ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 13 March 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6731-1 Related CVEs: CVE-2017-17042 CVE-2019-1020001 CVE-2024-27285 Upstream summary: It was discovered that YARD before 0.9.11 does not block relative paths with an initial ../ sequence, which allows attackers to conduct […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 March 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7723-1 Related CVEs: CVE-2025-8067 Upstream summary: Michael Imfeld discovered that UDisks did not check the validity of input data correctly when handling files for loop devices. An attacker could possibly […]

🟠 High   ⏱ 15–60 min  Last verified: 12 March 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7604-2 Related CVEs: CVE-2025-32462 CVE-2023-28486 CVE-2023-28487 CVE-2023-22809 CVE-2021-23239 CVE-2021-3156 CVE-2019-18634 CVE-2019-14287  +3 more Upstream summary: USN-7604-1 fixed CVE-2025-32462 in sudo. This update provides the corresponding fixes for Ubuntu 20.04 LTS, […]

🟡 Medium   ⏱ 10–30 min  Last verified: 11 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7147-1 Related CVEs: CVE-2016-6802 CVE-2023-34478 CVE-2023-46749 CVE-2023-46750 Upstream summary: It was discovered that Apache Shiro incorrectly handled path traversal when used with other web frameworks or path rewriting. An attacker […]

🟡 Medium   ⏱ 10–30 min  Last verified: 10 March 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7352-1 Related CVEs: CVE-2025-27363 CVE-2023-2004 CVE-2022-27404 CVE-2022-27405 CVE-2022-27406 CVE-2022-31782 CVE-2020-15999 Upstream summary: It was discovered that FreeType incorrectly handled certain memory operations when parsing font subglyph structures. A remote attacker […]

🟢 Low   ⏱ 5–15 min  Last verified: 10 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7464-1 Related CVEs: CVE-2022-25887 Upstream summary: It was discovered that Jupyter Notebook did not properly parse HTML comments under certain circumstances. An attacker could possibly use this issue to cause […]

🟠 High   ⏱ 15–60 min  Last verified: 10 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8137-1 Related CVEs: CVE-2025-61594 CVE-2025-24294 CVE-2024-35176 CVE-2024-27282 CVE-2024-27280 CVE-2024-39908 CVE-2024-41123 CVE-2024-43398  +7 more Upstream summary: It was discovered that the Ruby URI gem did not properly handle sensitive information when […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 March 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7970-1 Related CVEs: CVE-2025-54349 CVE-2025-54350 CVE-2023-7250 CVE-2024-53580 CVE-2024-26306 CVE-2023-38403 https://launchpad.net/bugs/2038654 Upstream summary: Jorge Sancho Larraz discovered that iperf3 did not properly manage certain inputs, which could cause the server process […]

🟢 Low   ⏱ 5–15 min  Last verified: 8 March 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7917-1 Related CVEs: CVE-2025-66034 CVE-2023-45139 Upstream summary: It was discovered that the subsetting module of fontTools was vulnerable to an XML External Entity (XEE) attack. An unauthenticated remote attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 8 March 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8108-1 Related CVEs: CVE-2024-30172 CVE-2023-33201 CVE-2025-8916 CVE-2024-29857 CVE-2024-30171 CVE-2024-34447 Upstream summary: It was discovered that Bouncy Castle did not sanitize user input when inserting it into an LDAP search filter. […]