Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

All Critical High Medium Low With exploited CVEs

1,181 results · Clear filters · Feed

  • Medium max 6.3
    USN-8650-1 2 CVEs

    capnproto vulnerabilities

    Chanho Kim and Jihyeok Han discovered that Cap'n Proto incorrectly handled negative Content-Length values or excessively large chunk sizes when processing HTTP messages. An attacker could possibly use these issues to cause HTTP messages to be interpreted inco…

    first Aug 19, 2026
  • Medium max 6.9
    USN-8632-1 1 CVE

    node-follow-redirects vulnerability

    Dennis Sepede discovered that follow-redirects did not properly remove custom authentication headers when following cross-domain redirects. An attacker could possibly use this issue to obtain sensitive authentication information, resulting in credential discl…

    first Aug 12, 2026
  • Medium max 5.5
    USN-6215-1 2 CVEs

    dwarves-dfsg vulnerabilities

    It was discovered that dwarves incorrectly handled certain memory operations under certain circumstances. An attacker could possibly use this issue to cause dwarves to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-3534…

    first Jul 11, 2023
  • Medium max 5.5
    USN-5759-2 2 CVEs

    libbpf vulnerabilities

    USN-5759-1 fixed vulnerabilities in LibBPF. This update provides the corresponding updates for Ubuntu 20.04 ESM. Original advisory details: It was discovered that LibBPF incorrectly handled certain memory operations under certain circumstances. An attacker co…

    first Dec 8, 2022
  • Medium max 5.5
    USN-5759-1 3 CVEs

    libbpf vulnerabilities

    It was discovered that LibBPF incorrectly handled certain memory operations under certain circumstances. An attacker could possibly use this issue to cause LibBPF to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only …

    first Dec 5, 2022
  • Medium max 5.5
    USN-8600-1 1 CVE

    libxpm vulnerability

    Naoki Wakamatsu discovered that libXpm did not properly validate file boundaries when processing XPM image files. An attacker could possibly use this issue to cause libXpm to crash, resulting in a denial of service.

    first Jul 23, 2026
  • Medium max 5.9
    USN-8601-1 1 CVE

    pam vulnerability

    It was discovered that PAM had a timing discrepancy in the pam_userdb module when comparing plaintext passwords. An attacker could possibly use this issue to obtain sensitive information by measuring response-timing differences during repeated authentication …

    first Jul 23, 2026
  • Medium max 5.1
    USN-8588-1 4 CVEs

    gawk vulnerabilities

    It was discovered that Gawk incorrectly handled memory when processing input using the getline redirection. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-40467) It was discovered that Gawk incorrectly handled certain intege…

    first Jul 22, 2026
  • Medium max 5.9
    USN-8585-1 3 CVEs

    krb5 vulnerabilities

    It was discovered that Kerberos had an integer underflow vulnerability in the berval2tl_data() function. An attacker could possibly use this issue to cause Kerberos to crash, resulting in a denial of service. (CVE-2026-11850) It was discovered that Kerberos h…

  • Medium max 6.1
    USN-8586-1 8 CVEs

    libgphoto2 vulnerabilities

    It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing EOS image format data. An attacker with physical access could possibly use this issue to obtain sensitive information. (CVE-2026-40333) It was discovered that libgphoto…

  • Medium max 5.0
    USN-8477-3 1 CVE

    tar regression

    USN-8477-1 fixed a vulnerability in tar. That fix was incomplete and could cause tar to fail to extract old archives that recorded a nonzero size for directory entries, resulting in a regression. This update fixes the problem. We apologize for the inconvenien…

  • Medium max 6.1
    USN-8578-1 1 CVE

    CUPS vulnerability

    It was discovered that CUPS did not properly filter control characters in IPP string attributes and PPD keywords. An unauthenticated attacker could exploit this to execute arbitrary code as the lp user on systems with shared target queues.

  • Medium max 4.2
    USN-8577-1 1 CVE

    openssh vulnerability

    USN-8222-1 fixed a vulnerability in OpenSSH. This update provides the corresponding fix for Ubuntu 16.04 LTS. Original advisory details: Vladimir Tokarev discovered that OpenSSH incorrectly handled certificates with the principal name containing a comma chara…

  • Medium max 6.5
    USN-8562-1 1 CVE

    freetype vulnerability

    It was discovered that FreeType incorrectly handled certain variable font files. An attacker could possibly use this issue to cause FreeType to crash, resulting in a denial of service, or obtain sensitive information.

    first Jul 20, 2026
  • Medium max 5.9
    USN-8572-1 1 CVE

    wget vulnerability

    It was discovered that Wget did not properly validate the IP address provided in an FTP PASV response when operating in FTP passive mode. A remote attacker controlling a malicious FTP server, or an HTTP server that redirects to an FTP URL, could possibly use …

    first Jul 20, 2026
  • Medium max 6.1
    USN-8565-1 2 CVEs

    sqlite3 vulnerabilities

    It was discovered that SQLite did not properly handle NULL pointer dereferences in the Session Extension when applying a corrupt changeset. An attacker could possibly use this issue to cause SQLite to crash, resulting in a denial of service. (CVE-2026-50812) …

    first Jul 20, 2026
  • Medium max 5.6
    USN-8564-1 1 CVE

    php8.1, php8.3, php8.5 vulnerabilities

    It was discovered that PHP incorrectly handled certain TLS setup failures, resulting in a NULL pointer dereference. An attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. (…

    first Jul 20, 2026
  • Medium max 6.1
    USN-8559-1 6 CVEs

    rlottie vulnerabilities

    It was discovered that rlottie incorrectly handled certain shift operations. An attacker could possibly use this issue to cause rlottie to read out of bounds, resulting in a denial of service or exposing sensitive information. (CVE-2026-10305) It was discover…

    first Jul 20, 2026
  • Medium max 5.0
    USN-8477-2 1 CVE

    tar regression

    USN-8477-1 fixed a vulnerability in tar. The update introduced a regression that could cause tar to fail to extract certain valid files. This update fixes the problem. Original advisory details: It was discovered that tar incorrectly handled certain crafted a…

    first Jul 16, 2026
  • Medium max 5.8
    USN-8556-1 2 CVEs

    ruby2.3 vulnerabilities

    It was discovered that the Net::IMAP client in Ruby did not properly sanitize Symbol arguments passed to IMAP commands. A remote attacker controlling a malicious IMAP server, or able to influence command arguments, could use this to inject arbitrary IMAP comm…

  • Medium max 6.5
    USN-8550-1 1 CVE

    libslirp vulnerability

    It was discovered that libslirp incorrectly handled TCP urgent data. A privileged attacker inside a guest VM could possibly use this issue to obtain sensitive information from the host process memory.

  • Medium max 6.9
    USN-8549-1 1 CVE

    python-idna vulnerability

    It was discovered that idna did not properly reject oversized inputs before performing expensive processing. An attacker could possibly use this issue to cause idna to consume significant resources, leading to a denial of service.

  • Medium max 5.9
    USN-8542-1 2 CVEs

    dnsmasq vulnerabilities

    Yiwei Hou discovered that Dnsmasq incorrectly handled logging of DS or DNSKEY. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-12725) It was discovered that Dnsmasq incorrectly validated the length of fixed-length DNS r…

    first Jul 14, 2026
  • Medium max 6.8
    USN-8538-1 1 CVE

    alsa-lib vulnerability

    It was discovered that alsa-lib incorrectly handled certain ALSA configuration text. An attacker could use this issue to cause alsa-lib to crash, resulting in a denial of service, or possibly execute arbitrary code.

  • Medium max 5.4
    USN-8534-1 6 CVEs

    libreoffice vulnerabilities

    It was discovered that LibreOffice incorrectly handled importing DXF drawings. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-6039) It was discovered that LibreOf…

    first Jul 13, 2026
  • Medium max 6.5
    USN-8535-1 2 CVEs

    pipewire vulnerabilities

    It was discovered that PipeWire accepted unbounded Content-Length values in its RAOP module. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS. (CVE-2026-14324) It was discovered that PipeW…

    first Jul 13, 2026
  • Medium max 6.5
    USN-8523-1 2 CVEs

    libsoup2.4 vulnerabilities

    Eric Su and Samuel Dainard discovered that libsoup incorrectly handled content with zero-length resources. An attacker could possibly use this issue to trigger a buffer over-read, resulting in information disclosure or a denial of service. This issue only aff…

    first Jul 9, 2026
  • Medium max 4.0
    USN-8521-1 1 CVE

    libidn vulnerability

    It was discovered that Libidn incorrectly handled certain internationalized domain name strings. An attacker could possibly use this issue to obtain sensitive information or cause a denial of service.

  • Medium max 6.3
    USN-8524-1 1 CVE

    python2.7, python3.5 vulnerability

    It was discovered that Python did not use sufficient entropy for Expat hash-flooding protection in the xml.parsers.expat and xml.etree.ElementTree modules. An attacker could use this to cause a denial of service via a crafted XML document.

  • Medium max 5.3
    USN-8505-1 1 CVE

    python-parsl vulnerability

    It was discovered that Parsl incorrectly constructed SQL queries using unsafe string formatting with user-supplied input in the parsl-visualize component. A remote attacker could possibly use this issue to perform SQL injection attacks, leading to data exfilt…

  • Medium max 6.9
    USN-8512-1 2 CVEs

    gzip vulnerabilities

    It was discovered that Gzip's gzexe utility handled temporary files in an insecure manner. When the mktemp utility was not available, gzexe constructed a temporary file path based on the process ID, which could be predicted. A local attacker could possibly us…

  • Medium max 4.1
    USN-8510-1 1 CVE

    tar vulnerability

    It was discovered that tar incorrectly handled symlinks when extracting archives. An attacker could possibly use this issue to overwrite arbitrary files.

  • Medium max 5.4
    USN-8495-1 1 CVE

    nghttp2 vulnerability

    It was discovered that the nghttp2 nghttpx proxy incorrectly handled HTTP/1.1 Upgrade requests that included a Content-Length header and body. A remote attacker could possibly use this issue to perform HTTP request and response smuggling attacks against backe…

  • Medium max 6.5
    USN-8485-1 1 CVE

    libyang vulnerability

    It was discovered that libyang incorrectly handled certain metadata list pointers. An attacker could use this issue to cause libyang to crash, resulting in a denial of service, or possibly execute arbitrary code.

  • Medium max 5.3
    USN-7080-1 1 CVE

    unbound vulnerability

    Toshifumi Sakaguchi discovered that Unbound incorrectly handled name compression for large RRsets, which could lead to excessive CPU usage. An attacker could potentially use this issue to cause a denial of service by sending specially crafted DNS responses.

    first Oct 22, 2024
  • Medium max 6.7
    USN-7064-2 1 CVE

    nano vulnerability

    USN-7064-1 fixed a vulnerability in nano. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that nano allowed a possible privilege escalation through an insecure temporary file. If nano was killed…

    first Oct 29, 2024
  • Medium max 4.5
    USN-7048-2 1 CVE

    vim vulnerability

    USN-7048-1 fixed a vulnerability in Vim. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Suyue Guo discovered that Vim incorrectly handled memory when flushing the typeahead buffer, leading to heap-buffer-overflo…

    first Oct 16, 2024
  • Medium max 5.5
    USN-7038-2 1 CVE

    apr vulnerability

    USN-7038-1 fixed a vulnerability in Apache Portable Runtime (APR) library. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: Thomas Stangner discovered a permission vulnerability in the Apache Portable Runtime (APR…

    first Oct 16, 2024
  • Medium max 5.3
    USN-7015-4 1 CVE

    python2.7, python3.5 vulnerability

    USN-7015-1 fixed several vulnerabilities in Python. This update provides the corresponding update for CVE-2023-27043 for python2.7 and python3.5 in Ubuntu 14.04 LTS. Original advisory details: It was discovered that the Python email module incorrectly parsed …

    first Oct 14, 2024
  • Medium max 4.7
    USN-7014-3 1 CVE

    nginx vulnerability

    USN-7014-1 fixed a vulnerability in nginx. This update provides the corresponding update for Ubuntu 14.04 LTS. Original advisory details: It was discovered that the nginx ngx_http_mp4 module incorrectly handled certain malformed mp4 files. In environments whe…

    first Oct 14, 2024