Ubuntu Security Notices (USN)

8,464 results · Feed

• Unscored
  USN-4581-1 1 CVE

  python2.7, python3.4, python3.5, python3.6 vulnerability

  It was discovered that Python incorrectly handled certain character sequences. A remote attacker could possibly use this issue to perform CRLF injection.

  Apr 22, 2026

  first Oct 14, 2020
• Unscored
  USN-4565-1 1 CVE

  openconnect vulnerability

  It was discovered that OpenConnect has a buffer overflow when a malicious server uses HTTP chunked encoding with crafted chunk sizes. An attacker could use it to provoke a denial of service (crash).

  Apr 22, 2026

  first Oct 5, 2020
• Unscored
  USN-4602-1 3 CVEs

  perl vulnerabilities

  ManhND discovered that Perl incorrectly handled certain regular expressions. In environments where untrusted regular expressions are evaluated, a remote attacker could possibly use this issue to cause Perl to crash, resulting in a denial of service, or possib…

  Apr 22, 2026

  first Oct 26, 2020
• Medium max 5.4
  USN-4583-1 2 CVEs

  php5, php7.0, php7.2, php7.4 vulnerabilities

  It was discovered that PHP incorrectly handled certain encrypt ciphers. An attacker could possibly use this issue to decrease security or cause incorrect encryption data. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-7069) It was d…

  Apr 22, 2026

  first Oct 14, 2020
• Unscored
  USN-4558-1 1 CVE

  libapreq2 vulnerabilities

  It was discovered that libapreq2 did not properly sanitize the Content-Type field in certain, crafted HTTP requests. An attacker could use this vulnerability to cause libapreq2 to crash.

  Apr 22, 2026

  first Sep 30, 2020
• Unscored
  USN-4546-2 0 CVEs

  firefox regressions

  USN-4546-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tri…

  Apr 22, 2026

  first Oct 15, 2020
• Unscored
  USN-4623-1 1 CVE

  pacemaker vulnerability

  Ken Gaillot discovered that Pacemaker incorrectly handled IPC communications permissions. A local attacker could possibly use this issue to bypass ACL restrictions and execute arbitrary code as root.

  Apr 22, 2026

  first Nov 9, 2020
• Unscored
  USN-4630-1 1 CVE

  raptor2 vulnerability

  Hanno Böck discovered that Raptor incorrectly handled certain memory operations. If a user were tricked into opening a specially crafted document in an application linked against Raptor, an attacker could cause the application to crash, resulting in a denial …

  Apr 22, 2026

  first Nov 11, 2020
• Unscored
  USN-4554-1 1 CVE

  libpgf vulnerability

  It was discovered that libPGF lacked proper validation when opening a specially crafted PGF file. An attacker could possibly use this issue to cause a denial of service.

  Apr 22, 2026

  first Sep 28, 2020
• Unscored
  USN-4566-1 2 CVEs

  cyrus-imapd vulnerabilities

  It was dicovered that Cyrus IMAP Server could execute arbitrary code via a crafted HTTP PUT operation for an event with a long iCalendar property name. An attacker could use this vulnerability to cause a crash or possibly execute arbitrary code. (CVE-2019-113…

  Apr 22, 2026

  first Oct 5, 2020
• Unscored
  USN-4550-1 5 CVEs

  dpdk vulnerabilities

  Ryan Hall discovered that DPDK incorrectly handled vhost crypto. An attacker inside a guest could use these issues to perform multiple attacks, including denial of service attacks, obtaining sensitive information from the host, and possibly executing arbitrar…

  Apr 22, 2026

  first Sep 28, 2020
• Unscored
  USN-4548-1 1 CVE

  libuv1 vulnerability

  It was discovered that libuv incorrectly handled certain paths. An attacker could possibly use this issue to cause a crash or execute arbitrary code.

  Apr 22, 2026

  first Sep 28, 2020
• High max 8.2
  USN-4538-1 2 CVEs

  packagekit vulnerabilities

  Vaisha Bernard discovered that PackageKit incorrectly handled certain methods. A local attacker could use this issue to learn the MIME type of any file on the system. (CVE-2020-16121) Sami Niemimäki discovered that PackageKit incorrectly handled local deb pac…

  Apr 22, 2026

  first Sep 24, 2020
• Unscored
  USN-4549-1 2 CVEs

  imagemagick vulnerabilities

  It was discovered that ImageMagick incorrectly handled certain specially crafted image files. If a user or automated system using ImageMagick were tricked into opening a specially crafted image, an attacker could exploit this to cause a denial of service or o…

  Apr 22, 2026

  first Sep 28, 2020
• Medium max 5.8
  USN-4528-1 3 CVEs

  ceph vulnerabilities

  Adam Mohammed discovered that Ceph incorrectly handled certain CORS ExposeHeader tags. A remote attacker could possibly use this issue to preform an HTTP header injection attack. (CVE-2020-10753) Lei Cao discovered that Ceph incorrectly handled certain POST r…

  Apr 22, 2026

  first Sep 22, 2020
• Medium max 5.5
  USN-4559-1 1 CVE 1 exploited

  samba update

  Tom Tervoort discovered that the Netlogon protocol implemented by Samba incorrectly handled the authentication scheme. A remote attacker could use this issue to forge an authentication token and steal the credentials of the domain admin. While a previous secu…

  Apr 22, 2026

  first Sep 30, 2020
• Unscored
  USN-4546-1 6 CVEs

  firefox vulnerabilities

  Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, conduct cross-site scripting (XSS) attacks, spoof the site display…

  Apr 22, 2026

  first Sep 28, 2020
• Medium max 5.5
  USN-4510-1 1 CVE 1 exploited

  samba vulnerability

  Tom Tervoort discovered that the Netlogon protocol implemented by Samba incorrectly handled the authentication scheme. A remote attacker could use this issue to forge an authentication token and steal the credentials of the domain admin. This update fixes the…

  Apr 22, 2026

  first Sep 17, 2020
• Unscored
  USN-4514-1 1 CVE

  libproxy vulnerability

  It was discovered that libproxy incorrectly handled certain PAC files. An attacker could possibly use this issue to cause a denial of service.

  Apr 22, 2026

  first Sep 17, 2020
• Unscored
  USN-4545-1 7 CVEs

  libquicktime vulnerabilities

  It was discovered that libquicktime incorrectly handled certain malformed MP4 files. If a user were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause a denial of service (resource exhaustion). (CVE-2017-9122) I…

  Apr 22, 2026

  first Sep 25, 2020
• Unscored
  USN-4491-1 1 CVE

  gnutls28 vulnerability

  It was discovered that GnuTLS incorrectly handled certain alerts when being used with TLS 1.3 servers. A remote attacker could use this issue to cause GnuTLS to crash, resulting in a denial of service, or possibly execute arbitrary code.

  Apr 22, 2026

  first Sep 9, 2020
• Unscored
  USN-4473-1 5 CVEs

  libmysofa vulnerabilities

  It was discovered that libmysofa incorrectly handled certain input files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact. (CVE-2019-16091, CVE-2019-16092, CVE-2019-16093, CVE-2019-16094, CVE-2019-16095)

  Apr 22, 2026

  first Aug 26, 2020
• Unscored
  USN-4493-1 1 CVE

  cryptsetup vulnerability

  It was discovered that cryptsetup incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code.

  Apr 22, 2026

  first Sep 14, 2020
• Medium max 6.5
  USN-4468-2 1 CVE

  bind9 vulnerability

  USN-4468-1 fixed a vulnerability in Bind. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Dave Feldman, Jeff Warren, and Joel Cunningham discovered that Bind incorrectly handled certain trunc…

  Apr 22, 2026

  first Aug 24, 2020
• Unscored
  USN-4470-1 8 CVEs

  sane-backends vulnerabilities

  Kritphong Mongkhonvanit discovered that sane-backends incorrectly handled certain packets. A remote attacker could possibly use this issue to obtain sensitive memory information. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-6318) It was discovered tha…

  Apr 22, 2026

  first Aug 24, 2020
• High max 7.8
  USN-4487-2 2 CVEs

  libx11 vulnerabilities

  USN-4487-1 fixed several vulnerabilities in libx11. This update provides the corresponding update for Ubuntu 12.04 ESM and 14.04 ESM. Original advisory details: Todd Carson discovered that libx11 incorrectly handled certain memory operations. A local attacker…

  Apr 22, 2026

  first Sep 8, 2020
• Unscored
  USN-4474-2 0 CVEs

  firefox regressions

  USN-4474-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tri…

  Apr 22, 2026

  first Sep 3, 2020
• Medium max 5.3
  USN-4519-1 1 CVE

  pulseaudio vulnerability

  Ratchanan Srirattanamet discovered that an Ubuntu-specific patch caused PulseAudio to incorrectly handle memory under certain error conditions in the Bluez 5 module. An attacker could use this issue to cause PulseAudio to crash, resulting in a denial of servi…

  Apr 22, 2026

  first Sep 17, 2020
• Medium max 5.5
  USN-4488-2 5 CVEs

  xorg-server vulnerabilities

  USN-4488-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update and also the update from USN-4490-1 for Ubuntu 14.04 ESM. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled the in…

  Apr 22, 2026

  first Sep 9, 2020
• Medium max 5.5
  USN-4510-2 1 CVE 1 exploited

  samba vulnerability

  USN-4510-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Tom Tervoort discovered that the Netlogon protocol implemented by Samba incorrectly handled the authentication scheme. A …

  Apr 22, 2026

  first Sep 17, 2020
• High max 7.5
  USN-4468-1 5 CVEs

  bind9 vulnerabilities

  Emanuel Almeida discovered that Bind incorrectly handled certain TCP payloads. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-8620) Joseph Gullo di…

  Apr 22, 2026

  first Aug 21, 2020
• Unscored
  USN-4471-2 0 CVEs

  net-snmp regression

  USN-4471-1 fixed a vulnerability in Net-SNMP. The updated introduced a regression making nsExtendCacheTime not settable. This update fixes the problem adding the cacheTime feature flag. Original advisory details: Tobias Neitzel discovered that Net-SNMP incorr…

  Apr 22, 2026

  first Sep 1, 2020
• Unscored
  USN-4456-2 3 CVEs

  dovecot vulnerabilities

  USN-4456-1 fixed several vulnerabilities in Dovecot. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: It was discovered that Dovecot incorrectly handled deeply nested MIME parts. A remote attacker could possibly u…

  Apr 22, 2026

  first Aug 17, 2020
• Unscored
  USN-4454-1 1 CVE

  samba vulnerability

  Martin von Wittich and Wilko Meyer discovered that Samba incorrectly handled certain empty UDP packets when being used as a AD DC NBT server. A remote attacker could possibly use this issue to cause Samba to crash, resulting in a denial of service.

  Apr 22, 2026

  first Aug 10, 2020
• Unscored
  USN-4454-2 1 CVE

  samba vulnerability

  USN-4454-1 fixed a vulnerability in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Martin von Wittich and Wilko Meyer discovered that Samba incorrectly handled certain empty UDP packe…

  Apr 22, 2026

  first Aug 10, 2020
• Unscored
  USN-4512-1 1 CVE

  util-linux vulnerability

  It was discovered that the umount bash completion script shipped in util-linux incorrectly handled certain mountpoints. If a local attacker were able to create arbitrary mountpoints, another user could be tricked into executing arbitrary code when attempting …

  Apr 22, 2026

  first Sep 17, 2020
• Unscored
  USN-4456-1 3 CVEs

  dovecot vulnerabilities

  It was discovered that Dovecot incorrectly handled deeply nested MIME parts. A remote attacker could possibly use this issue to cause Dovecot to consume resources, resulting in a denial of service. (CVE-2020-12100) It was discovered that Dovecot incorrectly h…

  Apr 22, 2026

  first Aug 12, 2020
• High max 7.8
  USN-4471-1 2 CVEs

  net-snmp vulnerabilities

  Tobias Neitzel discovered that Net-SNMP incorrectly handled certain symlinks. An attacker could possibly use this issue to access sensitive information. (CVE-2020-15861) It was discovered that Net-SNMP incorrectly handled certain inputs. An attacker could pos…

  Apr 22, 2026

  first Aug 24, 2020
• Medium max 5.5
  USN-4451-2 1 CVE

  ppp vulnerability

  USN-4451-1 fixed a vulnerability in ppp. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Thomas Chauchefoin working with Trend Micro´s Zero Day Initiative, discovered that ppp incorrectly han…

  Apr 22, 2026

  first Aug 6, 2020
• High max 7.8
  USN-4487-1 2 CVEs

  libx11 vulnerabilities

  Todd Carson discovered that libx11 incorrectly handled certain memory operations. A local attacker could possibly use this issue to escalate privileges. (CVE-2020-14344) Jayden Rivers discovered that libx11 incorrectly handled locales. A local attacker could …

  Apr 22, 2026

  first Sep 2, 2020