ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 15 February 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8169-1 Related CVEs: CVE-2025-49844 CVE-2022-24834 CVE-2024-31449 CVE-2024-31228 CVE-2024-46981 CVE-2024-51741 CVE-2022-35977 CVE-2022-36021  +12 more Upstream summary: It was discovered that Redis incorrectly handled certain specially crafted Lua scripts. A remote attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 13 February 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7551-1 Related CVEs: CVE-2025-5283 CVE-2024-5197 CVE-2023-44488 CVE-2023-5217 CVE-2017-13194 CVE-2019-2126 CVE-2019-9232 CVE-2019-9325  +2 more Upstream summary: It was discovered that libvpx did not properly manage memory. An attacker could possibly use […]

🟠 High   ⏱ 15–60 min  Last verified: 13 February 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7942-2 Related CVEs: CVE-2025-3360 CVE-2025-13601 CVE-2025-7039 CVE-2025-14087 CVE-2024-52533 CVE-2023-29499 CVE-2023-32611 CVE-2023-32636  +11 more Upstream summary: USN-7942-1 fixed vulnerabilities in GLib. This update provides the corresponding updates for Ubuntu 14.04 LTS, […]

🟢 Low   ⏱ 5–15 min  Last verified: 12 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7447-1 Related CVEs: CVE-2025-3155 Upstream summary: It was discovered that Yelp incorrectly handled paths in ghelp URLs. A remote attacker could use this issue to trick users into opening malicious […]

🟡 Medium   ⏱ 10–30 min  Last verified: 12 February 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7586-1 Related CVEs: CVE-2024-34703 CVE-2024-39312 CVE-2024-34702 CVE-2024-50383 CVE-2024-50382 Upstream summary: It was discovered that Botan could have compiler dependent operations induced under certain circumstances. An attacker could possibly use this […]

🟠 High   ⏱ 15–60 min  Last verified: 12 February 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7804-2 Related CVEs: CVE-2025-59362 CVE-2025-62168 CVE-2024-37894 CVE-2023-5824 CVE-2023-49288 https://launchpad.net/bugs/2060880 CVE-2024-23638 CVE-2024-25111  +12 more Upstream summary: USN-7804-1 fixed a vulnerability in Squid. This update provides the corresponding update for Ubuntu 16.04 […]

🟠 High   ⏱ 15–60 min  Last verified: 11 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7834-1 Related CVEs: CVE-2024-36350 CVE-2024-36357 CVE-2025-38084 CVE-2025-38085 CVE-2025-38086 CVE-2025-38087 CVE-2025-38089 CVE-2025-38090  +12 more Upstream summary: Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos, and Flavien Solt discovered that […]

🟠 High   ⏱ 15–60 min  Last verified: 11 February 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7225-1 Related CVEs: CVE-2022-0137 CVE-2022-0534 CVE-2022-24191 CVE-2022-27114 CVE-2022-28085 CVE-2022-34033 CVE-2022-34035 CVE-2024-45508  +12 more Upstream summary: It was discovered that HTMLDOC incorrectly handled memory in the image_set_mask, git_read_lzw, write_header and write_node […]

🟠 High   ⏱ 15–60 min  Last verified: 11 February 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7983-1 Related CVEs: CVE-2025-64329 CVE-2024-25621 CVE-2024-40635 CVE-2023-25153 CVE-2023-25173 CVE-2021-32760 CVE-2021-41103 CVE-2022-23648  +4 more Upstream summary: David Leadbeater discovered that containerd incorrectly set certain directory path permissions. An attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 9 February 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7117-1 Related CVEs: CVE-2024-10224 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 Upstream summary: Qualys discovered that needrestart passed unsanitized data to a library (libmodule-scandeps-perl) which expects safe input. A local attacker could possibly […]