8,435 results · Feed
-
Critical max 9.8USN-8658-3 3 CVEs
linux-azure, linux-azure-fde, linux-nvidia-tegra-igx vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-6453…
first Aug 25, 2026 -
Critical max 9.8USN-8675-1 4 CVEs
perl vulnerabilities
It was discovered that Perl incorrectly handled short source addresses in the Socket module. An attacker could possibly use this issue to trigger an out-of-bounds heap read, resulting in information disclosure. (CVE-2026-12087) It was discovered that Perl inc…
first Aug 25, 2026 -
High max 7.8USN-8659-3 1 CVE
linux-azure, linux-azure-fde vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;
first Aug 25, 2026 -
High max 7.5USN-8670-1 1 CVE
curl vulnerability
Joshua Rogers discovered that curl incorrectly handled reusing connections when client certificate settings changed. This could result in the wrong client certificates being used, contrary to expectations.
first Aug 24, 2026 -
High max 8.8USN-8671-1 3 CVEs
ffmpeg vulnerabilities
Adrian Junge was discovered that FFmpeg incorrectly handled certain media files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-66036, CVE-2026-66039) Adrian Junge discovered that FFmpeg incorrectly…
first Aug 24, 2026 -
UnscoredUSN-8628-1 0 CVEs
libgit2 vulnerabilities
It was discovered that libgit2 incorrectly handled the Git Smart Protocol. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. (CVE-2016-10128)…
first Aug 12, 2026 -
UnscoredUSN-8580-2 0 CVEs
accountsservice vulnerabilities
USN-8580-1 fixed vulnerabilities in AccountsService. This update provides the corresponding fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that the Ubuntu-specific SetLanguage…
first Jul 21, 2026 -
UnscoredUSN-8580-1 0 CVEs
accountsservice vulnerabilities
It was discovered that the Ubuntu-specific SetLanguage patch to AccountsService incorrectly handled dropping privileges. A local attacker could use this issue to execute arbitrary commands as an administrator. (CVE-2026-61897) It was discovered that the Ubunt…
first Jul 21, 2026 -
UnscoredUSN-8494-1 0 CVEs
libvncserver vulnerability
It was discovered that LibVNCServer incorrectly handled the Tight decoder in libvncclient. A remote attacker could use this issue to cause LibVNCServer to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jul 2, 2026 -
UnscoredUSN-8423-1 0 CVEs
lwip vulnerabilities
It was discovered that lwIP contained a buffer overflow in the EAP authentication handling code. An attacker could possibly use this issue to trigger a buffer overflow, resulting in arbitrary code execution or a denial of service. This issue only affected Ubu…
first Jun 11, 2026 -
UnscoredUSN-8407-1 0 CVEs
strongswan vulnerability
Elliott Childre discovered that strongSwan incorrectly handled the cloning of certain identities. A remote attacker could use this issue to cause strongSwan to crash, resulting in a denial of service, or possibly execute arbitrary code.
first Jun 8, 2026 -
High max 7.8USN-8659-2 1 CVE
linux-hwe-7.0 vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;
first Aug 21, 2026 -
Critical max 9.8USN-8643-3 4 CVEs
linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-5…
first Aug 21, 2026 -
Critical max 9.8USN-8658-2 3 CVEs
linux-ibm vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-53246, CVE-2026-6453…
first Aug 21, 2026 -
UnscoredUSN-8415-1 0 CVEs
vim vulnerabilities
It was discovered that Vim incorrectly handled marked filenames in the netrw plugin. An attacker could possibly use this issue to execute arbitrary code. (CVE-2026-43961) It was discovered that Vim incorrectly handled filenames when decompressing certain arch…
first Jun 9, 2026 -
Critical max 9.8USN-8662-1 16 CVEs
linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - InfiniBand drivers; - Media drivers;…
first Aug 20, 2026 -
High max 7.8USN-8659-1 1 CVE
linux, linux-aws, linux-aws-7.0, linux-ibm, linux-oem-7.0, linux-raspi, linux-realtime vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems: - Open vSwitch;
first Aug 20, 2026 -
Critical max 9.8USN-8643-2 4 CVEs
linux-gke, linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - Open vSwitch; - SCTP protocol; (CVE-2026-53224, CVE-2026-5…
first Aug 20, 2026 -
Critical max 9.8USN-8644-2 7 CVEs
linux-gcp, linux-gcp-4.15, linux-gcp-fips vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N. meshing prot…
first Aug 20, 2026 -
UnscoredUSN-8543-2 0 CVEs
wget regression
USN-8543-1 fixed vulnerabilities in Wget. The update for CVE-2026-58472 was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Wget mishandled semic…
first Aug 20, 2026 -
UnscoredUSN-8398-4 0 CVEs
nginx vulnerability
USN-8398-3 fixed a vulnerability in nginx. This update provides the corresponding fix for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that nginx incorrectly handled certain cookie he…
first Jul 2, 2026 -
High max 8.8USN-8653-1 30 CVEs
postgresql-14, postgresql-16, postgresql-18 vulnerabilities
It was discovered that PostgreSQL incorrectly handled COPY FROM STDIN when an early failure occurred. An authenticated user could possibly use this issue to execute arbitrary SQL commands. (CVE-2026-6464) It was discovered that PostgreSQL incorrectly reset ex…
-
UnscoredUSN-8649-1 0 CVEs
libheif vulnerabilities
It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was applied twice. An attacker could possibly use this issue to cause libheif to crash, resulting in a denial of service. (CVE-2026-62289) It was discove…
first Aug 19, 2026 -
UnscoredUSN-8526-1 0 CVEs
libheif vulnerabilities
Xianrui Dong discovered that libheif had an out-of-bounds read in its HEIF sequence track parser. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-4725…
first Jul 9, 2026 -
High max 7.8USN-8652-1 8 CVEs
libvirt vulnerabilities
It was discovered that libvirt incorrectly handled guest reboots in the libxl driver. An attacker in a guest could possibly use this issue to cause the libvirt daemon to crash, resulting in a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-…
first Aug 19, 2026 -
UnscoredUSN-8651-1 0 CVEs
curl vulnerability
It was discovered that curl incorrectly handled reusing connections when the origin changed between transfers. A remote attacker could possibly use this issue to obtain sensitive information.
first Aug 19, 2026 -
UnscoredUSN-8563-4 0 CVEs
nginx regression
USN-8563-3 fixed a vulnerability in nginx. The fix introduced a regression in certain environments. This update reverts the fix for CVE-2026-42533 pending further investigation. We apologize for the inconvenience. Original advisory details: It was discovered …
first Aug 19, 2026 -
Medium max 6.3USN-8650-1 2 CVEs
capnproto vulnerabilities
Chanho Kim and Jihyeok Han discovered that Cap'n Proto incorrectly handled negative Content-Length values or excessively large chunk sizes when processing HTTP messages. An attacker could possibly use these issues to cause HTTP messages to be interpreted inco…
first Aug 19, 2026 -
UnscoredUSN-8563-3 0 CVEs
nginx vulnerability
USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause a regression. This update includes a better fix for CVE-2026-42533. We apologize for the inconvenience. Original advisory details: It was…
first Aug 19, 2026 -
High max 8.6USN-8648-1 8 CVEs
bind9 vulnerabilities
It was discovered that Bind incorrectly accepted NSEC3 records whose signer name did not match the owning zone. A remote attacker could possibly use this issue to perform NSEC3 impersonation attacks, bypassing DNSSEC validation. (CVE-2026-10723) It was discov…
-
Critical max 9.8USN-8113-2 2 CVEs
tiff vulnerabilities
USN 8113-1 fixed vulnerabilities in tiff. This update provides the corresponding fixes for Ubuntu 26.04 LTS. Original advisory details: It was discovered that LibTIFF did not properly handle memory when processing certain images. An attacker could possibly us…
-
UnscoredUSN-8390-2 0 CVEs
linux-azure, linux-gcp, linux-hwe, linux-oracle vulnerability
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processin…
first Jun 17, 2026 -
UnscoredUSN-8361-3 0 CVEs
linux, linux-aws, linux-kvm vulnerability
A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Packet sockets; (CVE-2026-31504)
first Jun 17, 2026 -
UnscoredUSN-8644-1 0 CVEs
linux, linux-aws, linux-aws-fips, linux-aws-hwe, linux-fips, linux-hwe, linux-kvm vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - File systems infrastructure; - OCFS2 file system; - B.A.T.M.A.N. meshing prot…
first Aug 18, 2026 -
High max 7.8USN-8641-1 4 CVEs
dotnet8, dotnet10 vulnerabilities
Miha Zupan discovered that .NET did not properly interpret certain HTTP requests. An attacker could possibly use this issue to perform request smuggling and bypass a security feature. (CVE-2026-62899) Ivan Demchuk discovered that .NET did not properly handle …
first Aug 18, 2026 -
Critical max 9.8USN-8646-1 6 CVEs
linux vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - B.A.T.M.A.N. meshing protocol; - Netfilter; - SCTP proto…
first Aug 18, 2026 -
UnscoredUSN-8639-1 0 CVEs
libpng, libpng1.6 vulnerabilities
Patrick Keshishian discovered that libpng incorrectly handled certain text chunks. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10087) It was discovered that libpng incorrectly ha…
first Aug 17, 2026 -
High max 8.2USN-8640-1 1 CVE
engrampa vulnerability
It was discovered that Engrampa incorrectly handled symbolic links when extracting certain archives. An attacker could possibly use this issue to write arbitrary files and execute arbitrary code.
-
UnscoredUSN-8621-1 0 CVEs
samba vulnerabilities
It was discovered that Samba's pam_winbind incorrectly handled home directory ownership when mkhomedir was enabled. A local attacker could possibly use this issue to cause a denial of service by triggering a change in ownership of the root directory. (CVE-202…
first Jul 28, 2026 -
UnscoredUSN-8627-1 0 CVEs
yelp vulnerability
It was discovered that Yelp incorrectly handled certain crafted help documents due to an overly permissive Content Security Policy. An attacker could trick a user into opening a specially crafted document, possibly resulting in the disclosure of sensitive inf…
first Aug 11, 2026