ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 6 June 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7826-1 Related CVEs: CVE-2025-10230 CVE-2025-9640 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670 CVE-2022-2127 CVE-2023-3347  +12 more Upstream summary: Andrew Walker discovered that Samba incorrectly initialized memory in the vfs_streams_xattr module. An authenticated attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 5 June 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7648-3 Related CVEs: CVE-2025-1735 https://launchpad.net/bugs/2121643 CVE-2025-1220 CVE-2025-6491 CVE-2025-1734 CVE-2025-1861 CVE-2025-1736 CVE-2025-1217  +12 more Upstream summary: USN-7648-2 fixed vulnerabilities in PHP. The patch for CVE-2025-1735 caused a regression in php7.0, php7.2 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 4 June 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8181-1 Related CVEs: CVE-2022-23457 CVE-2022-24891 CVE-2025-5878 Upstream summary: Jaroslav Lobačevski discovered that ESAPI incorrectly validated directory paths during path verification. An attacker could possibly use this issue to bypass directory […]

🟠 High   ⏱ 15–60 min  Last verified: 4 June 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7705-1 Related CVEs: CVE-2024-54677 CVE-2025-46701 CVE-2025-31650 CVE-2024-52317 CVE-2025-31651 CVE-2024-50379 CVE-2024-24549 CVE-2024-34750  +7 more Upstream summary: It was discovered that Tomcat did not correctly handle case sensitivity. An attacker could possibly […]

🟢 Low   ⏱ 5–15 min  Last verified: 4 June 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7581-1 Related CVEs: CVE-2024-29041 CVE-2024-43796 Upstream summary: It was discovered that Express incorrectly handled certain URLs, leading to an open redirect attack. A remote attacker could possibly use this issue […]

🟠 High   ⏱ 15–60 min  Last verified: 3 June 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8045-1 Related CVEs: CVE-2024-31884 CVE-2024-47866 CVE-2023-43040 CVE-2021-3979 CVE-2022-0670 CVE-2022-3650 CVE-2022-3854 CVE-2020-25678  +9 more Upstream summary: Martin Schobert discovered that Ceph did not properly verify SSL certificates when using Pybind for […]

🟡 Medium   ⏱ 10–30 min  Last verified: 3 June 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7568-1 Related CVEs: CVE-2024-47081 CVE-2023-32681 CVE-2018-18074 Upstream summary: Dennis Brinkrolf and Tobias Funke discovered that Requests did not correctly handle certain HTTP headers. A remote attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 3 June 2025 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8062-2 Related CVEs: CVE-2025-15224 CVE-2025-15079 CVE-2025-14017 CVE-2024-7264 CVE-2023-38546 CVE-2023-28321 CVE-2023-28322 CVE-2023-27533  +12 more Upstream summary: USN-8062-1 fixed vulnerabilities in curl. This update provides the corresponding update for CVE-2025-14017, CVE-2025-15079, and […]