Ubuntu 18.04

🟡 Medium   ⏱ 10–30 min  Last verified: 21 February 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7677-1 Related CVEs: CVE-2024-6174 CVE-2024-11584 CVE-2023-1786 https://bugs.launchpad.net/cloud-init/+bug/2013967 CVE-2022-2084 Upstream summary: Harry Sintonen discovered that the hotplugd socket in cloud-init was world writable. An attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 February 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7844-1 Related CVEs: CVE-2025-11683 Upstream summary: It was discovered that YAML::Syck did not properly handle parsing YAML files. An attacker could possibly use this issue to expose sensitive information. Table […]

🟠 High   ⏱ 15–60 min  Last verified: 15 February 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8169-1 Related CVEs: CVE-2025-49844 CVE-2022-24834 CVE-2024-31449 CVE-2024-31228 CVE-2024-46981 CVE-2024-51741 CVE-2022-35977 CVE-2022-36021  +12 more Upstream summary: It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 13 February 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7551-1 Related CVEs: CVE-2025-5283 CVE-2024-5197 CVE-2023-44488 CVE-2023-5217 CVE-2017-13194 CVE-2019-2126 CVE-2019-9232 CVE-2019-9325  +2 more Upstream summary: It was discovered that libvpx did not properly manage memory. An attacker could possibly use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 February 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6676-1 Related CVEs: CVE-2024-25629 CVE-2023-31130 CVE-2023-32067 CVE-2022-4904 CVE-2021-3672 Upstream summary: Vojtěch Vobr discovered that c-ares incorrectly handled user input from local configuration files. An attacker could possibly use this issue […]

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7945-1 Related CVEs: CVE-2025-7424 CVE-2024-55549 CVE-2025-24855 CVE-2023-40403 CVE-2019-5815 CVE-2021-30560 CVE-2019-13117 CVE-2019-13118  +2 more Upstream summary: Ivan Fratric discovered that Libxslt was vulnerable to type confusion when performing XML transformations. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 January 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7352-2 Related CVEs: CVE-2022-27406 CVE-2025-27363 CVE-2022-27404 CVE-2022-27405 CVE-2022-31782 CVE-2020-15999 Upstream summary: USN-7352-1 fixed a vulnerability in FreeType. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 January 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7916-1 Related CVEs: CVE-2025-6966 https://launchpad.net/bugs/1907676 CVE-2020-27351 https://launchpad.net/bugs/1860606 CVE-2019-15795 CVE-2019-15796 Upstream summary: Julian Andres Klode discovered that python-apt incorrectly handled deb822 configuration files. An attacker could use this issue to cause […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 January 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7804-2 Related CVEs: CVE-2025-59362 CVE-2025-62168 Upstream summary: USN-7804-1 fixed a vulnerability in Squid. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. […]

🟠 High   ⏱ 15–60 min  Last verified: 22 January 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8068-1 Related CVEs: CVE-2025-31648 CVE-2025-20053 CVE-2025-22839 CVE-2025-22840 CVE-2025-20109 CVE-2025-24305 CVE-2025-26403 CVE-2025-21090  +12 more Upstream summary: Sergiu Ghetie discovered that some Intel® processors did not properly handle values in the microcode […]