ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 26 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7762-1 Related CVEs: CVE-2023-32681 CVE-2024-3651 CVE-2023-45803 CVE-2024-47081 https://launchpad.net/bugs/2031880 CVE-2025-50181 CVE-2024-37891 Upstream summary: Dennis Brinkrolf and Tobias Funke discovered that Requests incorrectly leaked Proxy-Authorization headers. A remote attacker could possibly use […]

🟡 Medium   ⏱ 10–30 min  Last verified: 26 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7872-1 Related CVEs: CVE-2025-46784 CVE-2025-46705 CVE-2025-47151 CVE-2025-46404 Upstream summary: It was discovered that Lasso incorrectly handled certain malformed SAML responses. A remote attacker could possibly use this issue to cause […]

🟠 High   ⏱ 15–60 min  Last verified: 25 February 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7945-1 Related CVEs: CVE-2025-7424 CVE-2024-55549 CVE-2025-24855 CVE-2023-40403 CVE-2019-5815 CVE-2021-30560 CVE-2019-13117 CVE-2019-13118  +8 more Upstream summary: Ivan Fratric discovered that Libxslt was vulnerable to type confusion when performing XML transformations. An […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7816-1 Related CVEs: CVE-2025-23259 CVE-2024-11614 Upstream summary: It was discovered that DPDK incorrectly handled the mlx5 Ethernet poll mode driver. An attacker could possibly use this issue to obtain sensitive […]

🟢 Low   ⏱ 5–15 min  Last verified: 23 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7965-1 Related CVEs: CVE-2025-0781 Upstream summary: It was discovered that SimGear could be made to bypass the sandboxing of Nasal scripts. An attacker could possibly use this issue to execute […]

🟡 Medium   ⏱ 10–30 min  Last verified: 23 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7474-1 Related CVEs: CVE-2023-28840 CVE-2023-28841 CVE-2023-28842 CVE-2024-23651 CVE-2024-23652 CVE-2024-36621 CVE-2024-36623 CVE-2024-41110 Upstream summary: Cory Snider discovered that Docker incorrectly handled networking packet encapsulation. An attacker could use this issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 February 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7287-1 Related CVEs: CVE-2025-1390 CVE-2023-2602 CVE-2023-2603 Upstream summary: Tianjia Zhang discovered the libcap2 PAM module pam_cap incorrectly handled parsing group names in the configuration file. This could result in certain […]

🟡 Medium   ⏱ 10–30 min  Last verified: 21 February 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7677-1 Related CVEs: CVE-2024-6174 CVE-2024-11584 CVE-2023-1786 https://bugs.launchpad.net/cloud-init/+bug/2013967 CVE-2022-2084 Upstream summary: Harry Sintonen discovered that the hotplugd socket in cloud-init was world writable. An attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 21 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7976-1 Related CVEs: CVE-2025-7783 Upstream summary: Ben Shonaldmann discovered that Form-data incorrectly generated boundary values for multipart form-encoded data, leading to predictable values. A remote attacker could possibly use this […]