Package Management

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6912-1 Related CVEs: CVE-2024-6714 https://bugs.launchpad.net/ubuntu/+source/provd/+bug/2071574 Upstream summary: James Henstridge discovered that provd incorrectly handled environment variables. A local attacker could possibly use this issue to run arbitrary programs and escalate […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7117-3 Related CVEs: https://launchpad.net/bugs/2091096 https://launchpad.net/bugs/2089193 CVE-2024-10224 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 CVE-2022-30688 Upstream summary: USN-7117-1 fixed vulnerabilities in needrestart. The update introduced a regression in needrestart. This update fixes the problem […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7273-1 Related CVEs: CVE-2021-4156 CVE-2024-50612 CVE-2022-33065 CVE-2021-3246 Upstream summary: It was discovered that libsndfile incorrectly handled memory when executing its FLAC codec. If a user or automated system were tricked […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6758-1 Related CVEs: CVE-2022-46175 Upstream summary: It was discovered that the JSON5 parse method incorrectly handled the parsing of keys named \_\_proto\_\_. An attacker could possibly use this issue to […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8223-1 Related CVEs: CVE-2024-38357 CVE-2024-38356 CVE-2024-42008 CVE-2024-42010 CVE-2026-26079 CVE-2026-25916 CVE-2019-15237 CVE-2017-8114  +12 more Upstream summary: It was discovered that Roundcube Webmail mishandled Punycode xn-- domain names. An attacker could possibly […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8154-1 Related CVEs: CVE-2026-4277 CVE-2026-33034 CVE-2026-33033 CVE-2026-3902 CVE-2026-4292 CVE-2026-1312 CVE-2025-13473 CVE-2026-1287  +12 more Upstream summary: Seokchan Yoon discovered that Django incorrectly handled copying memory when parsing multipart uploads with excessive […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6746-2 Related CVEs: CVE-2024-24786 Upstream summary: USN-6746-1 fixed vulnerabilities in Google Guest Agent and Google OS Config Agent. This update provides the corresponding update for Ubuntu 24.04 LTS. Original advisory […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8223-1 Related CVEs: CVE-2024-38357 CVE-2024-38356 CVE-2024-42008 CVE-2024-42010 CVE-2026-26079 CVE-2026-25916 CVE-2019-15237 CVE-2025-68461  +12 more Upstream summary: It was discovered that Roundcube Webmail mishandled Punycode xn-- domain names. An attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6988-2 Related CVEs: CVE-2024-41671 CVE-2024-41810 CVE-2022-39348 CVE-2023-46137 CVE-2022-21712 CVE-2022-21716 Upstream summary: USN-6988-1 fixed CVE-2024-41671 in Twisted. The USN incorrectly stated that previous releases were unaffected. This update provides the equivalent […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8196-1 Related CVEs: CVE-2026-35329 CVE-2026-35331 CVE-2026-35330 CVE-2026-35332 CVE-2026-35328 CVE-2026-35333 CVE-2026-35334 CVE-2026-25075  +4 more Upstream summary: Haruto Kimura discovered that strongSwan incorrectly handled the supported_versions extension in TLS. A remote attacker […]