ubuntu

🟢 Low   ⏱ 5–15 min  Last verified: 19 January 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7062-1 Related CVEs: CVE-2024-36474 CVE-2024-42415 Upstream summary: It was discovered that libgsf incorrectly handled certain Compound Document Binary files. If a user or automated system were tricked into opening a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7485-1 Related CVEs: CVE-2025-43961 CVE-2025-43962 CVE-2025-43963 CVE-2025-43964 CVE-2021-32142 CVE-2023-1729 Upstream summary: It was discovered that LibRaw could be made to read out of bounds. An attacker could possibly use this […]

🟡 Medium   ⏱ 10–30 min  Last verified: 19 January 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7117-1 Related CVEs: CVE-2024-10224 CVE-2024-11003 CVE-2024-48990 CVE-2024-48991 CVE-2024-48992 Upstream summary: Qualys discovered that needrestart passed unsanitized data to a library (libmodule-scandeps-perl) which expects safe input. A local attacker could possibly […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 January 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7545-3 Related CVEs: https://launchpad.net/bugs/2112466 https://launchpad.net/bugs/2112272 CVE-2025-5054 Upstream summary: USN-7545-1 fixed vulnerabilities in Apport. The update introduced a regression that raised an error if a crashing process was killed while Apport […]

🟡 Medium   ⏱ 10–30 min  Last verified: 18 January 2025 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6678-1 Related CVEs: CVE-2020-12278 CVE-2020-12279 CVE-2023-22742 CVE-2024-24575 CVE-2024-24577 Upstream summary: It was discovered that libgit2 mishandled equivalent filenames on NTFS partitions. If a user or automated system were tricked into […]

🟠 High   ⏱ 15–60 min  Last verified: 17 January 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8032-1 Related CVEs: CVE-2025-69228 CVE-2025-69225 CVE-2025-69226 CVE-2025-69229 CVE-2025-69223 CVE-2025-69224 CVE-2025-69227 CVE-2023-49081  +7 more Upstream summary: Charles Chan discovered that AIOHTTP incorrectly handled the decompression of compressed requests. A remote attacker […]

🟠 High   ⏱ 15–60 min  Last verified: 17 January 2025 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7273-1 Related CVEs: CVE-2021-4156 CVE-2024-50612 CVE-2022-33065 CVE-2021-3246 CVE-2017-14245 CVE-2017-14246 CVE-2017-14634 CVE-2017-16942  +9 more Upstream summary: It was discovered that libsndfile incorrectly handled memory when executing its FLAC codec. If a […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 January 2025 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7746-1 Related CVEs: CVE-2025-9287 Upstream summary: Nikita Skovoroda discovered that cipher-base did not properly manage certain inputs. An attacker could possibly use this issue to manipulate the internal state of […]

🟢 Low   ⏱ 5–15 min  Last verified: 16 January 2025 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8144-1 Related CVEs: CVE-2025-12543 Upstream summary: It was discovered that Undertow incorrectly validated the Host header in incoming HTTP requests. A remote attacker could possibly use this issue to gain […]