ubuntu

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7317-1 Related CVEs: CVE-2022-23303 CVE-2022-23304 CVE-2022-37660 CVE-2024-5290 https://launchpad.net/bugs/2067613 Upstream summary: George Chatzisofroniou and Panayiotis Kotzanikolaou discovered that wpa_supplicant and hostapd reused encryption elements in the PKEX protocol. An attacker could […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7031-1 Related CVEs: CVE-2024-45614 Upstream summary: It was discovered that Puma incorrectly handled parsing certain headers. A remote attacker could possibly use this issue to overwrite header values set by […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-8251-1 Related CVEs: CVE-2026-33416 CVE-2026-34757 CVE-2026-33636 CVE-2026-25646 CVE-2026-22695 CVE-2025-66293 CVE-2026-22801 CVE-2025-64720  +3 more Upstream summary: It was discovered that libpng incorrectly handled memory when processing certain PNG files. If a […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6780-1 Related CVEs: CVE-2024-3651 Upstream summary: Guido Vranken discovered that idna did not properly manage certain inputs, which could lead to significant resource consumption. An attacker could possibly use this […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6371-1 Related CVEs: CVE-2020-22218 Upstream summary: It was discovered that libssh2 incorrectly handled memory access. An attacker could possibly use this issue to cause a crash. Table of contents Symptom […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6758-1 Related CVEs: CVE-2022-46175 Upstream summary: It was discovered that the JSON5 parse method incorrectly handled the parsing of keys named \_\_proto\_\_. An attacker could possibly use this issue to […]

🟢 Low   ⏱ 5–15 min  Last verified: 25 May 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6755-1 Related CVEs: CVE-2023-7207 CVE-2021-38185 Upstream summary: Ingo Brückl discovered that cpio contained a path traversal vulnerability. If a user or automated system were tricked into extracting a specially crafted […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-6590-1 Related CVEs: CVE-2018-1311 CVE-2023-37536 CVE-2016-2099 CVE-2016-4463 CVE-2017-12627 Upstream summary: It was discovered that Xerces-C++ was not properly handling memory management operations when parsing XML data containing external DTDs, which […]

🟡 Medium   ⏱ 10–30 min  Last verified: 25 May 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read  •  Source: Ubuntu Security Notice USN-7224-1 Related CVEs: CVE-2019-18928 CVE-2021-33582 CVE-2024-34055 Upstream summary: It was discovered that non-authentication-related HTTP requests could be interpreted in an authentication context by a Cyrus IMAP Server when multiple requests […]