ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 11 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7396-1 Related CVEs: CVE-2025-0650 Upstream summary: Marius Berntsberg, Trygve Vea, Tore Anderson, Rodolfo Alonso, Jay Faulkner, and Brian Haley discovered that OVN incorrectly handled certain crafted UDP packets. A remote […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 April 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7117-3 Related CVEs: https://launchpad.net/bugs/2091096 https://launchpad.net/bugs/2089193 CVE-2024-10224 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 CVE-2022-30688 Upstream summary: USN-7117-1 fixed vulnerabilities in needrestart. The update introduced a regression in needrestart. This update fixes the problem […]

🟠 High   ⏱ 15–60 min  Last verified: 10 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7682-1 Related CVEs: CVE-2025-37797 CVE-2025-38083 CVE-2024-49887 CVE-2024-57953 CVE-2024-57973 CVE-2024-57974 CVE-2024-57975 CVE-2024-57979  +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]

🟢 Low   ⏱ 5–15 min  Last verified: 9 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7581-1 Related CVEs: CVE-2024-29041 CVE-2024-43796 Upstream summary: It was discovered that Express incorrectly handled certain URLs, leading to an open redirect attack. A remote attacker could possibly use this issue […]

🟠 High   ⏱ 15–60 min  Last verified: 9 April 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8011-1 Related CVEs: CVE-2025-1244 CVE-2024-53920 CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 CVE-2023-28617 CVE-2024-30203  +4 more Upstream summary: It was discovered that Emacs could trigger unsafe Lisp macro expansion, when a user invoked […]

🟠 High   ⏱ 15–60 min  Last verified: 9 April 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8274-1 Related CVEs: CVE-2022-49033 CVE-2024-27388 CVE-2024-49938 CVE-2024-50008 CVE-2024-50142 CVE-2021-47142 CVE-2021-47145 CVE-2021-47254  +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7612-1 Related CVEs: CVE-2024-6839 CVE-2024-6866 CVE-2024-6844 CVE-2024-6221 CVE-2024-1681 CVE-2020-25032 Upstream summary: It was discovered that Flask-CORS did not correctly handle certain regular expressions. A remote attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6856-1 Related CVEs: CVE-2024-25081 CVE-2024-25082 Upstream summary: It was discovered that FontForge incorrectly handled filenames. If a user or an automated system were tricked into opening a specially crafted input […]

🟢 Low   ⏱ 5–15 min  Last verified: 7 April 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6963-1 Related CVEs: CVE-2024-36472 CVE-2020-17489 Upstream summary: It was discovered that GNOME Shell incorrectly opened the portal helper automatically when detecting a captive network portal. A remote attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 7 April 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7926-1 Related CVEs: CVE-2025-65073 CVE-2021-3563 CVE-2022-2447 Upstream summary: Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens and s3tokens APIs. A remote attacker could possibly use this issue to obtain […]