1,181 results · Clear filters · Feed
-
Medium max 4.2USN-8236-1 5 CVEs
slurm-wlm vulnerabilities
It was discovered that Slurm did not correctly handle certain file system operations. An attacker could possibly use this issue to modify files or leak sensitive information. This issue only affected Ubuntu 22.04 LTS. (CVE-2023-41914) Ryan Hall discovered tha…
first May 6, 2026 -
Medium max 5.3USN-8225-1 2 CVEs
python-marshmallow vulnerabilities
Jared Deckard discovered that Python marshmallow did not correctly handle hiding certain fields. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2018-17175) It was discovered that Python…
-
Medium max 5.3USN-8136-2 1 CVE
dovecot regression
USN-8136-1 fixed vulnerabilities in Dovecot. The update caused a regression on Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Dovecot incorrectly hand…
first Apr 28, 2026 -
Medium max 6.7USN-8193-1 1 CVE
libcap2 vulnerability
Ali Raza discovered that libcap incorrectly handled file capability updates. A local attacker could possibly use this issue to inject or strip capabilities into arbitrary executables and escalate privileges.
first Apr 21, 2026 -
Medium max 6.5USN-5537-1 18 CVEs
mysql-5.7, mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.30 in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. Ubuntu 18.04 LTS has been updated to MySQL 5.7.39. In additi…
first Jul 28, 2022 -
Medium max 5.4USN-5134-1 1 CVE
docker.io vulnerability
An information disclosure issue was discovered in the command line interface of Docker. A misconfigured credential store could result in supplied credentials being leaked to the public registry, when using the docker login command with a private registry.
first Nov 9, 2021 -
Medium max 6.4USN-8194-1 3 CVEs
php-league-commonmark vulnerabilities
It was discovered that league/commonmark did not properly restrict unsafe attributes when the Attributes extension was enabled. An attacker could possibly use this issue to cause cross-site scripting by injecting malicious code into rendered HTML. This issue …
first Apr 21, 2026 -
Medium max 5.5USN-4450-1 3 CVEs
whoopsie vulnerabilities
Seong-Joong Kim discovered that Whoopsie incorrectly handled memory. A local attacker could use this issue to cause Whoopsie to consume memory, resulting in a denial of service. (CVE-2020-11937) Seong-Joong Kim discovered that Whoopsie incorrectly handled par…
first Aug 4, 2020 -
Medium max 6.5USN-4981-1 7 CVEs
squid, squid3 vulnerabilities
Joshua Rogers discovered that Squid incorrectly handled requests with the urn: scheme. A remote attacker could possibly use this issue to cause Squid to consume resources, leading to a denial of service. (CVE-2021-28651) Joshua Rogers discovered that Squid in…
first Jun 3, 2021 -
Medium max 6.5USN-4952-1 33 CVEs
mysql-5.7, mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.25 in Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. Ubuntu 18.04 LTS has been updated to MySQL 5.7.34…
first May 12, 2021 -
Medium max 5.3USN-5300-2 5 CVEs
php7.2, php7.4 vulnerabilities
USN-5300-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that PHP incorrectly handled certain scripts. An attacker could possibly use this i…
first Mar 3, 2022 -
Medium max 5.5USN-5170-1 1 CVE
mariadb-10.3, mariadb-10.5 vulnerability
A security issue was discovered in MariaDB and this update includes new upstream MariaDB versions to fix the issue. MariaDB has been updated to 10.3.32 in Ubuntu 20.04 LTS and to 10.5.13 in Ubuntu 21.04 and Ubuntu 21.10. In addition to security fixes, the upd…
first Dec 6, 2021 -
Medium max 6.7USN-8173-1 2 CVEs
policykit-1 vulnerabilities
It was discovered that polkit incorrectly handled nested elements in XML policy files. If an administrator were tricked into installing a malicious policy file, a remote attacker could possibly use this issue to cause polkit to crash, resulting in a denial of…
first Apr 14, 2026 -
Medium max 6.8USN-8167-1 1 CVE
xdg-dbus-proxy vulnerability
It was discovered that xdg-dbus-proxy incorrectly handled eavesdropping in policy rules. A local attacker could possibly use this issue to intercept certain D-Bus messages.
first Apr 13, 2026 -
Medium max 5.1USN-8168-1 1 CVE
rustc vulnerability
It was discovered that tar-rs embedded in rustc incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could use this issue to modify permissions…
first Apr 13, 2026 -
Medium max 5.4USN-8151-1 1 CVE
lambdaisland-uri-clojure vulnerability
It was discovered that lambdaisland/uri did not properly sanitize the backslash character in URI strings. An attacker could possibly use this issue to bypass security checks or redirect users.
first Apr 6, 2026 -
Medium max 5.1USN-4400-1 1 CVE
nfs-utils vulnerability
It was discovered that the nfs-utils package set incorrect permissions on the /var/lib/nfs directory. An attacker could possibly use this issue to escalate privileges.
first Jun 22, 2020 -
Medium max 5.1USN-8138-2 1 CVE
rust-tar vulnerability
USN-8138-1 fixed a vulnerability in tar-rs. This update provides the corresponding update for Ubuntu 20.04 LTS. Original advisory details: It was discovered that tar-rs incorrectly handled symlinks when unpacking a tar archive. If a user or automated system w…
first Apr 14, 2026 -
Medium max 5.1USN-8138-1 1 CVE
rust-tar vulnerability
It was discovered that tar-rs incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could use this issue to modify permissions of arbitrary dire…
first Apr 1, 2026 -
Medium max 4.3USN-8114-1 2 CVEs
gvfs vulnerabilities
It was discovered that the GVfs FTP backend incorrectly handled IP addresses and ports returned by passive mode responses. A malicious remote server could possibly use this issue to help scan for open ports. (CVE-2026-28295) It was discovered that the GVfs FT…
first Mar 23, 2026 -
Medium max 5.1USN-8139-1 1 CVE
rust-cargo-c vulnerability
It was discovered that tar-rs embedded in cargo-c incorrectly handled symlinks when unpacking a tar archive. If a user or automated system were tricked into processing a specially crafted tar archive, a remote attacker could use this issue to modify permissio…
first Apr 1, 2026 -
Medium max 6.5USN-8099-1 3 CVEs
curl vulnerabilities
Zhicheng Chen discovered that curl could incorrectly reuse the wrong connection for Negotiate-authenticated HTTP or HTTPS requests. This could result in the use of credentials from a different connection, contrary to expectations. This issue only affected Ubu…
first Mar 16, 2026 -
Medium max 5.3USN-4607-2 8 CVEs
openjdk-8, openjdk-lts regressions
USN-4607-1 fixed vulnerabilities and added features in OpenJDK. Unfortunately, that update introduced a regression that could cause TLS connections with client certificate authentication to fail in some situations. This update fixes the problem. We apologize …
first Nov 12, 2020 -
Medium max 5.3USN-8043-1 2 CVEs
gnutls28 vulnerabilities
Tim Scheckenbach discovered that GnuTLS incorrectly handled malicious certificates containing a large number of name constraints and subject alternative names. A remote attacker could possibly use this issue to cause GnuTLS to consume resources, resulting in …
first Feb 16, 2026 -
Medium max 6.9USN-8022-2 2 CVEs
expat vulnerabilities
USN-8022-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Expat incorrectly handled the initialization of parsers for external entities. An attacker could …
first Feb 16, 2026 -
Medium max 4.6USN-8044-1 1 CVE
alsa-lib vulnerability
It was discovered that alsa-lib incorrectly handled the topology mixer control decoder. A local attacker could use a specially crafted topology file to cause alsa-lib to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Feb 16, 2026 -
Medium max 5.8USN-8020-1 3 CVEs
libsoup3 vulnerabilities
It was discovered that libsoup did not correctly handle certain URL-decoded input, which could allow for HTTP header injection. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-1467, CVE-2026-15…
first Feb 8, 2026 -
Medium max 6.5USN-8012-1 2 CVEs
gh vulnerabilities
It was discovered that GitHub CLI could behave unexpectedly if users downloaded a malicious GitHub Actions workflow artifact through gh run download. An attacker could possibly use this issue to create or overwrite files in unintended directories. (CVE-2024-5…
first Feb 4, 2026 -
Medium max 6.5USN-8006-1 14 CVEs
mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 8.0.45 in Ubuntu 20.04 LTS. In addition to security fixes, the updated packages contain bug fixes, new featu…
first Feb 3, 2026 -
Medium max 5.4USN-8017-1 3 CVEs
glib2.0 vulnerabilities
It was discovered that GLib incorrectly parsed large Base64 data. An attacker could use this issue to cause GLib to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-1484) It was discovered that GLib incorrectly parsed cer…
first Feb 5, 2026 -
Medium max 6.5USN-7994-1 6 CVEs
mysql-8.0, mysql-8.4 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.45 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.10 has been updated to MySQL 8.4.8. In addition to…
first Feb 2, 2026 -
Medium max 6.3USN-7999-1 2 CVEs
python-filelock vulnerabilities
It was discovered that Filelock incorrectly handled symlinks in temp files. A local attacker could possibly use this issue to cause lock operations to fail or behave unexpectedly. (CVE-2026-22701) It was discovered that the file locking implementation in the …
first Feb 2, 2026 -
Medium max 6.5USN-7978-1 4 CVEs
screen vulnerabilities
It was discovered that GNU Screen incorrectly handled signals when setuid or setgid privileges were being used, which is not the default in Ubuntu. A local attacker could use this issue to send privileged signals, possibly leading to a denial of service. This…
first Jan 26, 2026 -
Medium max 5.3USN-7972-1 1 CVE
opencc vulnerability
It was discovered that OpenCC incorrectly handled truncated UTF-8 input. An attacker could possibly use this issue to cause OpenCC to crash, resulting in a denial of service.
first Jan 21, 2026 -
Medium max 5.3USN-7981-1 2 CVEs
wlc vulnerabilities
It was discovered that wlc did not correctly handle SSL verification. An attacker could possibly use this issue to access sensitive resources. (CVE-2026-22250) It was discovered that wlc did not correctly handle API keys. An attacker could possibly use this i…
first Jan 27, 2026 -
Medium max 6.2USN-7762-1 4 CVEs
python-pip vulnerabilities
Dennis Brinkrolf and Tobias Funke discovered that Requests incorrectly leaked Proxy-Authorization headers. A remote attacker could possibly use this issue to obtain sensitive information. This update addresses the issue in the Requests module bundled into pip…
first Sep 23, 2025 -
Medium max 5.3USN-7847-1 11 CVEs
binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. The attack is restricted to local execution. (CVE-2025-11082) It was discovered that GNU binutils inco…
first Oct 29, 2025 -
Medium max 4.3USN-7782-1 4 CVEs
ghostscript vulnerabilities
It was discovered that Ghostscript incorrectly handled opening a file to write. An attacker could possibly use this issue to cause Ghostscript to crash, resulting in a denial of service (CVE-2025-7462) It was discovered that Ghostscript incorrectly handled wr…
first Sep 29, 2025 -
Medium max 6.3USN-7951-1 1 CVE
python3.8, python3.9, python3.10, python3.11, python3.12, python3.13, python3.14 vulnerability
It was discovered that Python's http.client did not properly handle the Content-Length header in HTTP responses. A malicious server could exploit this to cause Python to allocate excessive memory, leading to a denial of service.
first Jan 12, 2026 -
Medium max 4.5USN-7949-1 1 CVE
libsodium vulnerability
It was discovered that Sodium incorrectly handled the elliptic curve point validity check in certain atypical use cases. This could result in invalid points being used, contrary to expectations.
first Jan 8, 2026