Ubuntu 22.04

Ubuntu 22.04 — openssh — multiple vulnerabilities (18 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — openssh — multiple vulnerabilities (18 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 8 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8222-1 Related CVEs: CVE-2026-35388 CVE-2026-35385 CVE-2026-35387 CVE-2026-35414 CVE-2026-35386 CVE-2026-3497 CVE-2025-61984 CVE-2025-61985  +10 more Upstream summary: Christos Papakonstantinou discovered that the OpenSSH scp tool incorrectly handled the legacy scp protocol (-O) […]

Read more
Ubuntu 22.04 — linux-oracle — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — linux-oracle — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 7 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8279-1 Related CVEs: CVE-2024-35862 CVE-2024-50060 CVE-2026-23274 CVE-2026-23351 CVE-2026-31419 CVE-2026-31431 CVE-2026-31504 CVE-2026-31533  +12 more Upstream summary: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic […]

Read more
Ubuntu 22.04 — libsoup2.4 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — libsoup2.4 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 6 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7643-1 Related CVEs: CVE-2025-4969 CVE-2025-32914 CVE-2025-4945 CVE-2025-32907 CVE-2025-4948 CVE-2025-4476 CVE-2025-32908 CVE-2025-32906  +12 more Upstream summary: Jan Różański discovered that libsoup incorrectly handled range headers in an HTTP request. An attacker […]

Read more
Ubuntu 22.04 — abseil — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — abseil — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 4 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7505-1 Related CVEs: CVE-2025-0838 Upstream summary: It was discovered that Abseil incorrectly handled memory with the upper bound of the size argument. An attacker could possibly use this issue to […]

Read more
Ubuntu 22.04 — freerdp2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — freerdp2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 4 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8042-1 Related CVEs: CVE-2026-24675 CVE-2026-24682 CVE-2026-24679 CVE-2026-24681 CVE-2026-24683 CVE-2026-24684 CVE-2026-24680 CVE-2026-24491  +12 more Upstream summary: It was discovered that FreeRDP incorrectly handled memory under certain circumstances, which could lead to […]

Read more
Ubuntu 22.04 — libwebsockets — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — libwebsockets — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 3 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8024-1 Related CVEs: CVE-2025-11678 CVE-2025-11677 Upstream summary: Raffaele Bova discovered that Libwebsockets incorrectly handled memory when the upgrade header is not valid in the WebSocket server. An attacker could possibly […]

Read more
Ubuntu 22.04 — alsa-lib — vulnerability — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — alsa-lib — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 2 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8044-1 Related CVEs: CVE-2026-25068 Upstream summary: It was discovered that alsa-lib incorrectly handled the topology mixer control decoder. A local attacker could use a specially crafted topology file to cause […]

Read more
Ubuntu 22.04 — pyjwt — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — pyjwt — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 27 February 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8133-1 Related CVEs: CVE-2026-32597 https://launchpad.net/bugs/1986487 CVE-2022-29217 Upstream summary: It was discovered that PyJWT did not validate the critical header parameter, contrary to the RFC specification expectations. A remote attacker could […]

Read more
Ubuntu 22.04 — python-urllib3 — multiple vulnerabilities (10 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — python-urllib3 — multiple vulnerabilities (10 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 February 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7955-2 Related CVEs: CVE-2026-21441 https://bugs.launchpad.net/bugs/2138420 CVE-2025-66418 CVE-2025-66471 CVE-2025-50182 CVE-2025-50181 CVE-2024-37891 CVE-2018-25091  +2 more Upstream summary: USN-7955-1 fixed vulnerabilities in urllib3. The update introduced a regression in response streaming on Ubuntu […]

Read more
Ubuntu 22.04 — linux-aws-fips — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — linux-aws-fips — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 February 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8279-1 Related CVEs: CVE-2024-35862 CVE-2024-50060 CVE-2026-23274 CVE-2026-23351 CVE-2026-31419 CVE-2026-31431 CVE-2026-31504 CVE-2026-31533  +12 more Upstream summary: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic […]

Read more
CHAT