ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 12 December 2025 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7945-1 Related CVEs: CVE-2025-7424 CVE-2024-55549 CVE-2025-24855 CVE-2023-40403 CVE-2019-5815 CVE-2021-30560 CVE-2019-13117 CVE-2019-13118  +8 more Upstream summary: Ivan Fratric discovered that Libxslt was vulnerable to type confusion when performing XML transformations. An […]

🟠 High   ⏱ 15–60 min  Last verified: 11 December 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8261-1 Related CVEs: CVE-2024-36347 CVE-2024-57795 CVE-2025-21833 CVE-2025-22022 CVE-2025-22103 CVE-2025-22105 CVE-2025-22106 CVE-2025-22107  +12 more Upstream summary: Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some […]

🟠 High   ⏱ 15–60 min  Last verified: 10 December 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7610-1 Related CVEs: CVE-2025-37798 CVE-2025-37890 CVE-2025-37932 CVE-2025-37997 CVE-2025-38000 CVE-2025-38001 CVE-2023-53034 CVE-2024-53222  +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]

🟠 High   ⏱ 15–60 min  Last verified: 10 December 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7837-1 Related CVEs: CVE-2025-47219 CVE-2024-47537 CVE-2024-47539 CVE-2024-47540 CVE-2024-47543 CVE-2024-47544 CVE-2024-47545 CVE-2024-47546  +12 more Upstream summary: Shaun Mirani discovered that GStreamer Good Plugins incorrectly handled certain malformed media files. An attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 December 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7478-1 Related CVEs: CVE-2025-30472 Upstream summary: It was discovered that Corosync incorrectly handled certain large UDP packets. If encryption is disabled, or an attacker knows the encryption key, this issue […]

🟡 Medium   ⏱ 10–30 min  Last verified: 6 December 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7343-2 Related CVEs: https://launchpad.net/bugs/2102129 CVE-2024-56201 CVE-2024-56326 CVE-2025-27516 CVE-2024-34064 CVE-2020-28493 CVE-2024-22195 CVE-2016-10745  +1 more Upstream summary: USN-7343-1 fixed vulnerabilities in Jinja2. The update introduced a regression when attempting to import Jinja2 […]

🟠 High   ⏱ 15–60 min  Last verified: 4 December 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8032-1 Related CVEs: CVE-2025-69228 CVE-2025-69225 CVE-2025-69226 CVE-2025-69229 CVE-2025-69223 CVE-2025-69224 CVE-2025-69227 CVE-2023-49081  +8 more Upstream summary: Charles Chan discovered that AIOHTTP incorrectly handled the decompression of compressed requests. A remote attacker […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 December 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7785-1 Related CVEs: CVE-2025-41244 CVE-2025-22247 CVE-2023-34058 CVE-2023-34059 CVE-2023-20900 CVE-2023-20867 CVE-2022-31676 Upstream summary: It was discovered that Open VM Tools incorrectly handled permissions with version checking. An attacker could possibly use […]

🟢 Low   ⏱ 5–15 min  Last verified: 3 December 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7929-1 Related CVEs: CVE-2025-66004 Upstream summary: It was discovered that usbmuxd incorrectly handled certain paths received with the SavePairRecord command. A local attacker could possibly use this issue to delete […]

🟢 Low   ⏱ 5–15 min  Last verified: 2 December 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7567-1 Related CVEs: CVE-2025-47947 CVE-2025-48866 Upstream summary: Simon Studer discovered that ModSecurity incorrectly handled certain JSON objects. An attacker could possibly use this issue to cause a denial of service. […]