ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 23 May 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7444-1 Related CVEs: CVE-2023-32683 CVE-2023-43796 CVE-2022-39374 CVE-2023-41335 CVE-2022-39335 CVE-2023-42453 CVE-2024-31208 CVE-2024-53863  +7 more Upstream summary: It was discovered that Synapse network policies could be bypassed via specially crafted URLs. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 May 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8058-1 Related CVEs: CVE-2025-53074 CVE-2025-0634 CVE-2025-53075 Upstream summary: It was discovered that rlottie did not properly handle certain inputs. An attacker could use this issue to cause a denial of […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 May 2025 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7729-1 Related CVEs: CVE-2020-11880 CVE-2019-10732 CVE-2024-50624 CVE-2017-17689 Upstream summary: Damian Poddebniak, Christian Dresen, Jens Müller, Fabian Ising, Sebastian Schinzel, Simon Friedberger, Juraj Somorovsky, and Jörg Schwenk discovered that the KMail […]

🟡 Medium   ⏱ 10–30 min  Last verified: 20 May 2025 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7916-1 Related CVEs: CVE-2025-6966 CVE-2020-27351 CVE-2019-15795 CVE-2019-15796 Upstream summary: Julian Andres Klode discovered that python-apt incorrectly handled deb822 configuration files. An attacker could use this issue to cause python-apt to […]

🟢 Low   ⏱ 5–15 min  Last verified: 19 May 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6771-1 Related CVEs: CVE-2024-4340 CVE-2023-30608 Upstream summary: It was discovered that SQL parse incorrectly handled certain nested lists. An attacker could possibly use this issue to cause a denial of […]

🟠 High   ⏱ 15–60 min  Last verified: 19 May 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6893-1 Related CVEs: CVE-2023-52699 CVE-2024-24857 CVE-2024-24858 CVE-2024-24859 CVE-2024-26811 CVE-2024-26817 CVE-2024-26921 CVE-2024-26922  +12 more Upstream summary: It was discovered that a race condition existed in the Bluetooth subsystem in the Linux […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 May 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7604-2 Related CVEs: CVE-2025-32462 CVE-2023-28486 CVE-2023-28487 CVE-2022-33070 CVE-2023-22809 CVE-2021-23239 CVE-2021-3156 Upstream summary: USN-7604-1 fixed CVE-2025-32462 in sudo. This update provides the corresponding fixes for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 May 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6843-1 Related CVEs: CVE-2024-36041 Upstream summary: Fabian Vogt discovered that Plasma Workspace incorrectly handled connections via ICE. A local attacker could possibly use this issue to gain access to another […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 May 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8290-1 Related CVEs: CVE-2024-45296 Upstream summary: It was discovered that Path-to-Regexp incorrectly handled route patterns containing multiple named parameters separated by non-delimiter characters such as hyphens. An attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 17 May 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7404-1 Related CVEs: CVE-2021-30130 CVE-2023-52892 CVE-2024-27354 CVE-2024-27355 Upstream summary: It was discovered that phpseclib did not correctly handle RSA PKCS#1 v1.5 signature verification. An attacker could possibly use this issue […]