ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 3 February 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8195-1 Related CVEs: https://launchpad.net/bugs/2149908 Upstream summary: It was discovered that PackageKit incorrectly handled certain transactions. A local attacker could use this issue to install arbitrary packages as root, possibly resulting […]

🟡 Medium   ⏱ 10–30 min  Last verified: 2 February 2025 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7985-1 Related CVEs: CVE-2022-24107 CVE-2022-24106 CVE-2023-32668 CVE-2024-25262 CVE-2015-5700 CVE-2018-17407 Upstream summary: Shin Ando discovered that the Xpdf toolkit embedded in TeX Live incorrectly handled memory when decoding certain data streams. […]

🟢 Low   ⏱ 5–15 min  Last verified: 31 January 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7917-1 Related CVEs: CVE-2025-66034 CVE-2023-45139 Upstream summary: It was discovered that the subsetting module of fontTools was vulnerable to an XML External Entity (XEE) attack. An unauthenticated remote attacker could […]

🟠 High   ⏱ 15–60 min  Last verified: 31 January 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7945-1 Related CVEs: CVE-2025-7424 CVE-2024-55549 CVE-2025-24855 CVE-2023-40403 CVE-2019-5815 CVE-2021-30560 CVE-2019-13117 CVE-2019-13118  +2 more Upstream summary: Ivan Fratric discovered that Libxslt was vulnerable to type confusion when performing XML transformations. An […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 January 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7352-2 Related CVEs: CVE-2022-27406 CVE-2025-27363 CVE-2022-27404 CVE-2022-27405 CVE-2022-31782 CVE-2020-15999 Upstream summary: USN-7352-1 fixed a vulnerability in FreeType. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 30 January 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7612-1 Related CVEs: CVE-2024-6839 CVE-2024-6866 CVE-2024-6844 CVE-2024-6221 CVE-2024-1681 Upstream summary: It was discovered that Flask-CORS did not correctly handle certain regular expressions. A remote attacker could possibly use this issue […]

🟢 Low   ⏱ 5–15 min  Last verified: 30 January 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7746-1 Related CVEs: CVE-2025-9287 Upstream summary: Nikita Skovoroda discovered that cipher-base did not properly manage certain inputs. An attacker could possibly use this issue to manipulate the internal state of […]

🟠 High   ⏱ 15–60 min  Last verified: 30 January 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6886-1 Related CVEs: CVE-2023-45288 CVE-2023-45289 CVE-2023-45290 CVE-2024-24783 CVE-2024-24784 CVE-2024-24785 CVE-2024-24788 CVE-2024-24789  +8 more Upstream summary: It was discovered that the Go net/http module did not properly handle the requests when […]

🟢 Low   ⏱ 5–15 min  Last verified: 29 January 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8189-1 Related CVEs: CVE-2024-39684 CVE-2024-38517 Upstream summary: It was discovered that RapidJSON did not properly protect against integer overflows in certain instances when parsing JSON text. A remote attacker could […]

🟡 Medium   ⏱ 10–30 min  Last verified: 29 January 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7319-1 Related CVEs: CVE-2022-39209 CVE-2023-22483 CVE-2023-22484 CVE-2023-22486 CVE-2023-26485 Upstream summary: It was discovered that cmark-gfm's autolink extension did not correctly handle parsing large inputs. An attacker could possibly use this […]