🟢 Low ⏱ 5–15 min Last verified: 2 March 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8044-1 Related CVEs: CVE-2026-25068 Upstream summary: It was discovered that alsa-lib incorrectly handled the topology mixer control decoder. A local attacker could use a specially crafted topology file to cause […]
🟠 High ⏱ 15–60 min Last verified: 1 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8182-1 Related CVEs: CVE-2026-34785 CVE-2026-26962 CVE-2026-26961 CVE-2026-34230 CVE-2026-34830 CVE-2026-34763 CVE-2026-34827 CVE-2026-32762 +12 more Upstream summary: Andrew Lacambra discovered that Rack did not properly parse certain regular expressions. An attacker could […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7929-1 Related CVEs: CVE-2025-66004 Upstream summary: It was discovered that usbmuxd incorrectly handled certain paths received with the SavePairRecord command. A local attacker could possibly use this issue to delete […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8071-1 Related CVEs: CVE-2026-2781 Upstream summary: It was discovered that NSS incorrectly handled memory when performing certain GHASH operations. A remote attacker could use this issue to cause NSS to […]
🟢 Low ⏱ 5–15 min Last verified: 1 March 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8168-1 Related CVEs: CVE-2026-33056 Upstream summary: It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked […]
🟢 Low ⏱ 5–15 min Last verified: 28 February 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8168-1 Related CVEs: CVE-2026-33056 Upstream summary: It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked […]
🟡 Medium ⏱ 10–30 min Last verified: 27 February 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8198-1 Related CVEs: CVE-2026-31958 CVE-2026-35536 CVE-2025-67724 CVE-2025-67725 CVE-2025-67726 CVE-2023-28370 CVE-2024-52804 Upstream summary: It was discovered that Tornado incorrectly handled parsing of large multipart request bodies. An attacker could possibly use […]
🟡 Medium ⏱ 10–30 min Last verified: 27 February 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8133-1 Related CVEs: CVE-2026-32597 https://launchpad.net/bugs/1986487 CVE-2022-29217 Upstream summary: It was discovered that PyJWT did not validate the critical header parameter, contrary to the RFC specification expectations. A remote attacker could […]
🟠 High ⏱ 15–60 min Last verified: 27 February 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7955-2 Related CVEs: CVE-2026-21441 https://bugs.launchpad.net/bugs/2138420 CVE-2025-66418 CVE-2025-66471 CVE-2025-50182 CVE-2025-50181 CVE-2024-37891 CVE-2018-25091 +2 more Upstream summary: USN-7955-1 fixed vulnerabilities in urllib3. The update introduced a regression in response streaming on Ubuntu […]
🟢 Low ⏱ 5–15 min Last verified: 27 February 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8218-1 Related CVEs: CVE-2025-53391 Upstream summary: Aaron Rainbolt discovered that zuluCrypt used insecure PolicyKit settings in zuluPolkit. An attacker could possibly use this issue to cause local privilege escalation to […]
