Ubuntu 20.04

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6275-1 Related CVEs: CVE-2023-38497 Upstream summary: Addison Crump discovered that Cargo incorrectly set file permissions on UNIX-like systems when extracting crate archives. If the crate would contain files writable by […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6488-1 Related CVEs: CVE-2023-41913 CVE-2022-40617 CVE-2021-45079 CVE-2021-41990 CVE-2021-41991 Upstream summary: Florian Picca discovered that strongSwan incorrectly handled certain DH public values. A remote attacker could use this issue to cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6398-1 Related CVEs: CVE-2022-26505 CVE-2023-33476 CVE-2020-12695 CVE-2020-28926 Upstream summary: It was discovered that ReadyMedia was vulnerable to DNS rebinding attacks. A remote attacker could possibly use this issue to trick […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6148-1 Related CVEs: CVE-2023-25076 Upstream summary: It was discovered that SNI Proxy did not properly handle wildcard backend hosts. An attacker could possibly use this issue to cause a buffer […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7469-3 Related CVEs: CVE-2023-44487 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 CVE-2023-23919 CVE-2023-23920 CVE-2023-2650 CVE-2022-32212  +12 more Upstream summary: USN-7469-1 fixed a vulnerability in Apache Traffic Server. This update provides the corresponding updates for […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5998-1 Related CVEs: CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 CVE-2019-17571 CVE-2021-4104 Upstream summary: It was discovered that the SocketServer component of Apache Log4j 1.2 incorrectly handled deserialization. An attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7226-1 Related CVEs: CVE-2022-46169 CVE-2024-25641 CVE-2024-29894 CVE-2024-31443 CVE-2024-31444 CVE-2024-31445 CVE-2024-31458 CVE-2024-31459  +7 more Upstream summary: It was discovered that Cacti did not properly sanitize the 'poller_id' parameter in the "remote_agent.php" […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5847-1 Related CVEs: CVE-2020-7729 CVE-2022-0436 CVE-2022-1537 Upstream summary: It was discovered that Grunt was not properly loading YAML files before parsing them. An attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-5870-1 Related CVEs: CVE-2022-25147 Upstream summary: Ronald Crane discovered that APR-util did not properly handled memory when encoding or decoding certain input data. An attacker could possibly use this issue […]