ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 28 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7603-1 Related CVEs: CVE-2024-35241 CVE-2024-35242 CVE-2024-24821 CVE-2023-43655 CVE-2022-24828 Upstream summary: Thomas Chauchefoin discovered that Composer did not correctly handle certain arguments. An attacker could possibly use this issue to execute […]

🟠 High   ⏱ 15–60 min  Last verified: 27 April 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6969-1 Related CVEs: CVE-2024-25641 CVE-2024-29894 CVE-2024-31443 CVE-2024-31444 CVE-2024-31445 CVE-2024-31458 CVE-2024-31459 CVE-2024-31460  +6 more Upstream summary: It was discovered that Cacti did not properly apply checks to the "Package Import" feature. […]

🟢 Low   ⏱ 5–15 min  Last verified: 26 April 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7399-1 Related CVEs: CVE-2025-30219 CVE-2023-46118 Upstream summary: It was discovered that RabbitMQ Server's management UI did not sanitize certain input. An attacker could possibly use this issue to inject code […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7273-1 Related CVEs: CVE-2021-4156 CVE-2024-50612 CVE-2022-33065 CVE-2021-3246 Upstream summary: It was discovered that libsndfile incorrectly handled memory when executing its FLAC codec. If a user or automated system were tricked […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7377-1 Related CVEs: CVE-2024-35226 Upstream summary: It was discovered that Smarty did not properly sanitize template file names. An attacker could possibly use this issue to cause Smarty to crash, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 April 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8169-1 Related CVEs: CVE-2025-49844 CVE-2022-24834 CVE-2024-31449 Upstream summary: It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker could possibly use this issue to cause […]

🟠 High   ⏱ 15–60 min  Last verified: 23 April 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7918-1 Related CVEs: CVE-2025-58057 CVE-2025-58056 CVE-2025-59419 CVE-2022-24823 CVE-2024-29025 CVE-2020-11612 CVE-2021-21290 CVE-2021-21295  +12 more Upstream summary: Jeppe Bonde Weikop discovered that Netty incorrectly parsed HTTP messages. When Netty is used with […]

🟠 High   ⏱ 15–60 min  Last verified: 22 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7610-1 Related CVEs: CVE-2025-37798 CVE-2025-37890 CVE-2025-37932 CVE-2025-37997 CVE-2025-38000 CVE-2025-38001 CVE-2023-53034 CVE-2024-53222  +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7813-1 Related CVEs: CVE-2024-45237 CVE-2024-45234 CVE-2024-48943 CVE-2024-45236 CVE-2024-45238 CVE-2024-45239 CVE-2024-45235 Upstream summary: Niklas Vogel and Haya Schulmann discovered that FORT Validator did not perform proper input validation when parsing certain […]

🟢 Low   ⏱ 5–15 min  Last verified: 22 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7732-1 Related CVEs: CVE-2024-50624 Upstream summary: It was discovered that KMail Account Wizard used HTTP rather than HTTPS when retrieving certain email server configurations. An attacker could possibly use this […]