🟡 Medium ⏱ 10–30 min Last verified: 25 April 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7952-1 Related CVEs: CVE-2024-25269 CVE-2025-68431 CVE-2024-41311 Upstream summary: It was discovered that libheif did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a […]
🟡 Medium ⏱ 10–30 min Last verified: 25 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8049-1 Related CVEs: CVE-2026-24708 CVE-2024-40767 CVE-2024-32498 CVE-2023-2088 https://launchpad.net/bugs/2020111 CVE-2022-47951 Upstream summary: Dan Smith discovered that Nova incorrectly called qemu-img without a format restriction when resizing disks. An attacker could possibly […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7844-1 Related CVEs: CVE-2025-11683 Upstream summary: It was discovered that YAML::Syck did not properly handle parsing YAML files. An attacker could possibly use this issue to expose sensitive information. Table […]
🟢 Low ⏱ 5–15 min Last verified: 25 April 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8218-1 Related CVEs: CVE-2025-53391 Upstream summary: Aaron Rainbolt discovered that zuluCrypt used insecure PolicyKit settings in zuluPolkit. An attacker could possibly use this issue to cause local privilege escalation to […]
🟠 High ⏱ 15–60 min Last verified: 25 April 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8279-1 Related CVEs: CVE-2024-35862 CVE-2024-50060 CVE-2026-23274 CVE-2026-23351 CVE-2026-31419 CVE-2026-31431 CVE-2026-31504 CVE-2026-31533 +12 more Upstream summary: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic […]
🟢 Low ⏱ 5–15 min Last verified: 24 April 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8229-1 Related CVEs: CVE-2026-5958 Upstream summary: Michał Majchrowicz and Marcin Wyczechowski discovered that sed incorrectly handled symbolic links when performing in-place edits. A local attacker could possibly use this issue […]
🟠 High ⏱ 15–60 min Last verified: 24 April 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7599-1 Related CVEs: CVE-2025-50182 CVE-2025-50181 CVE-2024-37891 CVE-2018-25091 CVE-2023-43804 CVE-2023-45803 CVE-2020-26137 CVE-2018-20060 +2 more Upstream summary: Jacob Sandum discovered that urllib3 handled redirects even when they were explicitly disabled while using […]
🟠 High ⏱ 15–60 min Last verified: 24 April 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8023-1 Related CVEs: CVE-2026-25210 CVE-2026-24515 CVE-2012-1148 CVE-2015-1283 CVE-2016-0718 CVE-2016-4472 CVE-2018-20843 CVE-2019-15903 +11 more Upstream summary: It was discovered that Expat, contained within the xmltok library, incorrectly handled the initialization of […]
🟠 High ⏱ 15–60 min Last verified: 24 April 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8291-2 Related CVEs: CVE-2024-35862 CVE-2024-50060 CVE-2026-23274 CVE-2026-23351 CVE-2023-2640 CVE-2023-32629 CVE-2026-23112 CVE-2026-23273 +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]
🟡 Medium ⏱ 10–30 min Last verified: 23 April 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7831-1 Related CVEs: CVE-2025-48041 CVE-2025-48038 CVE-2025-48040 CVE-2025-48039 CVE-2025-32433 Upstream summary: It was discovered that Erlang incorrectly handled resource allocation and consumption in the SFTP SSH module. An attacker could possibly […]
