Ubuntu 24.04

🟢 Low   ⏱ 5–15 min  Last verified: 12 May 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7055-1 Related CVEs: CVE-2024-3596 Upstream summary: Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc Stevens, and Adam Suhl discovered that FreeRADIUS incorrectly authenticated certain responses. An attacker able […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 May 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7031-1 Related CVEs: CVE-2024-45614 Upstream summary: It was discovered that Puma incorrectly handled parsing certain headers. A remote attacker could possibly use this issue to overwrite header values set by […]

🟢 Low   ⏱ 5–15 min  Last verified: 6 May 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7697-1 Related CVEs: CVE-2025-54409 CVE-2025-54389 Upstream summary: Rajesh Pangare discovered that AIDE incorrectly handled filenames. A local attacker could possibly use this issue to bypass the detection of malicious files. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 5 May 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7108-1 Related CVEs: CVE-2023-46445 CVE-2023-46446 CVE-2023-48795 Upstream summary: Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that AsyncSSH did not properly handle the extension info message. An attacker able to […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6855-1 Related CVEs: CVE-2024-36600 Upstream summary: Mansour Gashasbi discovered that libcdio incorrectly handled certain memory operations when parsing an ISO file, leading to a buffer overflow vulnerability. An attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 28 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8245-1 Related CVEs: CVE-2024-36347 CVE-2025-68351 CVE-2025-68353 CVE-2025-68365 CVE-2025-68368 CVE-2025-68725 CVE-2025-68736 CVE-2025-68745  +12 more Upstream summary: Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7603-1 Related CVEs: CVE-2024-35241 CVE-2024-35242 CVE-2024-24821 CVE-2023-43655 CVE-2022-24828 Upstream summary: Thomas Chauchefoin discovered that Composer did not correctly handle certain arguments. An attacker could possibly use this issue to execute […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7377-1 Related CVEs: CVE-2024-35226 Upstream summary: It was discovered that Smarty did not properly sanitize template file names. An attacker could possibly use this issue to cause Smarty to crash, […]

🟠 High   ⏱ 15–60 min  Last verified: 22 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7610-1 Related CVEs: CVE-2025-37798 CVE-2025-37890 CVE-2025-37932 CVE-2025-37997 CVE-2025-38000 CVE-2025-38001 CVE-2023-53034 CVE-2024-53222  +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]