ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 20 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7505-1 Related CVEs: CVE-2025-0838 Upstream summary: It was discovered that Abseil incorrectly handled memory with the upper bound of the size argument. An attacker could possibly use this issue to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 February 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7117-3 Related CVEs: https://launchpad.net/bugs/2091096 https://launchpad.net/bugs/2089193 CVE-2024-10224 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 CVE-2022-30688 Upstream summary: USN-7117-1 fixed vulnerabilities in needrestart. The update introduced a regression in needrestart. This update fixes the problem […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 February 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7351-1 Related CVEs: CVE-2020-10688 CVE-2020-1695 CVE-2020-25633 CVE-2021-20289 CVE-2023-0482 CVE-2024-9622 Upstream summary: Nikos Papadopoulos discovered that RESTEasy improperly handled URL encoding when certain errors occur. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 18 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6761-1 Related CVEs: CVE-2024-30187 Upstream summary: It was discovered that Anope did not properly process credentials for suspended accounts. An attacker could possibly use this issue to normally login to […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 February 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7814-1 Related CVEs: CVE-2024-23837 CVE-2025-53537 CVE-2024-28871 CVE-2024-45797 Upstream summary: It was discovered that LibHTP did not correctly handle certain HTTP headers. A remote attacker could possibly use this issue to […]

🟠 High   ⏱ 15–60 min  Last verified: 18 February 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7573-2 Related CVEs: CVE-2025-49175 CVE-2025-49176 CVE-2025-49178 CVE-2025-49179 CVE-2025-49180 CVE-2025-26594 CVE-2025-26595 CVE-2025-26596  +12 more Upstream summary: USN-7573-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 […]

🟠 High   ⏱ 15–60 min  Last verified: 16 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8260-1 Related CVEs: CVE-2024-36347 CVE-2024-57795 CVE-2025-22022 CVE-2025-22111 CVE-2025-38022 CVE-2025-38234 CVE-2025-40164 CVE-2025-40325  +12 more Upstream summary: Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8111-1 Related CVEs: https://bugs.launchpad.net/glance/+bug/2138602 CVE-2024-32498 Upstream summary: It was discovered that OpenStack Glance was incorrectly validating the IP addresses and the redirect destination URL when downloading or importing images from […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 February 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8218-1 Related CVEs: CVE-2025-53391 Upstream summary: Aaron Rainbolt discovered that zuluCrypt used insecure PolicyKit settings in zuluPolkit. An attacker could possibly use this issue to cause local privilege escalation to […]

🟢 Low   ⏱ 5–15 min  Last verified: 15 February 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7844-1 Related CVEs: CVE-2025-11683 Upstream summary: It was discovered that YAML::Syck did not properly handle parsing YAML files. An attacker could possibly use this issue to expose sensitive information. Table […]