CVE-2018-17204 CVE-2018-17205 CVE-2018-17206 CVE-2017-9214  +3 more Upstream summary: USN-5698-1 fixed a vulnerability in Open. This update provides the corresponding update for Ubuntu 16.04 […]

Read more
Ubuntu 20.04 — nvidia-graphics-drivers-440 — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 20.04

Ubuntu 20.04 — nvidia-graphics-drivers-440 — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4404-1 Related CVEs: CVE-2020-5963 CVE-2020-5967 CVE-2020-5973 Upstream summary: Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker could […]

Read more
Ubuntu 18.04 — ppp — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — ppp — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-4451-1 Related CVEs: CVE-2020-15704 CVE-2020-8597 CVE-2018-11574 Upstream summary: Thomas Chauchefoin working with Trend Micro´s Zero Day Initiative, discovered that ppp incorrectly handled module loading. A local attacker could use this […]

Read more
Ubuntu 16.04 — libjpeg-turbo — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 16.04

Ubuntu 16.04 — libjpeg-turbo — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5553-1 Related CVEs: CVE-2018-11813 CVE-2018-14498 CVE-2020-14152 CVE-2020-17541 CVE-2020-13790 CVE-2018-19664 CVE-2018-20330 CVE-2019-2201  +7 more Upstream summary: It was discovered that libjpeg-turbo was not properly handling EOF characters, which could lead to […]

Read more
Ubuntu 18.04 — lrzip — multiple vulnerabilities (15 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 18.04

Ubuntu 18.04 — lrzip — multiple vulnerabilities (15 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5840-1 Related CVEs: CVE-2018-5786 CVE-2020-25467 CVE-2021-27345 CVE-2021-27347 CVE-2022-26291 CVE-2022-28044 CVE-2017-8844 CVE-2017-8846  +7 more Upstream summary: It was discovered that Long Range ZIP incorrectly handled pointers. If a user or an […]

Read more
CHAT