ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 1 May 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7340-1 Related CVEs: CVE-2017-12166 CVE-2024-5594 CVE-2022-0547 CVE-2020-11810 CVE-2020-15078 Upstream summary: It was discovered that OpenVPN did not perform proper input validation when generating a TLS key under certain configuration, which […]

🟠 High   ⏱ 15–60 min  Last verified: 29 April 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8113-1 Related CVEs: CVE-2025-61144 CVE-2025-61143 CVE-2025-8961 CVE-2025-9165 CVE-2025-9900 CVE-2025-8177 CVE-2025-8851 CVE-2025-8534  +12 more Upstream summary: It was discovered that LibTIFF did not properly handle memory when processing certain images. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6988-2 Related CVEs: CVE-2024-41671 CVE-2024-41810 CVE-2022-39348 CVE-2023-46137 CVE-2022-21712 CVE-2022-21716 Upstream summary: USN-6988-1 fixed CVE-2024-41671 in Twisted. The USN incorrectly stated that previous releases were unaffected. This update provides the equivalent […]

🟠 High   ⏱ 15–60 min  Last verified: 29 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8113-1 Related CVEs: CVE-2025-61144 CVE-2025-61143 CVE-2025-8961 CVE-2025-9165 CVE-2025-9900 CVE-2025-8177 CVE-2025-8851 CVE-2025-8534  +12 more Upstream summary: It was discovered that LibTIFF did not properly handle memory when processing certain images. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 April 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7946-1 Related CVEs: CVE-2025-68973 CVE-2025-30258 CVE-2022-34903 CVE-2018-12020 Upstream summary: It was discovered that GnuPG incorrectly handled crafted input. A remote attacker could possibly use this issue to crash the program, […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 April 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7956-1 Related CVEs: CVE-2025-58181 CVE-2024-45337 Upstream summary: Jakub Ciolek discovered that the Go Cryptography module included in Google Guest Agent did not validate GSSAPI authentication requests during SSH operations. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6666-1 Related CVEs: CVE-2024-24806 CVE-2021-22918 CVE-2020-8252 Upstream summary: It was discovered that libuv incorrectly truncated certain hostnames. A remote attacker could possibly use this issue with specially crafted hostnames to […]

🟢 Low   ⏱ 5–15 min  Last verified: 28 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6855-1 Related CVEs: CVE-2024-36600 Upstream summary: Mansour Gashasbi discovered that libcdio incorrectly handled certain memory operations when parsing an ISO file, leading to a buffer overflow vulnerability. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 28 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7551-1 Related CVEs: CVE-2025-5283 CVE-2024-5197 CVE-2023-44488 CVE-2023-5217 Upstream summary: It was discovered that libvpx did not properly manage memory. An attacker could possibly use this issue to cause applications using […]

🟠 High   ⏱ 15–60 min  Last verified: 28 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8245-1 Related CVEs: CVE-2024-36347 CVE-2025-68351 CVE-2025-68353 CVE-2025-68365 CVE-2025-68368 CVE-2025-68725 CVE-2025-68736 CVE-2025-68745  +12 more Upstream summary: Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some […]