🟢 Low ⏱ 5–15 min Last verified: 2 December 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7976-1 Related CVEs: CVE-2025-7783 Upstream summary: Ben Shonaldmann discovered that Form-data incorrectly generated boundary values for multipart form-encoded data, leading to predictable values. A remote attacker could possibly use this […]
🟡 Medium ⏱ 10–30 min Last verified: 1 December 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8065-1 Related CVEs: CVE-2025-62706 CVE-2025-68158 CVE-2025-59420 CVE-2024-37568 CVE-2025-61920 Upstream summary: Millie Solem discovered that Authlib did not properly restrict algorithm selection during JWT verification, allowing HMAC verification with asymmetric public […]
🟢 Low ⏱ 5–15 min Last verified: 30 November 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7806-1 Related CVEs: CVE-2025-23013 Upstream summary: It was discovered that PAM/U2F could allow for authentication bypass in some configurations. An attacker could possibly use this issue to execute arbitrary code […]
🟠 High ⏱ 15–60 min Last verified: 30 November 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7504-1 Related CVEs: CVE-2025-2866 CVE-2025-1080 CVE-2024-12425 CVE-2024-12426 CVE-2024-7788 CVE-2024-6472 CVE-2024-3044 CVE-2023-6185 +12 more Upstream summary: Juraj Šarinay discovered that LibreOffice incorrectly handled verifying PDF signatures. A remote attacker could possibly […]
🟠 High ⏱ 15–60 min Last verified: 29 November 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7919-1 Related CVEs: CVE-2025-11495 CVE-2025-11081 CVE-2025-11083 CVE-2025-11412 CVE-2025-11082 CVE-2025-11413 CVE-2025-11414 CVE-2025-11494 +12 more Upstream summary: It was discovered that GNU binutils' dump_dwarf_section function could be manipulated to perform an out-of-bounds […]
🟡 Medium ⏱ 10–30 min Last verified: 27 November 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7697-1 Related CVEs: CVE-2025-54409 CVE-2025-54389 CVE-2021-45417 Upstream summary: Rajesh Pangare discovered that AIDE incorrectly handled filenames. A local attacker could possibly use this issue to bypass the detection of malicious […]
🟡 Medium ⏱ 10–30 min Last verified: 27 November 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7785-1 Related CVEs: CVE-2025-41244 CVE-2025-22247 CVE-2023-34058 CVE-2023-34059 CVE-2023-20900 CVE-2023-20867 CVE-2022-31676 Upstream summary: It was discovered that Open VM Tools incorrectly handled permissions with version checking. An attacker could possibly use […]
🟠 High ⏱ 15–60 min Last verified: 27 November 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7679-1 Related CVEs: CVE-2025-6965 CVE-2025-29088 CVE-2025-29087 CVE-2025-3277 CVE-2022-46908 CVE-2023-7104 CVE-2022-35737 CVE-2020-35525 +12 more Upstream summary: It was discovered that SQLite incorrectly handled aggregate terms. An attacker could use this issue […]
🟠 High ⏱ 15–60 min Last verified: 26 November 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8296-1 Related CVEs: CVE-2024-50004 CVE-2024-58096 CVE-2024-58097 CVE-2025-37926 CVE-2025-38201 CVE-2025-38591 CVE-2025-40039 CVE-2025-40082 +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]
🟡 Medium ⏱ 10–30 min Last verified: 24 November 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8065-1 Related CVEs: CVE-2025-62706 CVE-2025-68158 CVE-2025-59420 CVE-2024-37568 CVE-2025-61920 Upstream summary: Millie Solem discovered that Authlib did not properly restrict algorithm selection during JWT verification, allowing HMAC verification with asymmetric public […]
