🟢 Low ⏱ 5–15 min Last verified: 21 January 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7977-1 Related CVEs: CVE-2024-53263 CVE-2025-26625 Upstream summary: Ryota K discovered that Git LFS may leak login credentials in certain instances due to failing to check for URL-encoded characters. An attacker […]
🟡 Medium ⏱ 10–30 min Last verified: 21 January 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8230-1 Related CVEs: CVE-2026-33748 CVE-2026-33747 CVE-2024-29018 CVE-2024-41110 Upstream summary: It was discovered that BuildKit, contained within Docker, incorrectly handled file path validation when processing frontend API messages. An attacker could […]
🟠 High ⏱ 15–60 min Last verified: 21 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8254-1 Related CVEs: CVE-2026-23112 CVE-2026-23231 CVE-2026-23273 CVE-2024-36347 CVE-2024-57795 CVE-2025-22022 CVE-2025-22111 CVE-2025-38022 +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]
🟠 High ⏱ 15–60 min Last verified: 21 January 2026 Affected versions: Ubuntu 18.04 (bionic) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8273-1 Related CVEs: CVE-2024-50304 CVE-2026-23112 CVE-2026-23209 CVE-2022-49046 CVE-2024-46816 CVE-2025-37849 CVE-2026-23060 CVE-2026-23074 +12 more Upstream summary: Several security issues were discovered in the Linux kernel. An attacker could possibly use these […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8256-1 Related CVEs: CVE-2026-41082 Upstream summary: Andrew Nesbitt discovered that opam did not properly validate file destination paths in package install files. An attacker could use this issue to bypass […]
🟢 Low ⏱ 5–15 min Last verified: 20 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8168-1 Related CVEs: CVE-2026-33056 Upstream summary: It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked […]
🟠 High ⏱ 15–60 min Last verified: 19 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8255-1 Related CVEs: CVE-2023-2640 CVE-2023-32629 CVE-2026-23112 CVE-2026-23273 CVE-2023-53421 CVE-2023-53520 CVE-2023-53662 CVE-2023-54207 +12 more Upstream summary: Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux […]
🟡 Medium ⏱ 10–30 min Last verified: 19 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8230-1 Related CVEs: CVE-2026-33748 CVE-2026-33747 CVE-2024-29018 CVE-2024-41110 Upstream summary: It was discovered that BuildKit, contained within Docker, incorrectly handled file path validation when processing frontend API messages. An attacker could […]
🟡 Medium ⏱ 10–30 min Last verified: 19 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8259-1 Related CVEs: CVE-2026-27622 CVE-2026-34380 CVE-2026-34588 Upstream summary: Quang Luong discovered that OpenEXR incorrectly handled sample count accumulation when processing deep scan line image files. An attacker could possibly use […]
🟠 High ⏱ 15–60 min Last verified: 19 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8093-1 Related CVEs: CVE-2026-3731 CVE-2026-0965 CVE-2026-0967 CVE-2026-0968 CVE-2025-8277 CVE-2026-0964 CVE-2026-0966 CVE-2025-8114 +7 more Upstream summary: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a […]
