8,409 results · Feed
-
High max 7.8USN-6865-1 9 CVEs
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
It was discovered that the ext4 file system implementation in the Linux kernel did not properly validate data state on write operations. An attacker could use this to construct a malicious ext4 file system image that, when mounted, could cause a denial of ser…
first Jul 3, 2024 -
Critical max 9.8USN-6766-2 91 CVEs
linux-hwe-5.15, linux-raspi vulnerabilities
It was discovered that the Open vSwitch implementation in the Linux kernel could overflow its stack during recursive action operations under certain conditions. A local attacker could use this to cause a denial of service (system crash). (CVE-2024-1151) Sande…
first May 15, 2024 -
High max 7.5USN-8936-1 10 CVEs
php8.5, php8.3, php8.1, php7.4, php7.2, php7.0, php5 vulnerabilities
It was discovered that PHP did not properly validate the size of MySQL server packets in the mysqlnd driver. A malicious server could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue was only addressed in Ubuntu 20.0…
first Oct 19, 2026 -
Medium max 5.9USN-8957-1 1 CVE
authd vulnerability
Ali Mashally discovered that authd did not properly validate user identities when matching accounts from identity providers. An attacker could possibly use this issue to gain access to another user's local account and files, resulting in unauthorized access t…
first Oct 27, 2026 -
Medium max 6.5USN-8934-1 4 CVEs
pyjwt vulnerabilities
Kingsley Olukanni discovered that PyJWT did not properly handle unknown key identifiers when retrieving signing keys. An attacker could possibly use this issue to amplify requests to the configured key endpoint, resulting in a denial of service. This issue on…
first Oct 19, 2026 -
Critical max 9.1USN-8916-2 6 CVEs
pyjwt vulnerabilities
USN-8916-1 fixed vulnerabilities in PyJWT. This update provides the corresponding fix for PyJWT on Ubuntu 26.10. Original advisory details: YuSung Han discovered that PyJWT did not properly validate certain JWK keys when performing HMAC verification. An attac…
first Oct 15, 2026 -
Critical max 9.1USN-8916-1 6 CVEs
pyjwt vulnerabilities
YuSung Han discovered that PyJWT did not properly validate certain JWK keys when performing HMAC verification. An attacker could possibly use this issue to forge authentication tokens. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-102266) Rohan Das dis…
first Oct 13, 2026 -
High max 8.1USN-8411-1 6 CVEs
node-lodash vulnerabilities
It was discovered that Lodash was vulnerable to a prototype pollution issue in the zipObjectDeep function. An attacker could possibly use this issue to modify application behavior. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. (CVE-2020-8203…
first Jun 9, 2026 -
Critical max 9.2
php8.1, php8.3, php8.5 vulnerabilities
It was discovered that PHP incorrectly handled out-of-memory conditions while processing requests. A remote attacker could use this issue to execute arbitrary code. (CVE-2026-109618) It was discovered that PHP incorrectly managed internal request state across…
first Oct 21, 2026 -
High max 7.1USN-8221-1 1 CVE
wheel vulnerability
It was discovered that wheel did not correctly handle certain file paths. If a user or automated system were tricked into opening a specially crafted file, an attacker could possibly use this issue to execute arbitrary code.
first Apr 29, 2026 -
High max 8.8USN-8105-1 32 CVEs
freerdp3 vulnerabilities
It was discovered that FreeRDP incorrectly handled certain RDP packets. A remote attacker could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Mar 18, 2026 -
Low max 2.1USN-8137-1 1 CVE
ruby2.3, ruby2.5, ruby2.7, ruby3.0, ruby3.2, ruby3.3 vulnerability
It was discovered that the Ruby URI gem did not properly handle sensitive information when combining URIs. A remote attacker could possibly use this issue to leak authentication credentials.
first Mar 31, 2026 -
Medium max 5.3USN-8093-2 1 CVE
libssh vulnerability
USN-8093-1 fixed a vulnerability in libssh. This update provides the corresponsing fix for Ubuntu 26.04 LTS. Original advisory details: It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a client applicatio…
first Aug 19, 2026 -
High max 8.8USN-8059-1 2 CVEs
linux, linux-gkeop, linux-hwe-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-raspi vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)
first Feb 24, 2026 -
High max 8.7USN-8042-1 12 CVEs
freerdp2, freerdp3 vulnerabilities
It was discovered that FreeRDP incorrectly handled memory under certain circumstances, which could lead to a NULL pointer dereference. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-23948) It was discovered that FreeRDP did …
first Feb 16, 2026 -
High max 8.2USN-8087-1 1 CVE
python-cryptography vulnerability
It was discovered that python-cryptography incorrectly handled subgroup validation for SECT curves. A remote attacker could use this issue to perform a subgroup attack and possibly recover the least significant bits of private keys.
first Mar 12, 2026 -
High max 8.2USN-8087-3 1 CVE
python-cryptography vulnerability
USN-8087-1 fixed a vulnerability in python-cryptography. This update provides the corresponding update to Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that python-cryptography incorrectly handled subgr…
first Apr 28, 2026 -
High max 8.8USN-8059-9 2 CVEs
linux-azure-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)
first Mar 24, 2026 -
High max 8.8USN-8059-6 2 CVEs
linux-aws, linux-aws-6.8, linux-ibm, linux-ibm-6.8, linux-xilinx vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)
first Feb 26, 2026 -
High max 8.8USN-8059-5 2 CVEs
linux-fips, linux-gcp-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)
first Feb 25, 2026 -
High max 8.3USN-8039-1 1 CVE
libpng1.6 vulnerability
It was discovered that the libpng simplified API incorrectly handled quantizing RGB images. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to cause libpng to crash, resulting in a denial …
first Feb 12, 2026 -
Medium max 5.3USN-8093-1 1 CVE
libssh vulnerability
It was discovered that libssh incorrectly performed bounds checking when processing SFTP extensions. If a client application queried extension data out of bounds, it could cause the application to crash, resulting in a denial of service, or exhibit unintended…
first Mar 16, 2026 -
High max 8.3USN-8081-1 2 CVEs
libpng vulnerabilities
It was discovered that libpng did not properly handle memory when processing certain PNG files. An attacker could possibly use this issue to cause libpng to crash, resulting in a denial of service, or disclose sensitive information. (CVE-2025-64505) Joshua In…
first Mar 11, 2026 -
High max 8.8USN-8059-4 2 CVEs
linux-realtime, linux-realtime-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)
first Feb 25, 2026 -
High max 8.8USN-8059-3 2 CVEs
linux-gcp, linux-gcp-6.8, linux-gke, linux-oracle-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)
first Feb 25, 2026 -
High max 8.8USN-8059-2 2 CVEs
linux-raspi-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)
first Feb 24, 2026 -
High max 8.6USN-8047-1 1 CVE
pillow vulnerability
Yarden Porat discovered that Pillow incorrectly handled certain malformed PSD images. An attacker could use this issue to cause Pillow to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Feb 17, 2026 -
High max 7.7USN-8040-1 1 CVE
munge vulnerability
Titouan Lazard discovered that MUNGE contained an exploitable buffer overflow in munged (the MUNGE authentication daemon). A local attacker could possibly use this issue to forge MUNGE credentials, leading to arbitrary code execution.
first Feb 12, 2026 -
High max 8.3USN-8035-1 4 CVEs
libpng1.6 vulnerabilities
It was discovered that the libpng simplified API incorrectly processed palette PNG images with partial transparency and gamma correction. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this issue to…
first Feb 12, 2026 -
High max 8.8USN-8059-8 2 CVEs
linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)
first Mar 10, 2026 -
High max 8.8USN-8059-7 2 CVEs
linux-aws-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - SMB network file system; (CVE-2025-22037, CVE-2025-37899)
first Mar 4, 2026 -
High max 7.7USN-8004-2 1 CVE
freerdp2 regression
USN-8004-1 fixed vulnerabilities in FreeRDP. The update for CVE-2026-23533 introduced a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Kim Dong Han discovered that FreeRDP did not correctly validate t…
first Feb 8, 2026 -
High max 7.7USN-8004-1 5 CVEs
freerdp2 vulnerabilities
Kim Dong Han discovered that FreeRDP did not correctly validate the size of certain variables, which could cause a buffer overflow. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Feb 3, 2026 -
High max 8.6USN-8027-1 3 CVEs
python-multipart vulnerabilities
It was discovered that Python-Multipart incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause Python-Multipart to consume excessive resources, leading to a regular expression denial of service. This issue only aff…
first Feb 11, 2026 -
High max 8.1USN-8021-1 1 CVE
imagemagick vulnerability
Benny Isaacs discovered that ImageMagick did not properly manage memory when processing certain image files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.
first Feb 10, 2026 -
High max 8.8USN-7980-1 12 CVEs
openssl vulnerabilities
Stanislav Fort, Petr Šimeček, and Hamza discovered that OpenSSL incorrectly validated PBMAC1 parameters when doing PKCS#12 MAC verification. An attacker could possibly use this issue to cause OpenSSL to crash, resulting in a denial of service. This issue only…
first Jan 27, 2026 -
Critical max 9.2
php5, php7.0, php7.2, php7.4 vulnerabilities
USN-8948-1 fixed vulnerabilities in Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 26.04 LTS and Ubuntu 26.10. This provides the corrosponding updates in Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was …
first Oct 21, 2026 -
Medium max 5.4USN-7696-1 3 CVEs
libssh vulnerabilities
Ronald Crane discovered that libssh incorrectly handled certain base64 conversions. An attacker could use this issue to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-4877) Ronald Crane discovered that l…
first Aug 14, 2025 -
High max 7.2USN-7679-1 2 CVEs
sqlite3 vulnerabilities
It was discovered that SQLite incorrectly handled aggregate terms. An attacker could use this issue to cause SQLite to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-6965) It was discovered that SQLite incorrectly handl…
first Jul 29, 2025 -
High max 8.1USN-7619-1 7 CVEs
libssh vulnerabilities
Ronald Crane discovered that libssh incorrectly handled certain base64 conversions. An attacker could use this issue to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-4877) Ronald Crane discovered that l…
first Jul 7, 2025