1,181 results · Clear filters · Feed
-
Medium max 6.1USN-5022-3 16 CVEs
mysql-5.7 vulnerabilities
USN-5022-1 fixed several vulnerabilities in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix the…
first Oct 7, 2021 -
Medium max 5.3USN-5021-2 2 CVEs
curl vulnerability
USN-5021-1 fixed vulnerabilities in curl. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Harry Sintonen and Tomas Hoger discovered that curl incorrectly handled TELNET connections when the -t option was used on…
first Jan 20, 2022 -
Medium max 6.1USN-5013-2 2 CVEs
systemd vulnerabilities
USN-5013-1 fixed several vulnerabilities in systemd. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that systemd incorrectly handled certain mount paths. A local attacker could possibly use thi…
first Jul 20, 2021 -
Medium max 4.5USN-5004-1 2 CVEs
rabbitmq-server vulnerabilities
It was discovered that RabbitMQ incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 ESM and Ubuntu 18.04 LTS. (CVE-2019-11287) Jonathan Knudsen discovered RabbitMQ i…
first Jun 24, 2021 -
Medium max 4.0USN-4976-2 1 CVE
dnsmasq vulnerability
USN-4976-1 fixed a vulnerability in Dnsmasq. This update provides the corresponding update for Ubuntu 16.04 ESM. Dnsmasq has been updated to 2.79-1 for Ubuntu 16.04 ESM in order to fix some security issues. Original advisory details: Petr Mensik discovered th…
first Sep 7, 2022 -
Medium max 4.9USN-4975-2 1 CVE
python-django vulnerability
USN-4975-1 fixed a vulnerability in Django. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Rasmus Lerchedahl Petersen and Rasmus Wriedt Larsen discovered that Django incorrectly handled path sanitation in admind…
first Jun 7, 2021 -
Medium max 4.7USN-4964-1 5 CVEs
exiv2 vulnerabilities
It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10 and Ubuntu 21.04. (CVE-2021-29463) It was discovered that Exiv2 inc…
first May 25, 2021 -
Medium max 5.5USN-4959-1 1 CVE
gst-plugins-base1.0 vulnerability
It was discovered that GStreamer Base Plugins incorrectly handled certain inputs. An attacker could possibly use this issue to expose sensitive information.
first May 18, 2021 -
Medium max 4.7USN-4941-1 4 CVEs
exiv2 vulnerabilities
It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to execute arbitrary code or cause a crash. (CVE-2021-29457) It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly…
first May 10, 2021 -
Medium max 5.3USN-6841-2 1 CVE
php7.0, php7.2 vulnerability
USN-6841-1 fixed a vulnerability in PHP. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that PHP could early return in the filter_var function resulting in invalid user in…
first Sep 9, 2024 -
Medium max 4.5USN-6838-2 1 CVE
ruby2.3, ruby2.5 vulnerability
USN-6838-1 fixed CVE-2024-27281 in Ruby 2.7, Ruby 3.0, Ruby 3.1, and Ruby 3.2. This update provides the corresponding updates for Ruby 2.3 and Ruby 2.5. Original advisory details: It was discovered that Ruby RDoc incorrectly parsed certain YAML files. If a us…
first Feb 10, 2025 -
Medium max 5.5USN-6437-1 5 CVEs
vips vulnerabilities
Ziqiang Gu discovered that VIPS could be made to dereference a NULL pointer. If a user or automated system were tricked into processing a specially crafted input image file, an attacker could possibly use this issue to cause a denial of service. This issue on…
first Oct 18, 2023 -
Medium max 5.3USN-6435-1 2 CVEs
openssl vulnerabilities
It was discovered that OpenSSL incorrectly handled excessively large Diffie-Hellman parameters. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-3446) Bernd Edlinger discovered that OpenSSL incorrectly handled excessively larg…
first Oct 18, 2023 -
Medium max 5.5USN-4804-1 2 CVEs
puppet vulnerabilities
It was discovered that Puppet installed modules with world writable permissions. An attacker could use this vulnerability to execute arbitrary code or cause a denial of service. (CVE-2017-10689) It was discovered that Puppet could be used to force YAML deseri…
first Mar 15, 2021 -
Medium max 4.9USN-4586-2 1 CVE
php-imagick vulnerability
USN-4586-1 fixed vulnerabilities in PHP ImageMagick. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that PHP ImageMagick extension didn't check the address used by an array. An attacker could u…
first Jan 24, 2022 -
Medium max 6.5USN-5658-2 2 CVEs
isc-dhcp vulnerabilities
USN-5658-1 fixed vulnerabilities in DHCP. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: It was discovered that DHCP incorrectly handled option reference counting. A remote attacker could possibly use this issu…
first Nov 7, 2022 -
Medium max 6.8
libimage-exiftool-perl vulnerability
USN-4987-1 fixed a vulnerability in ExifTool. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that ExifTool did not properly sanitize user data for the DjVu file format. An attacker could use th…
first Feb 8, 2022 -
Medium max 5.5USN-4336-2 147 CVEs
binutils vulnerabilities
USN-4336-1 fixed several vulnerabilities in GNU binutils. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that GNU binutils contained a large number of security issues. If a user or automated sy…
first Jul 21, 2021 -
Medium max 4.9USN-8469-1 2 CVEs
ffmpeg vulnerabilities
Jiasheng Jiang discovered that FFmpeg incorrectly handled memory in certain error-handling paths of its TensorFlow DNN backend. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS. (CVE-2025-12343)…
first Jun 24, 2026 -
Medium max 6.7USN-8193-2 1 CVE
libcap2 vulnerability
USN-8193-1 fixed a vulnerability in libcap. This update provides the corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Ali Raza discovered that libcap incorrectly handled file capab…
first Jun 23, 2026 -
Medium max 6.5USN-8460-1 2 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 did not properly release memory allocated in the xmllint utility. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-1757) A type confusion vulnerability was found in libxml2 when processing a spec…
first Jun 22, 2026 -
Medium max 6.5USN-8453-1 2 CVEs
libnet-cidr-lite-perl vulnerabilities
It was discovered that Net::CIDR::Lite incorrectly validated IP address and CIDR mask inputs. An attacker could possibly use this issue to bypass IP access control lists. (CVE-2026-45190) It was discovered that Net::CIDR::Lite incorrectly handled extraneous z…
-
Medium max 6.5USN-8446-1 2 CVEs
gst-plugins-bad1.0 vulnerabilities
It was discovered that GStreamer Bad Plugins incorrectly handled parsing H.266/VVC picture partition data. An attacker could use this issue to cause GStreamer Bad Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-202…
-
Medium max 6.3USN-8443-1 1 CVE
webpy vulnerability
It was discovered that web.py incorrectly handled sequence names in PostgreSQL insert queries. An attacker could possibly use this issue to perform SQL injection attacks, resulting in the alteration or exposure of database information.
-
Medium max 4.2USN-8175-1 1 CVE
frr vulnerability
It was discovered that FRR did not correctly handle certain network requests. A remote attacker could possibly use this issue to gain unauthorized access to resources.
first Apr 15, 2026 -
Medium max 4.5USN-8428-1 1 CVE
tmux vulnerability
It was discovered that tmux incorrectly handled image cleanup, leading to a use-after-free vulnerability. A local attacker could possibly use this issue to cause tmux to crash, resulting in a denial of service.
-
Medium max 5.9USN-8421-1 3 CVEs
ironic vulnerabilities
Dmitry Tantsur and Tuomo Tanskanen discovered that Ironic did not properly validate file paths when handling ISO images. A privileged authenticated remote user could use this issue to perform path traversal via a crafted ISO image and overwrite arbitrary file…
first Jun 11, 2026 -
Medium max 4.6USN-8044-2 1 CVE
alsa-lib vulnerability
USN-8044-1 fixed a vulnerability in alsa-lib. This update provides the corresponding fix for alsa-lib on Ubuntu 20.04 LTS. Original advisory details: It was discovered that alsa-lib incorrectly handled the topology mixer control decoder. A local attacker coul…
-
Medium max 6.5USN-8405-1 8 CVEs
cups vulnerabilities
Ariel Silver discovered that CUPS incorrectly handled username comparisons during authorization checks. A local attacker could possibly use this issue to gain unauthorized access to restricted operations. (CVE-2026-27447) Asim Viladi Oglu Manizada discovered …
-
Medium max 5.3USN-8404-1 1 CVE
transmission vulnerability
It was discovered that Transmission had a clickjacking weakness in the browser-facing WebUI and RPC response paths. An attacker could possibly use this issue to trick users into performing unintended actions.
-
Medium max 6.4USN-8402-1 2 CVEs
systemd vulnerabilities
It was discovered that systemd-nspawn incorrectly handled certain optional configuration files. A local attacker could possibly use this issue to escape to the host system and execute arbitrary code. (CVE-2026-40226) It was discovered that systemd-resolved in…
-
Medium max 5.5USN-8119-1 1 CVE
systemd vulnerabilities
It was discovered that systemd incorrectly handled certain cgroup paths. A local attacker could possibly use this issue to cause systemd to crash, resulting in a denial of service. (CVE-2026-29111) It was discovered that the systemd udev component incorrectly…
first Mar 23, 2026 -
Medium max 5.5USN-8386-1 2 CVEs
nano vulnerabilities
Michał Majchrowicz and Marcin Wyczechowski discovered that Nano created the ~/.local directory with incorrect permissions. In environments with permissive umask settings, a local attacker could possibly use this issue to inject a malicious launcher file, resu…
first Jun 4, 2026 -
Medium max 6.5USN-8378-1 1 CVE
libwww-perl vulnerability
It was discovered that libwww-perl incorrectly handled redirects. A remote attacker could possibly use this issue to obtain sensitive information by causing Authorization headers to be sent to a different host.
-
Medium max 6.1USN-8377-1 1 CVE
libtemplate-perl vulnerability
It was discovered that Template-Toolkit did not properly escape single quotes in the html_filter function of Template::Plugin::HTML. An attacker could possibly use this issue to inject arbitrary HTML and JavaScript into generated output.
-
Medium max 6.5USN-8363-2 25 CVEs
mysql-8.0 vulnerabilities
USN-8363-1 fixed several vulnerabilities in MySQL. This update provides the corresponding fixes for MySQL on Ubuntu 20.04 LTS. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to…
-
Medium max 5.3USN-3879-1 5 CVEs
linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
Wen Xu discovered that the ext4 file system implementation in the Linux kernel could possibly perform an out of bounds write when updating the journal for an inline file. An attacker could use this to construct a malicious ext4 image that, when mounted, could…
first Feb 4, 2019 -
Medium max 5.5USN-3680-1 2 CVEs
libvirt vulnerability and update
Ken Johnson and Jann Horn independently discovered that microprocessors utilizing speculative execution of a memory read may allow unauthorized memory reads via sidechannel attacks. An attacker in the guest could use this to expose sensitive guest information…
first Jun 12, 2018 -
Medium max 5.5USN-4440-1 12 CVEs
linux-hwe, linux-aws-5.3, linux-azure-5.3, linux-gcp-5.3, linux-gke-5.3, linux-hwe, linux-oracle-5.3, linux-raspi2-5.3 vulnerabilities
It was discovered that the network block device (nbd) implementation in the Linux kernel did not properly check for error conditions in some situations. An attacker could possibly use this to cause a denial of service (system crash). (CVE-2019-16089) It was d…
first Jul 31, 2020 -
Medium max 5.5USN-3361-1 40 CVEs
linux-hwe vulnerabilities
USN-3358-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. Please note that this update changes the Linux HWE ker…
first Jul 21, 2017