8,435 results · Feed
-
High max 7.5USN-8695-1 9 CVEs
openjdk-25-crac vulnerabilities
It was discovered that the JSSE component of CRaC JDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of CRaC JDK 25 did not …
-
High max 7.5USN-8693-1 9 CVEs
openjdk-17-crac vulnerabilities
It was discovered that the JSSE component of CRaC JDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of CRaC JDK 17 did not …
-
High max 7.1USN-8691-1 1 CVE
attr vulnerability
It was discovered that attr incorrectly handled symbolic links while traversing directory paths. A local attacker who controlled a pathname component could possibly use this issue to redirect privileged attr operations to arbitrary files and gain elevated pri…
-
High max 7.5USN-8694-1 9 CVEs
openjdk-21-crac vulnerabilities
It was discovered that the JSSE component of CRaC JDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of CRaC JDK 21 did not …
-
High max 7.3USN-8705-1 1 CVE
zfs-linux vulnerability
It was discovered that OpenZFS incorrectly handled authorization checks for certain ioctl operations on Linux. A local attacker could possibly use this issue to perform pool-administrative operations or access privileged information, resulting in an authoriza…
-
Low max 2.1USN-8692-1 1 CVE
diffutils vulnerability
It was discovered that GNU diffutils incorrectly handled certain integer arithmetic when mapping line ranges in diff3. A local attacker could possibly use this issue to cause diff3 to crash, resulting in a denial of service.
-
High max 8.8USN-8703-1 47 CVEs
webkit2gtk vulnerabilities
Several security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting a…
-
High max 8.4USN-8700-1 29 CVEs
mysql-8.0, mysql-8.4 vulnerabilities
Multiple security issues were discovered in MySQL. MySQL has been updated to 8.4.11 in Ubuntu 26.04 LTS. Ubuntu 22.04 LTS and Ubuntu 24.04 LTS packages have been updated with backported patches. In addition to security fixes, the updated packages contain bug …
-
Critical max 9.8USN-8684-1 9 CVEs
perl vulnerabilities
It was discovered that Perl incorrectly handled certain arguments to Socket and pack/unpack functions. An attacker could possibly use this issue to read sensitive information from memory. (CVE-2026-12087, CVE-2026-57432) It was discovered that Perl incorrectl…
first Aug 27, 2026 -
Critical max 9.8USN-8644-3 7 CVEs
linux-azure, linux-azure-4.15, linux-azure-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N. meshing prot…
first Aug 27, 2026 -
Medium max 6.7USN-8699-1 9 CVEs
libssh vulnerabilities
It was discovered that libssh had a stack buffer overflow in its SFTP server when constructing directory listing entries for long filenames. An attacker could possibly use this issue to cause libssh to crash or execute arbitrary code. This issue only affected…
-
Medium max 6.8USN-8686-1 2 CVEs
opencryptoki vulnerabilities
It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded length was zero. An attacker could possibly use this issue to trigger out-of-bounds reads. (CVE-2026-40253) It was discovered that openCryptoki incorrectly …
first Aug 27, 2026 -
Medium max 4.6USN-8697-1 2 CVEs
coreutils vulnerabilities
It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield() function. A local attacker could possibly use this issue to cause GNU Core Utilities to crash, resulting in a denial of service, or obtain sensitive information. (CV…
-
Critical max 9.8
Kernel Live Patch Security Notice
In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free in ipc_msg_send_request ipc_msg_send_request() waits for a generic netlink reply using an ipc_msg_table_entry on the stack. In the Linux kernel, the following v…
first Aug 27, 2026 -
High max 7.5USN-8696-1 1 CVE
bind9 vulnerability
It was discovered that Bind incorrectly handled DNSSEC validation when a domain was covered by both NSEC and NSEC3 records with only one type having an RRSIG. A remote attacker could possibly use this issue to cause Bind to crash, resulting in a denial of ser…
-
High max 7.5USN-8689-1 9 CVEs
openjdk-26 vulnerabilities
It was discovered that the JSSE component of OpenJDK 26 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of OpenJDK 26 did not co…
-
Medium max 6.2USN-8687-1 2 CVEs
p11-kit vulnerabilities
It was discovered that p11-kit incorrectly handled certain RPC messages. A local attacker could use this issue to cause p11-kit to crash, resulting in a denial of service. (CVE-2026-13757) It was discovered that p11-kit incorrectly handled nested attribute de…
first Aug 27, 2026 -
Critical max 9.8USN-8643-5 4 CVEs
linux-azure-6.8, linux-ibm, linux-ibm-6.8, linux-oracle-6.8, linux-raspi, linux-raspi-realtime vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-5…
first Aug 27, 2026 -
Critical max 9.8USN-8658-4 3 CVEs
linux-azure-fde-5.15 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-6453…
first Aug 27, 2026 -
Medium max 5.5USN-7915-1 3 CVEs
radare2 vulnerabilities
It was discovered that Radare2 contained several memory leaks. An attacker could possibly use these issues to cause a denial of service.
first Dec 8, 2025 -
Medium max 5.3USN-8683-1 2 CVEs
libheif vulnerabilities
Feng Ning discovered that libheif incorrectly handled certain image transforms. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. (CVE-2026-62289) A…
first Aug 26, 2026 -
UnscoredUSN-7010-2 1 CVE
dcmtk regression
USN-7010-1 fixed vulnerabilities in DCMTK. The update introduced a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Jinsheng Ba discovered that DCMTK incorrectly handled certain requests. If a user or a…
first Jul 8, 2025 -
UnscoredUSN-8698-1 0 CVEs
freerdp3 vulnerabilities
It was discovered that FreeRDP contained multiple security issues. An attacker could possibly use these issues to obtain sensitive information, cause FreeRDP to crash, resulting in a denial of service, or execute arbitrary code.
-
UnscoredUSN-8688-1 0 CVEs
pam vulnerability
Juthawong Naisanguansee discovered that PAM incorrectly cleared failed login attempt records when certain services invoked the account phase without first performing authentication. An attacker could possibly use this issue to reset failed login counters, res…
first Aug 27, 2026 -
High max 8.2USN-8202-1 6 CVEs
jq vulnerabilities
It was discovered that jq did not correctly handle certain string concatenations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue was addressed in Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LT…
first Apr 23, 2026 -
High max 7.5USN-5882-1 10 CVEs
dcmtk vulnerabilities
Gjoko Krstic discovered that DCMTK incorrectly handled buffers. If a user or an automated system were tricked into opening a certain specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only af…
first Feb 22, 2023 -
Critical max 10.0USN-7824-1 1 CVE
redis vulnerability
Benny Isaacs, Nir Brakha, and Sagi Tzadik discovered that Redis incorrectly handled memory when running Lua scripts. An authenticated attacker could use this vulnerability to trigger a use-after-free condition, and potentially achieve remote code execution on…
first Oct 15, 2025 -
Critical max 9.1USN-8678-2 4 CVEs
openssl, openssl1.0 vulnerabilities
USN-8678-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding fix for OpenSSL and OpenSSL 1.0 on Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, and Ubuntu 18.04 LTS. In addition, this update also fixes the following issues that were not previously …
first Aug 25, 2026 -
High max 7.5USN-8682-1 3 CVEs
bind9 vulnerabilities
Vitaly Simonovich discovered that Bind could exhaust memory during GSS-API TKEY negotiation. A remote attacker could possibly use this issue to cause Bind to use excessive resources, leading to a denial of service. (CVE-2026-3039) Shuhan Zhang discovered that…
first Aug 26, 2026 -
Medium max 4.0USN-8655-1 1 CVE
async-http-client vulnerability
It was discovered that AsyncHttpClient did not properly verify that the responding host was allowed to set cookies for a given domain in its ThreadSafeCookieStore. An attacker could use this to plant cookies scoped to unrelated domains, which would then be se…
first Aug 20, 2026 -
High max 8.2USN-8654-1 2 CVEs
netty vulnerabilities
It was discovered that Netty did not properly handle malformed HTTP/2 control frames. An attacker could use this to cause a denial of service via resource exhaustion. This issue only affects Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 24.…
first Aug 20, 2026 -
High max 7.5USN-8681-1 9 CVEs
openjdk-25 vulnerabilities
It was discovered that the JSSE component of OpenJDK 25 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of OpenJDK 25 did not co…
-
High max 7.5USN-8677-1 9 CVEs
openjdk-21 vulnerabilities
It was discovered that the JSSE component of OpenJDK 21 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of OpenJDK 21 did not co…
first Aug 25, 2026 -
High max 7.5USN-8674-1 11 CVEs
openjdk-lts vulnerabilities
It was discovered that the JSSE component of OpenJDK 11 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of OpenJDK 11 did not co…
first Aug 25, 2026 -
High max 7.5USN-8676-1 9 CVEs
openjdk-17 vulnerabilities
It was discovered that the JSSE component of OpenJDK 17 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the JSSE component of OpenJDK 17 did not co…
first Aug 25, 2026 -
High max 7.5USN-8673-1 10 CVEs
openjdk-8 vulnerabilities
It was discovered that the JSSE component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to read or modify sensitive data. (CVE-2026-46968) It was discovered that the ImageIO component of OpenJDK 8 did not c…
first Aug 25, 2026 -
High max 7.8USN-8680-1 2 CVEs
ffmpeg vulnerabilities
Adrian Junge discovered that FFmpeg incorrectly handled certain subtitle data. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-70628) Adrian Junge discovered that FFmpeg incorrectly handled certain v…
first Aug 25, 2026 -
High max 7.8USN-8659-4 1 CVE
linux-oracle vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;
-
High max 7.5USN-8670-2 1 CVE
curl vulnerability
USN-8670-1 fixed a vulnerability in curl. This update provides the corresponding update for Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. Original advisory details: Joshua Rogers discovered that curl incorrectly handled reusing connections when cl…
first Aug 25, 2026 -
Critical max 9.8USN-8643-4 4 CVEs
linux-aws-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips, linux-nvidia-tegra vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-5…
first Aug 25, 2026