Ubuntu 20.04

🟡 Medium   ⏱ 10–30 min  Last verified: 26 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8181-1 Related CVEs: CVE-2022-23457 CVE-2022-24891 CVE-2025-5878 Upstream summary: Jaroslav Lobačevski discovered that ESAPI incorrectly validated directory paths during path verification. An attacker could possibly use this issue to bypass directory […]

🟠 High   ⏱ 15–60 min  Last verified: 26 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8263-1 Related CVEs: CVE-2026-25796 CVE-2026-25797 CVE-2026-24484 CVE-2026-25637 CVE-2026-25576 CVE-2026-25798 CVE-2026-24481 CVE-2026-25898  +12 more Upstream summary: It was discovered that ImageMagick incorrectly handled certain malformed image files in certain instances. If […]

🟠 High   ⏱ 15–60 min  Last verified: 24 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8291-2 Related CVEs: CVE-2024-35862 CVE-2024-50060 CVE-2026-23274 CVE-2026-23351 CVE-2023-2640 CVE-2023-32629 CVE-2026-23112 CVE-2026-23273  +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]

🟠 High   ⏱ 15–60 min  Last verified: 23 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8279-1 Related CVEs: CVE-2024-35862 CVE-2024-50060 CVE-2026-23274 CVE-2026-23351 CVE-2026-31419 CVE-2026-31431 CVE-2026-31504 CVE-2026-31533  +12 more Upstream summary: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7778-1 Related CVEs: CVE-2025-9288 Upstream summary: Nikita Skovoroda discovered that sha.js did not properly handle certain inputs. An attacker could possibly use this issue to manipulate the internal state of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7409-1 Related CVEs: CVE-2025-25291 CVE-2025-25292 CVE-2025-25293 CVE-2016-5697 CVE-2017-11428 CVE-2024-45409 Upstream summary: It was discovered that ruby-saml did not correctly handle XML parsing. An attacker could possibly use this issue to […]

🟠 High   ⏱ 15–60 min  Last verified: 13 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8018-2 Related CVEs: CVE-2025-15367 CVE-2025-15366 CVE-2026-0865 https://bugs.launchpad.net/bugs/2143706 CVE-2025-15282 CVE-2026-0672 CVE-2025-13837 CVE-2025-11468  +12 more Upstream summary: USN-8018-1 fixed vulnerabilities in python3. That update introduced regressions. The patches for CVE-2025-15366 and CVE-2025-15367 […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8234-1 Related CVEs: CVE-2026-41205 CVE-2022-40023 Upstream summary: It was discovered that Mako incorrectly handled URIs with double-slash prefixes in TemplateLookup. A remote attacker could possibly use this issue to obtain […]

🟠 High   ⏱ 15–60 min  Last verified: 8 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8155-2 Related CVEs: CVE-2026-28388 CVE-2026-28389 CVE-2026-28390 CVE-2026-28387 CVE-2025-68160 CVE-2025-69420 CVE-2026-22796 CVE-2025-69421  +12 more Upstream summary: USN-8155-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding updates for CVE-2026-28387 for openssl […]

🟡 Medium   ⏱ 10–30 min  Last verified: 1 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8089-2 Related CVEs: CVE-2025-22872 CVE-2021-33194 CVE-2025-58190 CVE-2022-41723 CVE-2022-27664 CVE-2025-47911 CVE-2023-3978 CVE-2024-45338 Upstream summary: USN-8089-1 fixed vulnerabilities in Go Networking. This update provides the corresponding update to code vendored in golang-golang-x-net-dev. […]