ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 17 April 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7562-1 Related CVEs: CVE-2024-24549 CVE-2024-34750 CVE-2024-23672 CVE-2023-42795 CVE-2024-38286 CVE-2023-45648 CVE-2023-28708 CVE-2024-21733  +10 more Upstream summary: It was discovered that Tomcat did not include the secure attribute for session cookies when […]

🟠 High   ⏱ 15–60 min  Last verified: 17 April 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7742-1 Related CVEs: CVE-2025-32988 CVE-2025-32990 CVE-2025-6395 CVE-2023-5981 CVE-2021-4209 CVE-2022-2509 https://launchpad.net/bugs/1860656 https://launchpad.net/bugs/1858691  +5 more Upstream summary: It was discovered that GnuTLS incorrectly handled exporting Subject Alternative Name (SAN) entries containing an […]

🟡 Medium   ⏱ 10–30 min  Last verified: 16 April 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8128-1 Related CVEs: CVE-2018-25099 CVE-2025-40914 CVE-2025-40912 Upstream summary: It was discovered that CryptX did not verify authentication tags while performing GCM and ChaCha20-Poly1305 decryption. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7399-1 Related CVEs: CVE-2025-30219 Upstream summary: It was discovered that RabbitMQ Server's management UI did not sanitize certain input. An attacker could possibly use this issue to inject code by […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 April 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7396-1 Related CVEs: CVE-2025-0650 CVE-2024-2182 Upstream summary: Marius Berntsberg, Trygve Vea, Tore Anderson, Rodolfo Alonso, Jay Faulkner, and Brian Haley discovered that OVN incorrectly handled certain crafted UDP packets. A […]

🟠 High   ⏱ 15–60 min  Last verified: 14 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6879-1 Related CVEs: CVE-2023-31620 CVE-2023-31622 CVE-2023-31624 CVE-2023-31626 CVE-2023-31627 CVE-2023-31629 CVE-2023-31630 CVE-2023-31631  +12 more Upstream summary: Jingzhou Fu discovered that Virtuoso Open-Source Edition incorrectly handled certain crafted SQL statements. An attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 14 April 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7870-1 Related CVEs: CVE-2024-24258 CVE-2024-24259 Upstream summary: It was discovered that Freeglut incorrectly managed memory, resulting in a memory leak. An attacker could possibly use this issue to cause a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 14 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7476-1 Related CVEs: CVE-2021-41125 CVE-2022-0577 CVE-2024-1892 CVE-2024-1968 CVE-2024-3572 CVE-2024-3574 Upstream summary: It was discovered that Scrapy improperly exposed HTTP authentication credentials to request targets, including during redirects. An attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 13 April 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7230-1 Related CVEs: CVE-2024-44070 CVE-2023-41358 CVE-2023-41360 Upstream summary: Iggy Frankovic discovered that Quagga incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause Quagga to […]