8,435 results · Feed
-
Critical max 9.8USN-8791-1 1 CVE
ghostscript vulnerability
It was discovered that Ghostscript incorrectly handled JPEG 2000 image components with mismatched subsampling factors. An attacker could possibly use this issue to cause Ghostscript to crash or execute arbitrary code if it opened a specially crafted file.
-
High max 7.5USN-8788-1 7 CVEs
clamav vulnerabilities
It was discovered that ClamAV incorrectly handled certain zip archive files. A remote attacker could possibly use this issue to cause ClamAV to crash, resulting in a denial of service. (CVE-2026-20337, CVE-2026-20338) It was discovered that ClamAV incorrectly…
-
High max 7.5USN-8786-1 1 CVE
rsyslog vulnerability
It was discovered that rsyslog incorrectly calculated buffer sizes when replacing strings. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service.
-
High max 7.1USN-8437-1 3 CVEs
librabbitmq vulnerabilities
It was discovered that rabbitmq-c exposed credentials in command-line arguments under certain circumstances. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2…
first Jun 16, 2026 -
High max 7.1USN-8724-1 3 CVEs
librabbitmq vulnerabilities
It was discovered that the rabbitmq-c command-line tools only accepted credentials on the command line, making them visible to other local users through the process list. An attacker could possibly use this to obtain sensitive credentials. This issue only aff…
first Sep 3, 2026 -
High max 8.1USN-8598-1 1 CVE
rsyslog vulnerabilities
It was discovered that rsyslog incorrectly handled regex-based TCP framing in the imptcp module. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service. It was discovered that rsyslog incorrectly handled ov…
first Jul 23, 2026 -
High max 7.8USN-6131-1 5 CVEs
linux, linux-aws, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4 vulnerabilities
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (sy…
first Jun 1, 2023 -
High max 7.8USN-6130-1 4 CVEs
linux, linux-aws, linux-aws-hwe, linux-azure, linux-azure-4.15, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle, linux-snapdragon vulnerabilities
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (sy…
first Jun 1, 2023 -
High max 7.8USN-6127-1 5 CVEs
linux, linux-aws, linux-aws-5.15, linux-azure, linux-azure-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gke-5.15, linux-gkeop, linux-hwe-5.15, linux-hwe-5.19, linux-ibm, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (sy…
first May 31, 2023 -
High max 7.8USN-6135-1 5 CVEs
linux-azure-fde, linux-azure-fde-5.15 vulnerabilities
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (sy…
first Jun 2, 2023 -
High max 7.8USN-6162-1 5 CVEs
linux-intel-iotg-5.15 vulnerabilities
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (sy…
first Jun 14, 2023 -
High max 7.8USN-6150-1 5 CVEs
linux-intel-iotg, linux-raspi vulnerabilities
Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (sy…
first Jun 8, 2023 -
Medium max 5.8USN-8780-1 3 CVEs
libsoup2.4, libsoup3 vulnerabilities
It was discovered that libsoup incorrectly handled certain URLs when using an HTTP proxy. A remote attacker could possibly use this issue to inject arbitrary HTTP headers. (CVE-2026-1467) It was discovered that libsoup did not remove proxy authentication cred…
first Sep 17, 2026 -
High max 8.8USN-8779-1 2 CVEs
bubblewrap vulnerabilities
It was discovered that Bubblewrap incorrectly handled certain temporary directories. A local attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 18.04 LTS. (CVE-2019-12439) It was disc…
first Sep 17, 2026 -
Medium max 5.3USN-8774-1 2 CVEs
libheif vulnerabilities
Ali Firas discovered that libheif incorrectly handled certain images. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-62291) Dmitrijs Trizna discovered that libheif incorrectly handled certain image …
first Sep 16, 2026 -
Critical max 9.8USN-8714-3 5 CVEs
linux-azure-5.4, linux-gcp-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; (CVE-2026-53043, CVE-2026-53224, CVE-2026…
-
Critical max 9.8USN-8725-2 8 CVEs
linux-aws vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVIDIA Tegra memory controller driver; - File systems infrastructure; - Netwo…
-
Critical max 9.4USN-8730-3 1 CVE
linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - IPv6 networking; - Netfilter;
-
Critical max 9.8USN-8782-1 1 CVE
rclone vulnerability
It was discovered that Rclone incorrectly handled unauthenticated requests to the remote control API. An attacker could possibly use this issue to execute arbitrary commands as the user invoking rclone. (CVE-2026-49980)
-
Critical max 9.8USN-8715-2 37 CVEs
linux-aws-fips vulnerabilities
Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this…
-
UnscoredUSN-8779-2 0 CVEs
bubblewrap regression
USN-8779-1 fixed vulnerabilities in Bubblewrap. Unfortunately, the fix for CVE-2026-87766 introduced a regression in symlink resolution, preventing certain Flatpak applications from launching. This update reverts that fix until a complete fix is available. We…
first Sep 17, 2026 -
High max 7.5USN-8778-1 1 CVE
gst-plugins-good1.0 vulnerability
It was discovered that GStreamer Good Plugins did not limit the size of reassembly buffers when processing fragmented RTP packets. A remote attacker could possibly use this issue to cause GStreamer Good Plugins to use excessive resources, leading to a denial …
first Sep 17, 2026 -
Medium max 6.8USN-8777-1 1 CVE
bison vulnerability
It was discovered that GNU Bison incorrectly handled grammar-defined configuration variables when generating HTML reports. An attacker could possibly use this issue to execute arbitrary code.
first Sep 17, 2026 -
Medium max 4.0USN-8775-1 1 CVE
sqlite3 vulnerability
It was discovered that SQLite was vulnerable to a buffer overflow in the sqlar extension. If a user were tricked into opening a specially crafted SQLar archive, an attacker could cause a denial of service.
first Sep 16, 2026 -
High max 8.7USN-8776-1 4 CVEs
python-cryptography vulnerabilities
It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. This would result in corrupted output, contrary to expectations. This issue only affected Ubuntu 18.04 LTS. (CVE-2023-239…
first Sep 16, 2026 -
High max 8.8USN-8771-1 3 CVEs
valkey vulnerabilities
Madelyn Olson discovered that Valkey incorrectly handled TLS connections under certain conditions. A remote attacker could possibly use this issue to cause Valkey to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-56684) It was d…
first Sep 16, 2026 -
High max 7.7USN-8737-1 6 CVEs
glibc vulnerabilities
It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justification padding. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 26.…
first Sep 8, 2026 -
High max 7.7USN-8737-2 6 CVEs
glibc vulnerabilities
USN-8737-1 fixed vulnerabilities in GNU C Library. This update provides the corresponding fixes for Ubuntu 24.04 LTS. Original advisory details: It was discovered that GNU C Library had a buffer overflow in the strfmon function when handling right-justificati…
first Sep 10, 2026 -
Medium max 5.7USN-8736-2 2 CVEs
perl vulnerabilities
USN-8736-1 fixed vulnerabilities in Perl. This update provides the corresponding fix for Perl on Ubuntu 24.04 LTS. Original advisory details: It was discovered that Perl incorrectly handled certain large inputs during regular expression matching. An attacker …
first Sep 16, 2026 -
High max 7.5USN-8514-2 1 CVE
openssh vulnerability
USN-8514-1 fixed a vulnerability in OpenSSH. This update provides the corresponding fix for Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenSSH incorrectly handled file permissions when downloadi…
-
High max 8.1USN-8773-1 2 CVEs
guix vulnerability
It was discovered that GNU Guix incorrectly made build outputs accessible to local users before their file metadata was finalized. A local attacker could possibly use this issue to gain elevated privileges.
-
High max 7.6USN-8772-1 4 CVEs
aom vulnerabilities
It was discovered that AOM incorrectly handled the first-pass statistics buffer in Look-Ahead Processing (LAP) mode. An attacker could possibly use this issue to cause a heap buffer overflow, leading to a denial of service or possibly execute arbitrary code. …
-
Medium max 6.1USN-8759-1 2 CVEs
python-webob vulnerabilities
It was discovered that WebOb incorrectly handled certain URLs. An attacker could possibly use this issue to control a redirect or forward to another URL. This issue was only addressed in Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. (CVE-2024-42353) Caleb Brown disc…
first Sep 15, 2026 -
High max 8.2USN-8769-1 5 CVEs
phpseclib vulnerability
It was discovered that phpseclib did not perform padding validation in constant time when using AES in CBC mode. A remote attacker could possibly use this issue to conduct a padding oracle timing attack and obtain sensitive information.
first Sep 15, 2026 -
Medium max 6.5USN-8765-1 1 CVE
python-sql vulnerability
Cédric Krier discovered that python-sql incorrectly escaped values passed to unary operators. An attacker could possibly use this issue to perform SQL injection attacks.
first Sep 15, 2026 -
High max 8.8USN-8770-1 3 CVEs
simplesamlphp vulnerabilities
It was discovered that SimpleSAMLphp incorrectly validated cryptographic signatures in XML messages. An authenticated attacker could possibly use this issue to impersonate users or gain elevated privileges. This issue only affected Ubuntu 16.04 LTS and Ubuntu…
first Sep 15, 2026 -
Critical max 9.1USN-8768-1 1 CVE
shibboleth-sp vulnerability
Florian Stuhlmann discovered that Shibboleth incorrectly escaped input when using the ODBC storage plugin. A remote attacker could possibly use this issue to perform SQL injection attacks and obtain sensitive information.
first Sep 15, 2026 -
Critical max 9.8USN-8767-1 1 CVE
snapcast vulnerability
It was discovered that Snapcast incorrectly handled crafted JSON-RPC requests. A remote attacker could possibly use this issue to execute arbitrary code or obtain sensitive information.
first Sep 15, 2026 -
High max 7.8USN-8763-1 4 CVEs
kitty vulnerabilities
It was discovered that kitty incorrectly escaped error messages when handling specially crafted terminal escape sequences. A remote attacker could possibly use this issue to execute arbitrary commands. (CVE-2026-42850) It was discovered that kitty incorrectly…
first Sep 15, 2026 -
UnscoredUSN-8766-1 0 CVEs
suricata-update vulnerability
Guillem Lefait discovered that Suricata-Update did not properly validate destination paths when extracting files referenced by downloaded rule archives. An attacker could possibly use this issue to write arbitrary files outside the configured rules directory.
first Sep 15, 2026