ubuntu

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8093-1 Related CVEs: CVE-2026-3731 CVE-2026-0965 CVE-2026-0964 CVE-2026-0967 CVE-2026-0966 CVE-2026-0968 CVE-2025-8277 CVE-2025-8114  +10 more Upstream summary: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7112-1 Related CVEs: CVE-2021-40812 CVE-2017-6363 CVE-2021-38115 CVE-2021-40145 Upstream summary: It was discovered that the GD Graphics Library did not perform proper bounds checking while handling BMP and WebP files. If […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7055-1 Related CVEs: CVE-2024-3596 CVE-2019-17185 CVE-2022-41860 CVE-2022-41861 Upstream summary: Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc Stevens, and Adam Suhl discovered that FreeRADIUS incorrectly authenticated certain responses. […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6598-1 Related CVEs: CVE-2023-48795 CVE-2022-24302 Upstream summary: Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk discovered that the SSH protocol was vulnerable to a prefix truncation attack. If a remote attacker was […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8018-2 Related CVEs: CVE-2025-15367 CVE-2025-15366 CVE-2026-0865 https://bugs.launchpad.net/bugs/2143706 CVE-2025-15282 CVE-2026-0672 CVE-2025-13837 CVE-2025-11468  +12 more Upstream summary: USN-8018-1 fixed vulnerabilities in python3. That update introduced regressions. The patches for CVE-2025-15366 and CVE-2025-15367 […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6277-1 Related CVEs: CVE-2014-5011 CVE-2014-5012 CVE-2014-5013 CVE-2021-3838 CVE-2022-2400 Upstream summary: It was discovered that Dompdf was not properly validating untrusted input when processing HTML content under certain circumstances. An attacker […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6640-1 Related CVEs: CVE-2023-4641 https://launchpad.net/bugs/1998169 CVE-2013-4235 CVE-2017-12424 CVE-2018-7169 Upstream summary: It was discovered that shadow was not properly sanitizing memory when running the password utility. An attacker could possibly use […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8093-1 Related CVEs: CVE-2026-3731 CVE-2026-0965 CVE-2026-0964 CVE-2026-0967 CVE-2026-0966 CVE-2026-0968 CVE-2025-8277 CVE-2025-8114  +9 more Upstream summary: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6824-1 Related CVEs: CVE-2021-40633 CVE-2022-28506 CVE-2023-39742 Upstream summary: It was discovered that GIFLIB incorrectly handled certain GIF files. An attacker could possibly use this issue to cause a denial of […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6116-1 Related CVEs: CVE-2022-29167 Upstream summary: It was discovered that hawk incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input […]