92 results · Clear filters · Feed
-
Low max 1.7USN-8335-1 1 CVE
pyopenssl vulnerability
It was discovered that pyOpenSSL incorrectly handled exceptions in the tlsext_servername callback. This could result in connections being accepted after an exception, contrary to expectations.
-
Low max 1.8USN-8103-2 1 CVE
exiv2 regression
USN-8103-1 fixed vulnerabilities in Exiv2. The update caused a regression for Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu 25.10. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovere…
first Mar 19, 2026 -
Low max 2.3USN-8104-1 1 CVE
flask vulnerability
Shourya Jaiswal discovered that Flask did not correctly mark certain web responses as user-specific. A remote attacker could possibly use this issue to obtain sensitive information.
first Mar 18, 2026 -
Low max 3.7USN-7971-1 1 CVE
glib2.0 vulnerability
It was discovered that GLib incorrectly handled the buffered input stream API. An attacker could use this issue to cause GLib to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jan 21, 2026 -
Low max 3.1USN-7818-2 1 CVE
subversion vulnerability
USN-7818-1 fixed vulnerabilities in Apache Subversion. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.04 LTS. Original advisory details: It was discovered that Apache Subversion incorrectl…
first Oct 16, 2025 -
Low max 2.9USN-7803-1 1 CVE
poppler vulnerability
It was discovered that poppler incorrectly handled certain PDF files. If a user or automated system were tricked into opening a specially crafted document, a remote attacker could use this issue to cause poppler to crash, leading to a denial of service.
first Oct 6, 2025 -
Low max 3.7USN-7715-1 1 CVE
nginx vulnerability
It was discovered that the nginx ngx_mail_smtp_module module incorrectly handled certain memory operations when doing SMTP authentication. This could possibly result in sensitive information being sent to the authentication server.
first Aug 25, 2025 -
Low max 3.6USN-7638-1 3 CVEs
libmobi vulnerabilities
It was discovered that Libmobi did not correctly handle certain memory operations, which could lead to a buffer overflow. A local attacker could possibly trigger this vulnerability to cause a denial of service. (CVE-2022-1907, CVE-2022-1908) It was discovered…
first Jul 16, 2025 -
Low max 3.4USN-7162-1 1 CVE
curl vulnerability
Harry Sintonen discovered that curl incorrectly handled credentials from .netrc files when following HTTP redirects. In certain configurations, the password for the first host could be leaked to the followed-to host, contrary to expectations.
first Dec 16, 2024 -
Low max 3.9USN-7035-1 1 CVE
apparmor vulnerability
It was discovered that the AppArmor policy compiler incorrectly generated looser restrictions than expected for rules allowing mount operations. A local attacker could possibly use this to bypass AppArmor restrictions in applications where some mount operatio…
first Sep 25, 2024 -
Low max 3.7USN-6812-1 4 CVEs
openjdk-17 vulnerabilities
It was discovered that the Hotspot component of OpenJDK 17 incorrectly handled certain exceptions with specially crafted long messages. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-21011) It was discovered that OpenJDK 17 …
first Jun 6, 2024 -
Low max 3.7USN-6813-1 4 CVEs
openjdk-21 vulnerabilities
It was discovered that the Hotspot component of OpenJDK 21 incorrectly handled certain exceptions with specially crafted long messages. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-21011) It was discovered that OpenJDK 21 …
first Jun 6, 2024 -
Low max 3.3USN-6719-1 1 CVE
util-linux vulnerability
Skyler Ferrante discovered that the util-linux wall command did not filter escape sequences from command line arguments. A local attacker could possibly use this issue to obtain sensitive information.
first Mar 27, 2024 -
Low max 3.3USN-6719-2 1 CVE
util-linux vulnerability
USN-6719-1 fixed a vulnerability in util-linux. Unfortunately, it was discovered that the fix did not fully address the issue. This update removes the setgid permission bit from the wall and write utilities. Original advisory details: Skyler Ferrante discover…
first Apr 10, 2024 -
Low max 3.7USN-6811-1 5 CVEs
openjdk-lts vulnerabilities
It was discovered that the Hotspot component of OpenJDK 11 incorrectly handled certain exceptions with specially crafted long messages. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-21011) It was discovered that OpenJDK 11 …
first Jun 6, 2024 -
Low max 3.7USN-6810-1 4 CVEs
openjdk-8 vulnerabilities
It was discovered that the Hotspot component of OpenJDK 8 incorrectly handled certain exceptions with specially crafted long messages. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-21011) Vladimir Kondratyev discovered that…
first Jun 6, 2024 -
Low max 3.7USN-5104-1 1 CVE
squid, squid3 vulnerability
Lyu discovered that Squid incorrectly handled WCCP protocol data. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obtain sensitive information.
first Oct 5, 2021 -
Low max 3.7USN-4504-1 4 CVEs
openssl, openssl1.0 vulnerabilities
Robert Merget, Marcus Brinkmann, Nimrod Aviram, and Juraj Somorovsky discovered that certain Diffie-Hellman ciphersuites in the TLS specification and implemented by OpenSSL contained a flaw. A remote attacker could possibly use this issue to eavesdrop on encr…
first Sep 16, 2020 -
Low max 3.5USN-4481-1 10 CVEs
freerdp2 vulnerabilities
It was discovered that FreeRDP incorrectly handled certain memory operations. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Sep 1, 2020 -
Low max 3.1USN-4316-2 2 CVEs
libgd2 vulnerabilities
USN-4316-1 fixed a vulnerability in GD Graphics Library. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that GD Graphics Library incorrectly handled cloning an image. An attacker could possibly…
first Apr 2, 2020 -
Low max 3.1USN-4316-1 2 CVEs
libgd2 vulnerabilities
It was discovered that GD Graphics Library incorrectly handled cloning an image. An attacker could possibly use this issue to cause GD Graphics Library to crash, resulting in a denial of service. (CVE-2018-14553) It was discovered that GD Graphics Library inc…
first Apr 2, 2020 -
Low max 2.4USN-7504-1 1 CVE
libreoffice vulnerability
Juraj Šarinay discovered that LibreOffice incorrectly handled verifying PDF signatures. A remote attacker could possibly use this issue to generate PDF files that appear to have a valid signature.
first May 8, 2025 -
Low max 3.1USN-6802-1 1 CVE
postgresql-14, postgresql-15, postgresql-16 vulnerability
Lukas Fittl discovered that PostgreSQL incorrectly performed authorization in the built-in pg_stats_ext and pg_stats_ext_exprs views. An unprivileged database user can use this issue to read most common values and other statistics from CREATE STATISTICS comma…
first May 30, 2024 -
Low max 2.6USN-6199-1 1 CVE
php7.4, php8.1 vulnerability
It was discovered that PHP incorrectly handled certain Digest authentication for SOAP. An attacker could possibly use this issue to expose sensitive information.
first Jul 3, 2023 -
Low max 3.7USN-5906-1 1 CVE
postgresql-12, postgresql-14 vulnerability
Jacob Champion discovered that the PostgreSQL client incorrectly handled Kerberos authentication. If a user or automated system were tricked into connecting to a malicious server, a remote attacker could possibly use this issue to obtain sensitive information.
first Mar 2, 2023 -
Low max 2.0USN-4668-4 1 CVE
python-apt vulnerability
USN-4668-1 fixed a vulnerability in python-apt. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Kevin Backhouse discovered that python-apt incorrectly handled resources. A local attacker could possibly use this i…
first Jan 11, 2021 -
Low max 2.0USN-4668-1 1 CVE
python-apt vulnerability
Kevin Backhouse discovered that python-apt incorrectly handled resources. A local attacker could possibly use this issue to cause python-apt to consume resources, leading to a denial of service.
first Dec 9, 2020 -
Low max 3.3USN-4616-2 2 CVEs
accountsservice vulnerabilities
USN-4616-1 fixed several vulnerabilities in AccountsService. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Kevin Backhouse discovered that AccountsService incorrectly dropped privileges. A local user could poss…
first Nov 4, 2020 -
Low max 3.3USN-4616-1 3 CVEs
accountsservice vulnerabilities
Kevin Backhouse discovered that AccountsService incorrectly dropped privileges. A local user could possibly use this issue to cause AccountsService to crash or hang, resulting in a denial of service. (CVE-2020-16126) Kevin Backhouse discovered that AccountsSe…
first Nov 3, 2020 -
Low max 3.3USN-4355-1 1 CVE
pulseaudio vulnerability
PulseAudio in Ubuntu contains additional functionality to mediate audio recording for snap packages and it was discovered that this functionality did not mediate PulseAudio module unloading. An attacker-controlled snap with only the audio-playback interface c…
first May 12, 2020 -
Low max 3.1USN-4282-1 1 CVE
postgresql-10, postgresql-11 vulnerability
It was discovered that PostgreSQL incorrectly performed authorization checks when handling the "ALTER ... DEPENDS ON EXTENSION" sub-commands. A remote attacker could possibly use this issue to drop any function, procedure, materialized view, index, or trigger…
first Feb 18, 2020 -
Low max 3.3USN-4013-1 13 CVEs
libsndfile vulnerabilities
It was discovered that libsndfile incorrectly handled certain malformed files. A remote attacker could use this issue to cause libsndfile to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jun 10, 2019 -
Low max 3.1USN-3972-1 1 CVE
postgresql-10, postgresql-11, postgresql-9.5 vulnerabilities
It was discovered that PostgreSQL incorrectly handled partition routing. A remote user could possibly use this issue to read arbitrary bytes of server memory. This issue only affected Ubuntu 19.04. (CVE-2019-10129) Dean Rasheed discovered that PostgreSQL inco…
first May 13, 2019 -
Low max 2.3USN-3762-1 2 CVEs
linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities
It was discovered that the VirtIO subsystem in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to possibly expose sensitive information (kernel memory). (CVE-2018-1118) Seunghun Han discovered an informa…
first Sep 11, 2018 -
Low max 3.7USN-3258-1 1 CVE
dovecot vulnerability
It was discovered that Dovecot incorrectly handled some usernames. An attacker could possibly use this issue to cause Dovecot to hang or crash, resulting in a denial of service.
first Apr 10, 2017 -
Low max 3.7USN-3258-2 1 CVE
dovecot regression
USN-3258-1 intended to fix a vulnerability in Dovecot. Further investigation revealed that only Dovecot versions 2.2.26 and newer were affected by the vulnerability. Additionally, the change introduced a regression when Dovecot was configured to use the "dict…
first Apr 11, 2017 -
Low max 1.8USN-3113-1 10 CVEs
oxide-qt vulnerabilities
It was discovered that a long running unload handler could cause an incognito profile to be reused in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to obtain sensitive informat…
first Nov 2, 2016 -
Low max 3.7USN-7689-1 1 CVE
dnsmasq vulnerability
Xu Mingjie discovered that Dnsmasq did not correctly handle certain memory operations. A remote attacker could possibly use this issue to cause a denial of service.
first Aug 11, 2025 -
Low max 2.7USN-7412-1 1 CVE
gnupg2 vulnerability
It was discovered that GnuPG incorrectly handled importing keys with certain crafted subkey data. If a user or automated system were tricked into importing a specially crafted key, a remote attacker may prevent users from importing other keys in the future.
first Apr 3, 2025 -
Low max 2.1USN-7207-2 2 CVEs
git vulnerabilities
USN-7207-1 fixed vulnerabilities in Git. This update provides the corresponding updates for Ubuntu 20.04 LTS. Original advisory details: It was discovered that Git incorrectly handled certain URLs when asking for credentials. An attacker could possibly use th…
first Feb 27, 2025