8,437 results · Feed
-
High max 8.4USN-8192-1 2 CVEs
ntfs-3g vulnerabilities
Jeffrey Bencteux discovered that NTFS-3G incorrectly handled certain UTF-8 sequences. An attacker could use this issue to cause NTFS-3G to crash, resulting in a denial of service, or to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS and Ubu…
first Apr 21, 2026 -
High max 7.5USN-8089-1 6 CVEs
golang-golang-x-net vulnerabilities
Bahruz Jabiyev, Tommaso Innocenti, Anthony Gavazzi, Steven Sprecher, and Kaan Onarlioglu discovered that servers using Go Networking could hang during shutdown if preempted by a fatal error. An attacker could possibly use this to cause a denial of service. Th…
first Mar 12, 2026 -
High max 7.2USN-4441-1 30 CVEs
mysql-5.7, mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.21 in Ubuntu 20.04 LTS. Ubuntu 16.04 LTS and Ubuntu 18.04 LTS have been updated to MySQL 5.7.31. In addit…
first Jul 28, 2020 -
Critical max 9.8USN-8078-1 1 CVE
zutty vulnerability
Carter Sande discovered that Zutty did not correctly echo invalid input to the console on DECRQSS. An attacker could possibly use this issue to execute arbitrary commands.
first Mar 5, 2026 -
High max 8.8USN-8071-1 1 CVE
nss vulnerability
It was discovered that NSS incorrectly handled memory when performing certain GHASH operations. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 4, 2026 -
Critical max 9.8USN-8088-1 5 CVEs
golang-github-go-git-go-git vulnerabilities
Ionut Lalu discovered that go-git incorrectly handled certain specially crafted Git server responses. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-49568, CVE-2025-21614) Ionut Lalu discovered that go-git incorrectly handle…
first Mar 12, 2026 -
High max 7.5USN-8065-1 5 CVEs
python-authlib vulnerabilities
Millie Solem discovered that Authlib did not properly restrict algorithm selection during JWT verification, allowing HMAC verification with asymmetric public keys when no algorithm was specified. A remote attacker could possibly use this issue to bypass signa…
first Feb 25, 2026 -
Medium max 5.3USN-4607-2 8 CVEs
openjdk-8, openjdk-lts regressions
USN-4607-1 fixed vulnerabilities and added features in OpenJDK. Unfortunately, that update introduced a regression that could cause TLS connections with client certificate authentication to fail in some situations. This update fixes the problem. We apologize …
first Nov 12, 2020 -
High max 7.5USN-8046-1 9 CVEs
frr vulnerabilities
It was discovered that FRR incorrectly handled certain malformed OSPF and update packets. A remote attacker could possibly use these issues to cause FRR to crash, resulting in a denial of service.
first Feb 17, 2026 -
High max 7.1USN-8056-1 6 CVEs
u-boot vulnerabilities
Simon Diepold discovered that U-Boot incorrectly handled certain DHCP responses. An attacker on the local network could possibly use this issue to obtain sensitive memory contents. (CVE-2024-42040) It was discovered that U-Boot incorrectly handled symlink siz…
first Feb 23, 2026 -
Medium max 5.3USN-8043-1 2 CVEs
gnutls28 vulnerabilities
Tim Scheckenbach discovered that GnuTLS incorrectly handled malicious certificates containing a large number of name constraints and subject alternative names. A remote attacker could possibly use this issue to cause GnuTLS to consume resources, resulting in …
first Feb 16, 2026 -
Medium max 6.9USN-8022-2 2 CVEs
expat vulnerabilities
USN-8022-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for Ubuntu 24.04 LTS. Original advisory details: It was discovered that Expat incorrectly handled the initialization of parsers for external entities. An attacker could …
first Feb 16, 2026 -
High max 7.5USN-8041-1 1 CVE
node-dottie vulnerability
Yuhan Gao and Peng Zhou discovered that Dottie was vulnerable to prototype pollution when altering the __proto__ magical attribute. An attacker could possibly use this issue to achieve remote code execution.
first Feb 12, 2026 -
Medium max 4.6USN-8044-1 1 CVE
alsa-lib vulnerability
It was discovered that alsa-lib incorrectly handled the topology mixer control decoder. A local attacker could use a specially crafted topology file to cause alsa-lib to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Feb 16, 2026 -
UnscoredUSN-4437-1 1 CVE
libslirp vulnerability
Ziming Zhang and VictorV discovered that libslirp incorrectly handled replying to certain ICMP echo requests. A remote attacker could possibly use this issue to cause libslirp to crash, resulting in a denial of service.
first Jul 27, 2020 -
Low max 2.3USN-8104-1 1 CVE
flask vulnerability
Shourya Jaiswal discovered that Flask did not correctly mark certain web responses as user-specific. A remote attacker could possibly use this issue to obtain sensitive information.
first Mar 18, 2026 -
High max 7.8USN-8102-2 1 CVE
snapd regression
USN-8102-1 fixed a vulnerability in snapd. The update caused a regresision for Ubuntu 24.04 LTS while installing the package. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Qualys discovered that snapd incorrectl…
first Mar 17, 2026 -
High max 7.5USN-8025-2 1 CVE
dotnet8, dotnet10 vulnerability
USN 8025-1 fixed a vulnerability in .NET. This update provides the corresponding fix for Ubuntu 24.04 LTS. Original advisory details: Kevin Jones discovered that the System.Security.Cryptography.Cose component in .NET did not properly handle certain missing s…
first Feb 16, 2026 -
High max 7.5USN-8025-1 1 CVE
dotnet8, dotnet9, dotnet10 vulnerability
Kevin Jones discovered that the System.Security.Cryptography.Cose component in .NET did not properly handle certain missing special elements in input data. An attacker could possibly use this issue to bypass security checks and gain unauthorized access or per…
first Feb 11, 2026 -
Medium max 5.8USN-8020-1 3 CVEs
libsoup3 vulnerabilities
It was discovered that libsoup did not correctly handle certain URL-decoded input, which could allow for HTTP header injection. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-1467, CVE-2026-15…
first Feb 8, 2026 -
High max 7.5USN-8024-1 2 CVEs
libwebsockets vulnerabilities
Raffaele Bova discovered that Libwebsockets incorrectly handled memory when the upgrade header is not valid in the WebSocket server. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-11677) Raffaele Bova discovered that Libwebs…
first Feb 11, 2026 -
Medium max 6.5USN-8012-1 2 CVEs
gh vulnerabilities
It was discovered that GitHub CLI could behave unexpectedly if users downloaded a malicious GitHub Actions workflow artifact through gh run download. An attacker could possibly use this issue to create or overwrite files in unintended directories. (CVE-2024-5…
first Feb 4, 2026 -
Medium max 6.5USN-8006-1 14 CVEs
mysql-8.0 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes a new upstream MySQL version to fix these issues. MySQL has been updated to 8.0.45 in Ubuntu 20.04 LTS. In addition to security fixes, the updated packages contain bug fixes, new featu…
first Feb 3, 2026 -
Medium max 5.4USN-8017-1 3 CVEs
glib2.0 vulnerabilities
It was discovered that GLib incorrectly parsed large Base64 data. An attacker could use this issue to cause GLib to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-1484) It was discovered that GLib incorrectly parsed cer…
first Feb 5, 2026 -
High max 8.8USN-8011-1 2 CVEs
emacs vulnerabilities
It was discovered that Emacs could trigger unsafe Lisp macro expansion, when a user invoked elisp-completion-at-point on untrusted Emacs Lisp source code. An attacker could possibly use this issue to execute arbitrary code. (CVE-2024-53920) It was discovered …
first Feb 4, 2026 -
Medium max 6.5USN-7994-1 6 CVEs
mysql-8.0, mysql-8.4 vulnerabilities
Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issues. MySQL has been updated to 8.0.45 in Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. Ubuntu 25.10 has been updated to MySQL 8.4.8. In addition to…
first Feb 2, 2026 -
Medium max 6.3USN-7999-1 2 CVEs
python-filelock vulnerabilities
It was discovered that Filelock incorrectly handled symlinks in temp files. A local attacker could possibly use this issue to cause lock operations to fail or behave unexpectedly. (CVE-2026-22701) It was discovered that the file locking implementation in the …
first Feb 2, 2026 -
Medium max 6.5USN-7978-1 4 CVEs
screen vulnerabilities
It was discovered that GNU Screen incorrectly handled signals when setuid or setgid privileges were being used, which is not the default in Ubuntu. A local attacker could use this issue to send privileged signals, possibly leading to a denial of service. This…
first Jan 26, 2026 -
Critical max 9.8USN-7973-1 3 CVEs
cjson vulnerabilities
It was discovered that cJSON incorrectly handled parsing large numbers. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-26819) It was discovered that cJSON may perform out-of-bounds read when processing specially crafted JSON…
first Jan 23, 2026 -
High max 8.6USN-7977-1 2 CVEs
git-lfs vulnerabilities
Ryota K discovered that Git LFS may leak login credentials in certain instances due to failing to check for URL-encoded characters. An attacker could possibly use this issue to learn sensitive information. (CVE-2024-53263) It was discovered that Git LFS could…
first Jan 26, 2026 -
Critical max 9.4USN-7989-1 1 CVE
python-internetarchive vulnerability
Pengo Wray discovered that The Internet Archive Python Library incorrectly handled certain file paths when downloading files. An attacker could possibly use this issue to write files to arbitrary locations on the file system.
first Feb 2, 2026 -
Medium max 5.3USN-7972-1 1 CVE
opencc vulnerability
It was discovered that OpenCC incorrectly handled truncated UTF-8 input. An attacker could possibly use this issue to cause OpenCC to crash, resulting in a denial of service.
first Jan 21, 2026 -
High max 7.5USN-7966-2 3 CVEs
telegraf vulnerabilities
USN-7966-1 fixed vulnerabilities in Snowflake. This update provides the corresponding updates for Telegraf. Original advisory details: It was discovered that Pion DTLS, vendored in Telegraf, did not impose a limit on the amount of data that was buffered durin…
first Jan 19, 2026 -
High max 8.3USN-7968-1 4 CVEs
apache2 vulnerabilities
It was discovered that the Apache HTTP Server incorrectly handled failed ACME certificate renewals. This could result in renewal attempts to be repeated without delays, possibly leading to a denial of service. (CVE-2025-55753) Anthony Parfenov discovered that…
first Jan 19, 2026 -
Medium max 5.3USN-7981-1 2 CVEs
wlc vulnerabilities
It was discovered that wlc did not correctly handle SSL verification. An attacker could possibly use this issue to access sensitive resources. (CVE-2026-22250) It was discovered that wlc did not correctly handle API keys. An attacker could possibly use this i…
first Jan 27, 2026 -
High max 7.5USN-7966-1 3 CVEs
snowflake vulnerabilities
It was discovered that Pion DTLS, vendored in Snowflake, did not impose a limit on the amount of data that was buffered during the handshake. An attacker could possibly use the issue to cause a denial of service. (CVE-2022-29189) It was discovered that Pion D…
first Jan 19, 2026 -
Medium max 6.2USN-7762-1 4 CVEs
python-pip vulnerabilities
Dennis Brinkrolf and Tobias Funke discovered that Requests incorrectly leaked Proxy-Authorization headers. A remote attacker could possibly use this issue to obtain sensitive information. This update addresses the issue in the Requests module bundled into pip…
first Sep 23, 2025 -
High max 7.5USN-8037-1 3 CVEs
dnsdist vulnerabilities
It was discovered that HTTP/2, which is used/vendored by DNSdist, did not properly account for resources when handling client-triggered stream resets. An attacker could possibly use this issue to cause a denial of service. (CVE-2025-8671) It was discovered th…
first Feb 12, 2026 -
High max 7.8USN-7896-1 3 CVEs
libxml2 vulnerabilities
It was discovered that the libxml2 Python bindings incorrectly handled certain return values. An attacker could possibly use this issue to cause libxml2 to crash, resulting in a denial of service. (CVE-2025-32414) It was discovered that libxml2 incorrectly ha…
first Nov 27, 2025 -
Medium max 5.3USN-7847-1 11 CVEs
binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. The attack is restricted to local execution. (CVE-2025-11082) It was discovered that GNU binutils inco…
first Oct 29, 2025