Ubuntu 24.04

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8232-1 Related CVEs: CVE-2026-6907 CVE-2026-5766 CVE-2026-35192 CVE-2026-4277 CVE-2026-33034 CVE-2026-33033 CVE-2026-3902 CVE-2026-4292  +12 more Upstream summary: It was discovered that Django did not vary cached response headers on cookies when sessions […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8175-1 Related CVEs: CVE-2026-5107 CVE-2025-61103 CVE-2025-61099 CVE-2025-61106 CVE-2025-61100 CVE-2025-61104 CVE-2025-61102 CVE-2025-61101  +8 more Upstream summary: It was discovered that FRR did not correctly handle certain network requests. A remote attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7919-1 Related CVEs: CVE-2025-11495 CVE-2025-11081 CVE-2025-11083 CVE-2025-11412 CVE-2025-11082 CVE-2025-11413 CVE-2025-11414 CVE-2025-11494  +12 more Upstream summary: It was discovered that GNU binutils' dump_dwarf_section function could be manipulated to perform an out-of-bounds […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7834-1 Related CVEs: CVE-2024-36350 CVE-2024-36357 CVE-2025-38084 CVE-2025-38085 CVE-2025-38086 CVE-2025-38087 CVE-2025-38089 CVE-2025-38090  +12 more Upstream summary: Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7626-1 Related CVEs: CVE-2025-48385 CVE-2025-46835 CVE-2025-27614 CVE-2025-48386 CVE-2025-27613 CVE-2025-48384 CVE-2024-50349 CVE-2024-52006  +5 more Upstream summary: Avi Halachmi discovered that Git incorrectly managed file modification constraints with Gitk. An attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7260-1 Related CVEs: CVE-2023-37476 CVE-2023-41886 CVE-2023-41887 CVE-2024-23833 CVE-2024-47878 CVE-2024-47879 CVE-2024-47880 CVE-2024-47881  +2 more Upstream summary: It was discovered that OpenRefine did not properly handle opening tar files. If a user […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8248-2 Related CVEs: CVE-2021-33450 CVE-2021-33452 https://launchpad.net/bugs/2151861 CVE-2023-31722 Upstream summary: USN-8248-1 fixed vulnerabilities in NASM. Unfortunately the update introduced a regression which could cause NASM to crash. This update fixes the […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8202-1 Related CVEs: CVE-2026-39956 CVE-2026-33947 CVE-2026-39979 CVE-2026-33948 CVE-2026-40164 CVE-2026-32316 CVE-2025-48060 CVE-2024-23337  +1 more Upstream summary: It was discovered that jq did not correctly handle certain string concatenations. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8157-1 Related CVEs: CVE-2026-33526 CVE-2026-33515 CVE-2026-32748 CVE-2025-62168 CVE-2025-59362 CVE-2024-37894 Upstream summary: It was discovered that Squid incorrectly handled certain ICP traffic. In environments where ICP support is enabled, a remote […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8088-1 Related CVEs: CVE-2025-21613 CVE-2023-49569 CVE-2023-49568 CVE-2026-25934 CVE-2025-21614 Upstream summary: Ionut Lalu discovered that go-git incorrectly handled certain specially crafted Git server responses. An attacker could possibly use this issue […]