8,435 results · Feed
-
High max 7.4USN-8823-1 5 CVEs
pyjwt vulnerabilities
It was discovered that PyJWT incorrectly handled certain URIs when using PyJWKClient. A remote attacker could possibly use this issue to perform server-side request forgery (SSRF) or expose sensitive local files. This issue only affected Ubuntu 22.04 LTS, Ubu…
first Sep 25, 2026 -
High max 7.3USN-8822-1 2 CVEs
libwebsockets vulnerabilities
It was discovered that Libwebsockets incorrectly handled certain SSH protocol messages in its SSH protocol handler. A remote attacker could possibly use this issue to cause Libwebsockets to consume excessive resources, resulting in a denial of service. (CVE-2…
first Sep 25, 2026 -
Medium max 4.3USN-8826-1 2 CVEs
lxc vulnerabilities
Maher Azzouzi discovered that LXC did not correctly handle logging certain failure messages. An attacker could possibly use this issue to leak sensitive information. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 L…
-
Medium max 4.4USN-8825-1 1 CVE
requests vulnerability
It was discovered that Requests did not correctly handle generating random temporary file paths. An attacker could possibly use this issue to execute arbitrary code.
-
Critical max 9.1USN-8820-1 8 CVEs
curl vulnerabilities
Eunsoo Kim discovered that curl incorrectly handled SASL negotiation for LDAP authentication in certain circumstances. A machine-in-the-middle attacker could possibly use this issue to bypass peer validation. This issue only affected Ubuntu 24.04 LTS and Ubun…
first Sep 24, 2026 -
High max 8.7USN-8824-1 1 CVE
libpcap vulnerability
It was discovered that libpcap did not properly validate BPF instructions in some situation. An attacker could possibly use this issue to perform out of bound memory operations.
-
Critical max 9.4USN-8730-6 1 CVE
linux-intel-iotg-5.15 vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;
-
Critical max 9.8USN-8819-2 3 CVEs
linux-aws, linux-gcp, linux-gcp-4.15, linux-gcp-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE…
-
Critical max 9.8USN-8819-1 3 CVEs
linux, linux-hwe, linux-kvm vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE…
first Sep 24, 2026 -
High max 7.1USN-8821-1 1 CVE
swift vulnerability
It was discovered that OpenStack Swift incorrectly handled truncated aws-chunked PUT request bodies in its s3api middleware. An authenticated attacker could possibly use this issue to cause OpenStack Swift to use excessive resources, leading to a denial of se…
first Sep 24, 2026 -
High max 7.5USN-8813-1 11 CVEs
expat vulnerabilities
It was discovered that Expat did not correctly handle certain integer arithmetic. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-56406, CVE-2026-56407, CVE-2026-56409, CVE-2026-56410, CVE-2026-56411) It was discovered that E…
first Sep 24, 2026 -
High max 7.4USN-8812-1 7 CVEs
gdal vulnerabilities
It was discovered that GDAL incorrectly handled certain netCDF files. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-49014) It was discovered th…
first Sep 24, 2026 -
Critical max 9.4USN-8814-1 3 CVEs
octavia vulnerabilities
It was discovered that Octavia did not properly validate TLS cipher string fields in the Amphora provider driver. An authenticated attacker who owns a TLS-enabled load balancer could possibly use this issue to inject arbitrary HAProxy configuration directives…
first Sep 24, 2026 -
Medium max 6.5USN-8805-1 1 CVE
moodle vulnerability
It was discovered that Moodle did not properly restrict URLs. An authenticated user could possibly use this issue to perform a server-side request forgery attack and expose sensitive information.
first Sep 23, 2026 -
High max 8.2USN-8811-1 1 CVE
python-urllib3 vulnerability
It was discovered that urllib3 did not correctly strip sensitive HTTP headers during cross-origin redirects. An attacker could possibly use this issue to leak sensitive information.
-
Medium max 6.2USN-8810-1 7 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service. This issue affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 2…
-
High max 8.7USN-8807-1 1 CVE
Open-iSNS vulnerability
It was discovered that Open-iSNS contained a double-free vulnerability when decoding malformed iSNS attributes. An unauthenticated attacker could possibly use this to cause a denial of service.
first Sep 23, 2026 -
High max 8.8USN-8809-1 1 CVE
libgit2 vulnerability
Kazuma Matsumoto and Isabel Mill discovered that libgit2 incorrectly handled certain repository URLs when using the SSH transport. A remote attacker could possibly use this issue to execute arbitrary commands.
first Sep 23, 2026 -
UnscoredUSN-8287-2 0 CVEs
xdg-desktop-portal regression
USN-8287-1 fixed a vulnerability in XDG Desktop Portal. Unfortunately the fix for CVE-2026-40354 was incomplete and introduced a regression when trashing files. This update fixes the problem and provides the corresponding update for Ubuntu 26.04 LTS. We apolo…
first Sep 23, 2026 -
High max 7.1USN-8806-1 1 CVE
network-manager vulnerability
It was discovered that NetworkManager did not properly restrict the ca-path and phase2-ca-path certificate authority settings for private (single-user) 802.1X network connections. An attacker could use this issue to point their own private 802.1X connection p…
first Sep 23, 2026 -
High max 8.7USN-8808-1 3 CVEs
sqlparse vulnerabilities
It was discovered that SQL parse contained multiple algorithmic complexity flaws when parsing SQL statements with deeply nested parentheses, comments, or dollar-quoted string literals. An attacker could use this issue to cause SQL parse to consume excessive C…
first Sep 23, 2026 -
Medium max 6.9USN-8733-2 2 CVEs
gzip vulnerabilities
USN-8733-1 fixed vulnerabilities in Gzip. This update provides the corresponding fix for Gzip on Ubuntu 14.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: Michał Majchrowicz and Marcin Wyczechowski discovered that Gzip's gzexe utilit…
first Sep 22, 2026 -
High max 8.8USN-8799-1 4 CVEs
libssh2 vulnerabilities
It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A remote attacker controlling a malicious SSH server could use this issue to cause a denial of service or possibly execute arbitrary code. (CVE-2026-58050) It was disco…
first Sep 22, 2026 -
High max 7.8USN-8803-1 1 CVE
sudo vulnerability
Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that Sudo failed to apply intercept policy checks when commands were executed under certain circumstances. A local attacker permitted to run specific commands could possibly use this issue to bypass poli…
first Sep 22, 2026 -
Medium max 6.5USN-8804-1 10 CVEs
openssh vulnerabilities
Florian Kohnhäuser discovered that OpenSSH incorrectly handled shell metacharacters in certain usernames. An attacker could possibly use this issue to execute arbitrary commands when certain non-default configurations were used, resulting in arbitrary code ex…
-
Critical max 9.8USN-8661-5 21 CVEs
linux-raspi vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this…
-
Critical max 9.4USN-8730-5 1 CVE
linux-aws, linux-aws-5.15, linux-aws-fips, linux-nvidia-tegra-igx vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;
-
Medium max 6.8USN-8796-1 3 CVEs
openjdk-21 vulnerabilities
Kai Aizen discovered that the Networking component of OpenJDK 21 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2026-61308) It was discovered that the JSSE component of OpenJDK…
first Sep 21, 2026 -
Medium max 6.8USN-8795-1 3 CVEs
openjdk-17 vulnerabilities
Kai Aizen discovered that the Networking component of OpenJDK 17 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2026-61308) It was discovered that the JSSE component of OpenJDK…
first Sep 21, 2026 -
High max 7.5USN-8783-1 4 CVEs
openjdk-25 vulnerabilities
Weber Leon discovered that the 2D component of OpenJDK 25 did not correctly handle user authentication. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-70906) Kai Aizen discovered that the Networking component of OpenJD…
first Sep 21, 2026 -
High max 7.5USN-8794-1 9 CVEs
glib2.0 vulnerabilities
It was discovered that GLib's GDBus authentication mechanism failed to enforce length limitations on data lines read from a client. An unauthenticated attacker could exploit this to cause a denial of service via resource exhaustion. (CVE-2026-15588) It was di…
first Sep 21, 2026 -
High max 7.8USN-8798-1 4 CVEs
gst-plugins-good1.0 vulnerabilities
It was discovered that GStreamer Good Plugins incorrectly parsed certain MRF files. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2026-18295, CVE-2026-18296) It was discovered that GStreamer Good Plugins incorrectly parsed ce…
first Sep 21, 2026 -
High max 7.8USN-8797-1 1 CVE
gst-plugins-base1.0 vulnerability
It was discovered that GStreamer Base Plugins incorrectly handled certain OGG media files. A remote attacker could possibly use this issue to execute arbitrary code if it opened a specially crafted file.
first Sep 21, 2026 -
High max 7.5USN-8790-1 12 CVEs
expat vulnerabilities
It was discovered that Expat could be made to allocate large amounts of memory when parsing a small crafted document. An attacker could possibly use this issue to cause Expat to consume resources, leading to a denial of service. This issue was only addressed …
first Sep 21, 2026 -
High max 8.5USN-8787-1 2 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled certain XML elements under certain circumstances. An attacker could possibly use this issue to cause libxml2 to crash or execute arbitrary code. (CVE-2026-86140) It was discovered that libxml2 incorrectly han…
-
Medium max 6.8USN-8784-1 3 CVEs
openjdk-8 vulnerabilities
Kai Aizen discovered that the Networking component of OpenJDK 8 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2026-61308) It was discovered that the JSSE component of OpenJDK …
-
Medium max 5.3USN-8792-1 1 CVE
memcached vulnerability
It was discovered that Memcached incorrectly handled ASCII authentication. A remote attacker could possibly use this issue to cause Memcached to crash, resulting in a denial of service.
-
Medium max 6.8USN-8785-1 3 CVEs
openjdk-lts vulnerabilities
Kai Aizen discovered that the Networking component of OpenJDK 11 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2026-61308) It was discovered that the JSSE component of OpenJDK…
-
Critical max 9.4USN-8730-4 1 CVE
linux-azure-fde, linux-intel-iotg, linux-kvm, linux-oracle, linux-xilinx-zynqmp vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;
-
High max 7.5USN-8789-1 11 CVEs
strongswan vulnerabilities
It was discovered that strongSwan incorrectly handled PKCS#7 containers in the openssl plugin. A remote attacker could possibly use this issue to cause strongSwan to crash, resulting in a denial of service. (CVE-2026-78123) It was discovered that strongSwan i…