Ubuntu 22.04

Ubuntu 22.04 — gvfs — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — gvfs — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8114-1 Related CVEs: CVE-2026-28295 CVE-2026-28296 Upstream summary: It was discovered that the GVfs FTP backend incorrectly handled IP addresses and ports returned by passive mode responses. A malicious remote server […]

Read more
Ubuntu 22.04 — pyasn1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — pyasn1 — multiple vulnerabilities (2 CVEs) — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8129-1 Related CVEs: CVE-2026-30922 CVE-2026-23490 Upstream summary: It was discovered that pyasn1 incorrectly handled recursion when decoding ASN.1 data. An attacker could use this issue to cause pyasn1 to consume […]

Read more
Ubuntu 22.04 — linux-ibm — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — linux-ibm — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 27 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8279-1 Related CVEs: CVE-2024-35862 CVE-2024-50060 CVE-2026-23274 CVE-2026-23351 CVE-2026-31419 CVE-2026-31431 CVE-2026-31504 CVE-2026-31533  +12 more Upstream summary: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic […]

Read more
Ubuntu 22.04 — unbound — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — unbound — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 26 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8282-1 Related CVEs: CVE-2026-40622 CVE-2026-33278 CVE-2026-42923 CVE-2026-44390 CVE-2026-42944 CVE-2026-41292 CVE-2026-42959 CVE-2026-42960  +12 more Upstream summary: Andrew Griffiths discovered that Unbound did not properly handle certain DNSCrypt packets. A remote attacker […]

Read more
Ubuntu 22.04 — apache2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — apache2 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 23 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8239-1 Related CVEs: CVE-2026-33007 CVE-2026-34059 CVE-2026-23918 CVE-2026-33523 CVE-2026-24072 CVE-2026-34032 CVE-2026-28780 CVE-2026-29168  +12 more Upstream summary: Bartlomiej Dmitruk and Stanislaw Strzalkowski discovered that Apache HTTP Server incorrectly handled certain memory operations […]

Read more
Ubuntu 22.04 — python-cryptography — multiple vulnerabilities (6 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — python-cryptography — multiple vulnerabilities (6 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8087-2 Related CVEs: https://launchpad.net/bugs/2144373 CVE-2026-26007 CVE-2023-50782 CVE-2024-26130 CVE-2023-23931 CVE-2023-49083 Upstream summary: USN-8087-1 fixed a vulnerability in python-cryptography. The update caused a regression when using ECC algorithms with certain software. This […]

Read more
Ubuntu 22.04 — libowasp-esapi-java — multiple vulnerabilities (3 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — libowasp-esapi-java — multiple vulnerabilities (3 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 22 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8181-1 Related CVEs: CVE-2022-23457 CVE-2022-24891 CVE-2025-5878 Upstream summary: Jaroslav Lobačevski discovered that ESAPI incorrectly validated directory paths during path verification. An attacker could possibly use this issue to bypass directory […]

Read more
Ubuntu 22.04 — haproxy — multiple vulnerabilities (7 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — haproxy — multiple vulnerabilities (7 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 21 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7805-1 Related CVEs: CVE-2025-11230 CVE-2025-32464 CVE-2023-45539 CVE-2023-40225 CVE-2023-0836 CVE-2023-25725 CVE-2023-0056 Upstream summary: Oula Kivalo discovered that HAProxy incorrectly handled parsing certain json numbers. A remote attacker could possibly use this […]

Read more
Ubuntu 22.04 — linux-azure-fips — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — linux-azure-fips — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 19 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8255-1 Related CVEs: CVE-2023-2640 CVE-2023-32629 CVE-2026-23112 CVE-2026-23273 CVE-2023-53421 CVE-2023-53520 CVE-2023-53662 CVE-2023-54207  +12 more Upstream summary: Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux […]

Read more
Ubuntu 22.04 — nghttp2 — multiple vulnerabilities (5 CVEs) — patch and remediation guide — diagnosis and fix on Ubuntu 22.04

Ubuntu 22.04 — nghttp2 — multiple vulnerabilities (5 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8233-1 Related CVEs: CVE-2026-27135 CVE-2019-9511 CVE-2019-9513 CVE-2023-44487 CVE-2024-28182 Upstream summary: Andrew MacPherson discovered that nghttp2 did not properly validate internal state when the session termination API was called. A remote […]

Read more
CHAT