Ubuntu 24.04

🟡 Medium   ⏱ 10–30 min  Last verified: 7 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7586-1 Related CVEs: CVE-2024-34703 CVE-2024-39312 CVE-2024-34702 CVE-2024-50383 CVE-2024-50382 Upstream summary: It was discovered that Botan could have compiler dependent operations induced under certain circumstances. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 1 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7828-1 Related CVEs: CVE-2025-61912 CVE-2025-61911 Upstream summary: It was discovered that Python LDAP incorrectly handled special characters in the special character filtering function. A remote attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 31 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7626-1 Related CVEs: CVE-2025-48385 CVE-2025-46835 CVE-2025-27614 CVE-2025-48386 CVE-2025-27613 CVE-2025-48384 CVE-2024-50349 CVE-2024-52006  +5 more Upstream summary: Avi Halachmi discovered that Git incorrectly managed file modification constraints with Gitk. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7297-1 Related CVEs: CVE-2023-48795 CVE-2023-51713 CVE-2024-48651 Upstream summary: Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that the transport protocol implementation in ProFTPD had weak integrity checks. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7613-1 Related CVEs: CVE-2025-0755 CVE-2024-6381 CVE-2024-6383 Upstream summary: Karman Liu discovered that mongo-c-driver did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7063-1 Related CVEs: CVE-2024-6388 Upstream summary: Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon leaked the Pro token to unprivileged users by passing the token as an argument in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7956-1 Related CVEs: CVE-2025-58181 CVE-2024-45337 CVE-2024-24786 Upstream summary: Jakub Ciolek discovered that the Go Cryptography module included in Google Guest Agent did not validate GSSAPI authentication requests during SSH operations. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7751-1 Related CVEs: CVE-2025-7709 CVE-2025-6965 CVE-2025-29087 CVE-2025-29088 CVE-2025-3277 Upstream summary: It was discovered that the FTS5 SQLite extension incorrectly calculated certain array lengths. An attacker could use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 20 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6882-2 Related CVEs: CVE-2022-47951 CVE-2024-32498 Upstream summary: USN-6882-1 fixed vulnerabilities in Cinder. The update caused a regression in certain environments due to incorrect privilege handling. This update fixes the problem. […]