8,466 results · Feed
-
Critical max 10.0USN-7594-3 332 CVEs
linux-aws, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - RISC-V ar…
first Jul 8, 2025 -
High max 7.4USN-7533-1 3 CVEs
openjdk-17-crac vulnerabilities
Alicja Kario discovered that the JSSE component of CRaC JDK 17 incorrectly handled RSA padding. An attacker could possibly use this issue to obtain sensitive information. (CVE-2025-21587) It was discovered that the Compiler component of CRaC JDK 17 incorrectl…
first May 26, 2025 -
UnscoredUSN-7376-1 0 CVEs
mariadb vulnerability
A security issue was discovered in MariaDB and this update includes a new upstream MariaDB version to fix the issue. In addition to security fixes, the updated packages contain bug and regression fixes, new features, and possibly incompatible changes.
first Mar 27, 2025 -
UnscoredUSN-6819-2 0 CVEs
linux-aws, linux-oracle vulnerabilities
Alon Zahavi discovered that the NVMe-oF/TCP subsystem in the Linux kernel did not properly validate H2C PDU data, leading to a null pointer dereference vulnerability. A remote attacker could use this to cause a denial of service (system crash). (CVE-2023-6356…
first Jun 11, 2024 -
UnscoredUSN-6689-1 0 CVEs
ruby-rack vulnerabilities
It was discovered that Rack incorrectly parse some headers. An attacker could possibly use this issue to cause a denial of service. (CVE-2023-27539, CVE-2024-26141, CVE-2024-26146)
first Mar 12, 2024 -
UnscoredUSN-6585-1 0 CVEs
libssh2 vulnerability
Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk discovered that the SSH protocol was vulnerable to a prefix truncation attack. If a remote attacker was able to intercept SSH communications, extension negotiation messages could be truncated, possibly leading to …
first Jan 15, 2024 -
UnscoredUSN-7105-1 0 CVEs
dotnet9 vulnerabilities
It was discovered that the NrbfDecoder component in .NET did not properly handle an instance of a type confusion vulnerability. An authenticated attacker could possibly use this issue to gain the privileges of another user and execute arbitrary code. (CVE-202…
first Nov 12, 2024 -
UnscoredUSN-6438-2 0 CVEs
.Net regressions
USN-6438-1 fixed vulnerabilities in .Net. It was discovered that the fix for [CVE-2023-36799](https://ubuntu.com/security/CVE-2023-36799) was incomplete. This update fixes the problem. Original advisory details: Kevin Jones discovered that .NET did not proper…
first Oct 25, 2023 -
UnscoredUSN-7215-1 0 CVEs
libxml2 vulnerability
Xisco Fauli discovered that libxml2 incorrectly handled custom SAX handlers. A remote attacker could possibly use this issue to perform XML External Entity (XXE) attacks.
first Jan 16, 2025 -
UnscoredUSN-7379-2 0 CVEs
linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V arc…
first Apr 1, 2025 -
UnscoredUSN-6484-1 0 CVEs
openvpn vulnerabilities
It was discovered that OpenVPN incorrectly handled the --fragment option in certain configurations. A remote attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service. (CVE-2023-46849) It was discovered that OpenVPN in…
first Nov 16, 2023 -
High max 7.5USN-7366-2 3 CVEs
ruby-rack vulnerabilities
USN-7366-1 fixed vulnerabilities in Rack. This update provides the corresponding updates for Ubuntu 25.04. Original advisory details: Nhật Thái Đỗ discovered that Rack incorrectly handled certain usernames. A remote attacker could possibly use this issue to p…
first Jul 23, 2025 -
UnscoredUSN-6454-1 0 CVEs
linux, linux-lowlatency vulnerabilities
Kyle Zeng discovered that the netfilter subsystem in the Linux kernel contained a race condition in IP set operations in certain situations. A local attacker could use this to cause a denial of service (system crash). (CVE-2023-42756) Alex Birnberg discovered…
first Oct 26, 2023 -
High max 7.8USN-7611-3 5 CVEs
linux-aws vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Netfilter; - Network traffic control; (CVE-2025-38000, CVE-2025-37890, CVE-20…
first Jul 17, 2025 -
UnscoredUSN-6423-2 0 CVEs
libcue vulnerability
USN-6423-1 fixed a vulnerability in CUE. This update provides the corresponding updates for Ubuntu 23.10. Original advisory details: It was discovered that CUE incorrectly handled certain files. An attacker could possibly use this issue to expose sensitive in…
first Oct 17, 2023 -
UnscoredUSN-6636-1 0 CVEs
clamav vulnerabilities
It was discovered that ClamAV incorrectly handled parsing certain OLE2 files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2024-20290) Amit Schendel discovered that the ClamAV ClamD service i…
first Feb 14, 2024 -
High max 7.8USN-7681-2 1 CVE
linux-oracle vulnerability
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network traffic control; (CVE-2025-38083)
first Jul 31, 2025 -
UnscoredUSN-6429-3 0 CVEs
curl vulnerabilities
USN-6429-1 fixed vulnerabilities in curl. This update provides the corresponding updates for Ubuntu 23.10. Original advisory details: Jay Satiro discovered that curl incorrectly handled hostnames when using a SOCKS5 proxy. In environments where curl is config…
first Oct 17, 2023 -
Medium max 4.9USN-7564-1 1 CVE
samba vulnerability
It was discovered that Samba incorrectly handled certain group membership changes when using Kerberos authentication. A remote user could possibly use this issue to continue to access resources after being removed by an administrator.
first Jun 10, 2025 -
Medium max 6.9USN-7777-1 1 CVE
pcre2 vulnerability
It was discovered that PCRE2 incorrectly handled the Scan SubString verb. An attacker could possibly use this issue to cause applications using PCRE2 to expose sensitive information.
first Sep 25, 2025 -
Medium max 6.7USN-7763-1 1 CVE
rabbitmq-server vulnerability
It was discovered that RabbitMQ Server incorrectly included authorization headers when logging. A local attacker could possibly use this issue to obtain sensitive information.
first Sep 23, 2025 -
High max 7.5USN-7641-1 1 CVE
bind9 vulnerability
It was discovered that Bind incorrectly handled configurations where the stale-answer-client-timeout option is set to 0. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service.
first Jul 16, 2025 -
Low max 1.8USN-7534-1 1 CVE
flask vulnerability
It was discovered that Flask incorrectly handled key rotation. An attacker could possibly use this issue to sign sessions with stale keys.
first May 26, 2025 -
High max 7.5USN-7526-1 1 CVE
bind9 vulnerability
It was discovered that Bind incorrectly handled certain DNS messages with invalid TSIG. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of service.
first May 21, 2025 -
High max 8.3USN-7477-1 1 CVE
c-ares vulnerability
It was discovered that c-ares incorrectly handled re-enqueuing certain queries. A remote attacker could possibly use this issue to cause c-ares to crash, resulting in a denial of service.
first May 5, 2025 -
UnscoredUSN-7206-4 0 CVEs
rsync regression
USN-7206-3 fixed vulnerabilities in rsync for Ubuntu 24.10. The update introduced a regression in rsync. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Simon Scannell, Pedro Gallegos, and Jasiel Spelman discovere…