Ubuntu Security Notices (USN)

8,464 results · Feed

• Unscored
  USN-4278-3 0 CVEs

  firefox regressions

  USN-4278-1 fixed vulnerabilities in Firefox. The update introduced various minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tri…

  Apr 22, 2026

  first Feb 26, 2020
• Unscored
  USN-4281-1 5 CVEs

  webkit2gtk vulnerabilities

  A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …

  Apr 22, 2026

  first Feb 18, 2020
• Unscored
  USN-4293-1 1 CVE

  libarchive vulnerabilities

  It was discovered that libarchive incorrectly handled certain archive files. An attacker could possibly use this issue to access sensitive information. (CVE-2019-19221) It was discovered that libarchive incorrectly handled certain archive files. An attacker c…

  Apr 22, 2026

  first Mar 2, 2020
• Unscored
  USN-4278-1 4 CVEs

  firefox vulnerabilities

  Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, conduct cross-site scripting (XSS) attacks, or execute arbitrary c…

  Apr 22, 2026

  first Feb 13, 2020
• Unscored
  USN-4261-1 3 CVEs

  webkit2gtk vulnerabilities

  A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …

  Apr 22, 2026

  first Jan 29, 2020
• Unscored
  USN-4248-1 10 CVEs

  graphicsmagick vulnerabilities

  It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.

  Apr 22, 2026

  first Jan 22, 2020
• Unscored
  USN-4279-2 0 CVEs

  php7.0 regression

  USN-4279-1 fixed vulnerabilities in PHP. The updated packages caused a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that PHP incorrectly handled certain scripts. An attacker could …

  Apr 22, 2026

  first Feb 19, 2020
• Medium max 4.7
  USN-4247-1 2 CVEs

  python-apt vulnerabilities

  It was discovered that python-apt would still use MD5 hashes to validate certain downloaded packages. If a remote attacker were able to perform a machine-in-the-middle attack, this flaw could potentially be used to install altered packages. (CVE-2019-15795) I…

  Apr 22, 2026

  first Jan 22, 2020
• Medium max 5.1
  USN-4271-1 1 CVE

  mesa vulnerability

  Tim Brown discovered that Mesa incorrectly handled shared memory permissions. A local attacker could use this issue to obtain and possibly alter sensitive information belonging to another user.

  Apr 22, 2026

  first Feb 6, 2020
• Unscored
  USN-4270-1 1 CVE

  exiv2 vulnerability

  It was discovered that Exiv2 incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service.

  Apr 22, 2026

  first Feb 5, 2020
• High max 7.3
  USN-4193-1 1 CVE

  ghostscript vulnerability

  Paul Manfred and Lukas Schauer discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary f…

  Apr 22, 2026

  first Nov 14, 2019
• Medium max 4.8
  USN-4239-1 4 CVEs

  php5, php7.0, php7.2, php7.3 vulnerabilities

  It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 14.04 ESM, 16.04 LTS, 18.04 LTS, 19.04 and 19.10. (CVE-2019-11045) It was discovered that PHP…

  Apr 22, 2026

  first Jan 15, 2020
• Unscored
  USN-4190-1 4 CVEs

  libjpeg-turbo vulnerabilities

  It was discovered that libjpeg-turbo incorrectly handled certain BMP images. An attacker could possibly use this issue to expose sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2018-14498) It was discovered that lib…

  Apr 22, 2026

  first Nov 13, 2019
• Unscored
  USN-4198-1 5 CVEs

  djvulibre vulnerabilities

  It was discovered that DjVuLibre incorrectly handled certain memory operations. If a user or automated system were tricked into processing a specially crafted DjVu file, a remote attacker could cause applications to hang or crash, resulting in a denial of ser…

  Apr 22, 2026

  first Nov 21, 2019
• Unscored
  USN-4266-1 7 CVEs

  graphicsmagick vulnerabilities

  It was discovered that GraphicsMagick incorrectly handled certain image files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.

  Apr 22, 2026

  first Feb 4, 2020
• Medium max 4.7
  USN-4247-3 2 CVEs

  python-apt vulnerabilities

  USN-4247-1 fixed several vulnerabilities in python-apt. This update provides the corresponding updates for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that python-apt would still use MD5 hashes to validate certain downl…

  Apr 22, 2026

  first Jan 23, 2020
• Unscored
  USN-4236-3 1 CVE

  libgcrypt11 vulnerability

  USN-4236-1 fixed a vulnerability in Libgcrypt. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Libgcrypt was susceptible to a ECDSA timing attack. An attacker could pos…

  Apr 22, 2026

  first Jan 28, 2020
• Unscored
  USN-4236-2 1 CVE

  libgcrypt20 vulnerability

  USN-4236-1 fixed a vulnerability in Libgcrypt. This update provides the corresponding fix for Ubuntu 16.04 LTS. Original advisory details: It was discovered that Libgcrypt was susceptible to a ECDSA timing attack. An attacker could possibly use this attack to…

  Apr 22, 2026

  first Jan 14, 2020
• Unscored
  USN-4247-2 0 CVEs

  python-apt regression

  USN-4247-1 fixed vulnerabilities in python-apt. The updated packages caused a regression when attempting to upgrade to a new Ubuntu release. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that p…

  Apr 22, 2026

  first Jan 22, 2020
• Unscored
  USN-4173-1 1 CVE

  freetds vulnerability

  Felix Wilhelm discovered that FreeTDS incorrectly handled certain types after a protocol downgrade. A remote attacker could use this issue to cause FreeTDS to crash, resulting in a denial of service, or possibly execute arbitrary code.

  Apr 22, 2026

  first Oct 30, 2019
• Unscored
  USN-4181-1 2 CVEs

  webkit2gtk vulnerabilities

  A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …

  Apr 22, 2026

  first Nov 12, 2019
• Unscored
  USN-4170-2 0 CVEs

  whoopsie regression

  USN-4170-1 fixed a vulnerability in Whoopsie. The update caused Whoopsie to crash when sending reports. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kevin Backhouse discovered Whoopsie incorrectly handled very …

  Apr 22, 2026

  first Oct 30, 2019
• Unscored
  USN-4172-2 1 CVE

  file vulnerability

  USN-4172-1 fixed a vulnerability in file. This update provides the corresponding update for Ubuntu 12.04 ESM Ubuntu 14.04 ESM. Original advisory details: It was discovered that file incorrectly handled certain malformed files. An attacker could use this issue…

  Apr 22, 2026

  first Oct 31, 2019
• Unscored
  USN-4189-2 0 CVEs

  dpdk regression

  USN-4189-1 fixed a vulnerability in DPDK. The new version introduced a regression in certain environments. This update fixes the problem. Original advisory details: Jason Wang discovered that DPDK incorrectly handled certain messages. An attacker in a malicio…

  Apr 22, 2026

  first Nov 25, 2019
• Medium max 5.3
  USN-4167-1 3 CVEs

  samba vulnerabilities

  Michael Hanselmann discovered that the Samba client code incorrectly handled path separators. If a user were tricked into connecting to a malicious server, a remote attacker could use this issue to cause the client to access local pathnames instead of network…

  Apr 22, 2026

  first Oct 29, 2019
• High max 8.8
  USN-4178-1 4 CVEs 1 exploited

  webkit2gtk vulnerabilities

  A large number of security issues were discovered in the WebKitGTK+ Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site …

  Apr 22, 2026

  first Nov 7, 2019
• Unscored
  USN-4170-3 0 CVEs

  whoopsie regression

  USN-4170-1 fixed a vulnerability in Whoopsie and USN-4170-2 fixed a subsequent regression. That update was incomplete and could still result in Whoopsie potentially crashing when uploading crash reports on some architectures. This update fixes the problem. We…

  Apr 22, 2026

  first Nov 5, 2019
• Medium max 5.3
  USN-4167-2 2 CVEs

  samba vulnerabilities

  USN-4167-1 fixed several vulnerabilities in Samba. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: Michael Hanselmann discovered that the Samba client code incorrectly handled path separators…

  Apr 22, 2026

  first Oct 29, 2019
• High max 7.5
  USN-4197-1 1 CVE

  bind9 vulnerability

  It was discovered that Bind incorrectly handled certain TCP-pipelined queries. A remote attacker could possibly use this issue to cause Bind to consume resources, resulting in a denial of service.

  Apr 22, 2026

  first Nov 21, 2019
• High max 8.8
  USN-4241-1 11 CVEs 1 exploited

  thunderbird vulnerabilities

  Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, conduct cross-site scripting (XSS) attac…

  Apr 22, 2026

  first Jan 16, 2020
• Unscored
  USN-4172-1 1 CVE

  file vulnerability

  It was discovered that file incorrectly handled certain malformed files. An attacker could use this issue to cause a denial of service, or possibly execute arbitrary code.

  Apr 22, 2026

  first Oct 30, 2019
• High max 8.7
  USN-4166-2 1 CVE 1 exploited

  php5 vulnerability

  USN-4166-1 fixed a vulnerability in PHP. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that PHP incorrectly handled certain paths when being used in FastCGI configurations…

  Apr 22, 2026

  first Oct 29, 2019
• Unscored
  USN-4150-1 7 CVEs

  thunderbird vulnerabilities

  It was discovered that encrypted S/MIME parts in a multipart message can leak plaintext contents when included in a HTML reply or forward in some circumstances. If a user were tricked in to replying to or forwarding a specially crafted message, an attacker co…

  Apr 22, 2026

  first Oct 8, 2019
• Unscored
  USN-4159-1 1 CVE

  exiv2 vulnerability

  It was discovered that Exiv2 incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service.

  Apr 22, 2026

  first Oct 21, 2019
• Critical max 9.8
  USN-4146-2 2 CVEs

  clamav vulnerabilities

  USN-4146-1 fixed several vulnerabilities in ClamAV. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that ClamAV incorrectly handled unpacking ZIP files. A remote attacker co…

  Apr 22, 2026

  first Oct 3, 2019
• High max 8.7
  USN-4166-1 1 CVE 1 exploited

  php7.0, php7.2, php7.3 vulnerability

  It was discovered that PHP incorrectly handled certain paths when being used in FastCGI configurations. A remote attacker could possibly use this issue to execute arbitrary code.

  Apr 22, 2026

  first Oct 28, 2019
• Unscored
  USN-4138-1 1 CVE

  libreoffice vulnerability

  It was discovered that LibreOffice incorrectly handled embedded scripts in document files. If a user were tricked into opening a specially crafted document, a remote attacker could possibly execute arbitrary code.

  Apr 22, 2026

  first Sep 24, 2019
• Unscored
  USN-4134-3 1 CVE

  ibus vulnerability

  USN-4134-1 fixed a vulnerability in IBus. The update caused a regression in some Qt applications and the fix was subsequently reverted in USN-4134-2. The regression has since been resolved and so this update fixes the original vulnerability. We apologize for …

  Apr 22, 2026

  first Mar 24, 2020
• Unscored
  USN-4064-1 10 CVEs

  thunderbird vulnerabilities

  A sandbox escape was discovered in Thunderbird. If a user were tricked in to installing a malicious language pack, an attacker could exploit this to gain additional privileges. (CVE-2019-9811) Multiple security issues were discovered in Thunderbird. If a user…

  Apr 22, 2026

  first Jul 17, 2019
• Unscored
  USN-4122-2 0 CVEs

  firefox regression

  USN-4122-1 fixed vulnerabilities in Firefox. The update caused a regression that resulted in a crash when changing YouTube playback speed in some circumstances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Mult…

  Apr 22, 2026

  first Oct 8, 2019