ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 27 March 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6906-1 Related CVEs: CVE-2024-5569 Upstream summary: It was discovered that python-zipp did not properly handle the zip files with malformed names. An attacker could possibly use this issue to cause […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 March 2025 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6855-1 Related CVEs: CVE-2024-36600 CVE-2017-18198 CVE-2017-18199 Upstream summary: Mansour Gashasbi discovered that libcdio incorrectly handled certain memory operations when parsing an ISO file, leading to a buffer overflow vulnerability. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 24 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7613-1 Related CVEs: CVE-2025-0755 CVE-2024-6381 CVE-2024-6383 Upstream summary: Karman Liu discovered that mongo-c-driver did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a […]

🟠 High   ⏱ 15–60 min  Last verified: 23 March 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8068-1 Related CVEs: CVE-2025-31648 CVE-2025-20053 CVE-2025-22839 CVE-2025-22840 CVE-2025-20109 CVE-2025-24305 CVE-2025-26403 CVE-2025-21090  +12 more Upstream summary: Sergiu Ghetie discovered that some Intel® processors did not properly handle values in the microcode […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6843-1 Related CVEs: CVE-2024-36041 Upstream summary: Fabian Vogt discovered that Plasma Workspace incorrectly handled connections via ICE. A local attacker could possibly use this issue to gain access to another […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7063-1 Related CVEs: CVE-2024-6388 Upstream summary: Marco Trevisan discovered that the Ubuntu Advantage Desktop Daemon leaked the Pro token to unprivileged users by passing the token as an argument in […]

🟡 Medium   ⏱ 10–30 min  Last verified: 22 March 2025 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7567-1 Related CVEs: CVE-2025-47947 CVE-2025-48866 CVE-2021-42717 CVE-2022-48279 CVE-2023-24021 Upstream summary: Simon Studer discovered that ModSecurity incorrectly handled certain JSON objects. An attacker could possibly use this issue to cause a […]

🟠 High   ⏱ 15–60 min  Last verified: 22 March 2025 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7954-2 Related CVEs: CVE-2021-46848 CVE-2025-13151 CVE-2017-10790 CVE-2018-6003 CVE-2017-6891 CVE-2016-4008 CVE-2015-3622 CVE-2015-2806  +3 more Upstream summary: USN-7954-1 fixed vulnerabilities in Libtasn1. This update provides the corresponding updates for Ubuntu 14.04 LTS, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7956-1 Related CVEs: CVE-2025-58181 CVE-2024-45337 CVE-2024-24786 Upstream summary: Jakub Ciolek discovered that the Go Cryptography module included in Google Guest Agent did not validate GSSAPI authentication requests during SSH operations. […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7751-1 Related CVEs: CVE-2025-7709 CVE-2025-6965 CVE-2025-29087 CVE-2025-29088 CVE-2025-3277 Upstream summary: It was discovered that the FTS5 SQLite extension incorrectly calculated certain array lengths. An attacker could use this issue to […]