🟡 Medium ⏱ 10–30 min Last verified: 19 January 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8194-1 Related CVEs: CVE-2026-33347 CVE-2025-46734 CVE-2026-30838 Upstream summary: It was discovered that league/commonmark did not properly restrict unsafe attributes when the Attributes extension was enabled. An attacker could possibly use […]
🟡 Medium ⏱ 10–30 min Last verified: 19 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8233-1 Related CVEs: CVE-2026-27135 CVE-2019-9511 CVE-2019-9513 CVE-2023-44487 CVE-2024-28182 Upstream summary: Andrew MacPherson discovered that nghttp2 did not properly validate internal state when the session termination API was called. A remote […]
🟡 Medium ⏱ 10–30 min Last verified: 18 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8103-2 Related CVEs: CVE-2025-55304 https://bugs.launchpad.net/ubuntu/+source/gimp/+bug/2144731 CVE-2026-27596 CVE-2026-25884 CVE-2020-18899 CVE-2025-54080 CVE-2026-27631 CVE-2020-18771 Upstream summary: USN-8103-1 fixed vulnerabilities in Exiv2. The update caused a regression for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, […]
🟡 Medium ⏱ 10–30 min Last verified: 18 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8156-1 Related CVEs: CVE-2026-5201 CVE-2025-6199 CVE-2025-7345 CVE-2022-48622 Upstream summary: It was discovered that GDK-PixBuf incorrectly handled certain JPEG files. An attacker could use this issue to cause GDK-PixBuf to crash, […]
🟠 High ⏱ 15–60 min Last verified: 18 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8278-1 Related CVEs: CVE-2024-50004 CVE-2024-58096 CVE-2024-58097 CVE-2025-37926 CVE-2025-38201 CVE-2025-38591 CVE-2025-40039 CVE-2025-40082 +12 more Upstream summary: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic […]
🟠 High ⏱ 15–60 min Last verified: 18 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8277-2 Related CVEs: CVE-2025-71088 CVE-2025-71090 CVE-2025-71127 CVE-2025-71134 CVE-2025-71139 CVE-2025-71141 CVE-2025-71142 CVE-2025-71144 +12 more Upstream summary: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic […]
🟠 High ⏱ 15–60 min Last verified: 17 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8068-1 Related CVEs: CVE-2025-31648 CVE-2025-20053 CVE-2025-22839 CVE-2025-22840 CVE-2025-20109 CVE-2025-24305 CVE-2025-26403 CVE-2025-21090 +12 more Upstream summary: Sergiu Ghetie discovered that some Intel® processors did not properly handle values in the microcode […]
🟢 Low ⏱ 5–15 min Last verified: 17 January 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8168-1 Related CVEs: CVE-2026-33056 Upstream summary: It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked […]
🟠 High ⏱ 15–60 min Last verified: 17 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8023-1 Related CVEs: CVE-2026-25210 CVE-2026-24515 CVE-2012-1148 CVE-2015-1283 CVE-2016-0718 CVE-2016-4472 CVE-2018-20843 CVE-2019-15903 +11 more Upstream summary: It was discovered that Expat, contained within the xmltok library, incorrectly handled the initialization of […]
🟠 High ⏱ 15–60 min Last verified: 17 January 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-5376-5 Related CVEs: https://launchpad.net/bugs/2142790 https://launchpad.net/bugs/2142239 https://launchpad.net/bugs/2116251 CVE-2025-48385 CVE-2025-46835 CVE-2025-27614 CVE-2025-48386 CVE-2025-27613 +12 more Upstream summary: USN-5376-4 fixed a regression in Git. The update introduced a regression when specifying configuration includes […]
