Package Management

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6574-1 Related CVEs: CVE-2023-39318 CVE-2023-39319 CVE-2023-39323 CVE-2023-39325 CVE-2023-39326 CVE-2023-44487 CVE-2023-45285 Upstream summary: Takeshi Kaneko discovered that Go did not properly handle comments and special tags in the script context of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6192-1 Related CVEs: CVE-2023-2430 CVE-2023-35788 https://launchpad.net/bugs/2023577 https://launchpad.net/bugs/2023220 Upstream summary: Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7904-1 Related CVEs: CVE-2025-59799 CVE-2025-59798 CVE-2024-56827 CVE-2025-48708 CVE-2024-29508 CVE-2025-27836 CVE-2025-27832 CVE-2025-27835  +12 more Upstream summary: Piotr Kajda discovered that Ghostscript incorrectly handled writing certain files. An attacker could possibly use […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7919-1 Related CVEs: CVE-2025-11495 CVE-2025-11081 CVE-2025-11083 CVE-2025-11412 CVE-2025-11082 CVE-2025-11413 CVE-2025-11414 CVE-2025-11494  +12 more Upstream summary: It was discovered that GNU binutils' dump_dwarf_section function could be manipulated to perform an out-of-bounds […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5742-1 Related CVEs: CVE-2017-9937 Upstream summary: It was discovered that JBIG-KIT incorrectly handled decoding certain large image files. If a user or automated system using JBIG-KIT were tricked into opening […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6517-1 Related CVEs: CVE-2022-48522 CVE-2023-47038 CVE-2023-31484 CVE-2020-16156 CVE-2020-10543 CVE-2020-10878 CVE-2020-12723 Upstream summary: It was discovered that Perl incorrectly handled printing certain warning messages. An attacker could possibly use this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6067-1 Related CVEs: CVE-2021-20267 CVE-2021-38598 CVE-2021-40085 CVE-2021-40797 CVE-2022-3277 Upstream summary: David Sinquin discovered that OpenStack Neutron incorrectly handled the default Open vSwitch firewall rules. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7714-1 Related CVEs: CVE-2023-34059 CVE-2014-4199 Upstream summary: Matthias Gerstner discovered that Open VM Tools incorrectly handled file descriptors when dropping privileges. A local attacker could possibly use this issue to […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7630-1 Related CVEs: CVE-2016-6347 CVE-2016-7050 CVE-2020-25633 CVE-2016-6348 CVE-2016-6345 CVE-2016-6346 CVE-2021-20289 CVE-2024-9622  +3 more Upstream summary: It was discovered that RESTEasy made insufficient use of random values in asynchronous jobs. An […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7708-1 Related CVEs: CVE-2025-50420 CVE-2025-52886 CVE-2022-27337 CVE-2025-43903 CVE-2025-32364 CVE-2025-32365 CVE-2024-56378 https://launchpad.net/bugs/2045027  +12 more Upstream summary: It was discovered that poppler incorrectly handled certain PDF files. An attacker could possibly use […]