8,435 results · Feed
-
High max 7.8USN-6872-2 4 CVEs
linux-lowlatency, linux-lowlatency-hwe-6.5 vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystem: - Netfilter; (CVE-2024-26809, CVE-2024-26643, CVE-2024-26925, CVE-2024-26924)
first Jul 4, 2024 -
UnscoredUSN-8285-1 0 CVEs
gst-plugins-good1.0 vulnerability
It was discovered that GStreamer Good Plugins incorrectly handled certain MOV/MP4 media files. A remote attacker could use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service, or possibly execute arbitrary code.
first May 20, 2026 -
UnscoredUSN-8624-1 0 CVEs
ruby-sinatra vulnerability
It was discovered that Sinatra did not properly handle header parsing, causing ETag generation to hang when given specific input. A remote attacker could possibly use this issue to cause a denial of service.
first Jul 29, 2026 -
UnscoredUSN-8625-1 0 CVEs
openssl vulnerability
It was discovered that OpenSSL incorrectly allocated memory buffers in the SSL/TLS state machine when receiving handshake data. A remote attacker could possibly use this issue to cause OpenSSL to consume excessive memory, leading to a denial of service. This …
-
Medium max 5.5USN-6215-1 2 CVEs
dwarves-dfsg vulnerabilities
It was discovered that dwarves incorrectly handled certain memory operations under certain circumstances. An attacker could possibly use this issue to cause dwarves to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2022-3534…
first Jul 11, 2023 -
Medium max 5.5USN-5759-2 2 CVEs
libbpf vulnerabilities
USN-5759-1 fixed vulnerabilities in LibBPF. This update provides the corresponding updates for Ubuntu 20.04 ESM. Original advisory details: It was discovered that LibBPF incorrectly handled certain memory operations under certain circumstances. An attacker co…
first Dec 8, 2022 -
Medium max 5.5USN-5759-1 3 CVEs
libbpf vulnerabilities
It was discovered that LibBPF incorrectly handled certain memory operations under certain circumstances. An attacker could possibly use this issue to cause LibBPF to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only …
first Dec 5, 2022 -
UnscoredUSN-8590-1 0 CVEs
exim4 vulnerabilities
It was discovered that Exim incorrectly handled certain command line options. A local attacker could possibly use this issue to access files outside of the spool area. It was discovered that Exim incorrectly handled string expansion in .local files. A local a…
first Jul 22, 2026 -
UnscoredUSN-8410-1 0 CVEs
node-shell-quote vulnerability
Akshat Sinha discovered that shell-quote improperly validated object-token inputs. An attacker could possibly use this issue to cause shell-quote to crash, resulting in a denial of service, or execute arbitrary code.
first Jun 9, 2026 -
Critical max 9.8
Kernel Live Patch Security Notice
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU…
first Jun 1, 2026 -
UnscoredUSN-8479-1 0 CVEs
libheif vulnerabilities
It was discovered that libheif incorrectly handled certain crafted HEIF files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-47178) It was discovered that libheif incorrectly validated offsets when…
first Jun 29, 2026 -
UnscoredUSN-8526-2 0 CVEs
libheif vulnerabilities
USN-8526-1 fixed vulnerabilities in libheif. This update provides the corresponding updates for CVE-2026-47709 and CVE-2026-47714 in Ubuntu 24.04 LTS. Original advisory details: Junyi Liu discovered that libheif had a null pointer dereference in its image til…
first Jul 14, 2026 -
UnscoredUSN-8561-2 0 CVEs
freerdp3 regression
USN-8561-1 fixed vulnerabilities in FreeRDP. Unfortunately, the upgrade to version 3.30.0 introduced a regression in the clipboard functionality. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered t…
first Jul 28, 2026 -
High max 7.5USN-8614-1 2 CVEs
python2.7, python3.5 vulnerabilities
It was discovered that Python incorrectly handled expanding environment variables in os.path.expandvars() when the input was user-controlled. An attacker could possibly use this issue to cause Python to consume resources, leading to a denial of service. (CVE-…
first Jul 27, 2026 -
UnscoredUSN-8613-1 0 CVEs
FreeIPMI vulnerabilities
Zhihan Zheng discovered that FreeIPMI had several buffer overflow vulnerabilities in ipmi-oem response message handling. A local attacker with control a malicious IPMI device or simulator could possibly cause FreeIPMI to crash, resulting in a denial of servic…
first Jul 27, 2026 -
High max 7.3USN-8612-1 1 CVE
roc-toolkit vulnerability
It was discovered that Roc Toolkit incorrectly handled WAV files with a malformed "smpl" chunk. An attacker could use this issue to cause Roc Toolkit to crash, resulting in a denial of service, or possibly execute arbitrary code.
-
Critical max 9.8USN-8611-1 7 CVEs
glibc vulnerabilities
It was discovered that the GNU C Library iconv function incorrectly handled certain IBM character sets. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-4046) It was discovered that the GNU C Library DNS functions incorrectly …
-
UnscoredUSN-8553-1 0 CVEs
dotnet8, dotnet10 vulnerabilities
Artur Stetsko discovered that the .NET did not properly validate authentication data. An attacker could possibly use this issue to elevate privileges. (CVE-2026-47300) Levi Broderick discovered that .NET did not properly handle XML encryption during parsing. …
first Jul 15, 2026 -
UnscoredUSN-8599-1 0 CVEs
libhttp-date-perl vulnerability
It was discovered that HTTP-Date incorrectly handled parsing certain date strings. An attacker could possibly use this issue to cause HTTP-Date to use excessive resources, leading to a denial of service.
first Jul 23, 2026 -
UnscoredUSN-8435-1 0 CVEs
squid vulnerabilities
It was discovered that Squid incorrectly handled FTP gateway processing under certain circumstances, which could result in an out-of-bounds read. A remote attacker could use this issue to cause Squid to crash, resulting in a denial of service, or possibly obt…
first Jun 16, 2026 -
UnscoredUSN-8506-1 0 CVEs
request-tracker5 vulnerabilities
Aleksander Iwicki discovered that Request Tracker did not properly sanitize the search "Page" URL parameter. A remote attacker could possibly use this issue to conduct a reflected cross-site scripting attack. (CVE-2026-6841) It was discovered that Request Tra…
first Jul 6, 2026 -
UnscoredUSN-8036-1 0 CVEs
haproxy vulnerability
Asim Viladi Oglu Manizada discovered that HAProxy incorrectly handled certain INITIAL packets. A remote attacker could possibly use this issue to cause HAProxy to crash, resulting in a denial of service.
first Feb 12, 2026 -
High max 7.4USN-8602-1 1 CVE
libinput vulnerability
It was discovered that libinput did not properly escape device properties. A local attacker could possibly use this issue to inject arbitrary udev properties and execute arbitrary code as root.
first Jul 23, 2026 -
Medium max 5.5USN-8600-1 1 CVE
libxpm vulnerability
Naoki Wakamatsu discovered that libXpm did not properly validate file boundaries when processing XPM image files. An attacker could possibly use this issue to cause libXpm to crash, resulting in a denial of service.
first Jul 23, 2026 -
Medium max 5.9USN-8601-1 1 CVE
pam vulnerability
It was discovered that PAM had a timing discrepancy in the pam_userdb module when comparing plaintext passwords. An attacker could possibly use this issue to obtain sensitive information by measuring response-timing differences during repeated authentication …
first Jul 23, 2026 -
High max 7.5USN-8369-2 1 CVE
libapache-mod-jk regression
USN-8369-1 fixed a vulnerability in mod_jk. It was discovered that for Ubuntu 18.04 LTS, during the update preparation phase, a previous fix for CVE-2023-41081 was incorrectly dropped. This update reintroduces the fix for CVE-2023-41081. We apologize for the …
-
High max 7.3USN-8322-2 2 CVEs
commons-beanutils regression
USN-8322-1 fixed a vulnerability in Apache Commons BeanUtils. It was discovered that for Ubuntu 18.04 LTS, during the update preparation phase, a previous fix for CVE-2014-0114 and CVE-2019-10086 was incorrectly dropped. This update reintroduces the fix for C…
-
UnscoredUSN-8591-1 0 CVEs
python-aiohttp vulnerabilities
Sean Gilligan discovered that AIOHTTP did not properly limit memory usage when processing HTTP headers and trailers. An attacker could possibly use this issue to consume excessive system resources, resulting in a denial of service. (CVE-2026-22815) It was dis…
first Jul 22, 2026 -
Critical max 9.8USN-8589-1 3 CVEs
apache2 vulnerabilities
It was discovered that Apache HTTP Server's mod_ldap module incorrectly handled memory when processing per-directory configurations. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-29167) It wa…
first Jul 22, 2026 -
Medium max 5.1USN-8588-1 4 CVEs
gawk vulnerabilities
It was discovered that Gawk incorrectly handled memory when processing input using the getline redirection. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-40467) It was discovered that Gawk incorrectly handled certain intege…
first Jul 22, 2026 -
UnscoredUSN-8581-1 0 CVEs
libarchive vulnerabilities
It was discovered that libarchive did not properly manage memory when unpacking certain RAR5 archives, leading to a double free. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-14164) It was discovered that libarchive did not…
first Jul 21, 2026 -
High max 7.5USN-8587-1 1 CVE
libhtml-parser-perl vulnerability
It was discovered that HTML-Parser incorrectly handled entity references when the input string was identical to an entity value in the lookup table. An attacker could possibly use this issue to obtain sensitive information.
-
High max 7.6USN-8584-1 1 CVE
gst-plugins-good1.0 vulnerabilities
It was discovered that GStreamer Good Plugins incorrectly handled certain Matroska files. An attacker could possibly use this issue to cause GStreamer Good Plugins to crash, resulting in a denial of service. This issue only affected Ubuntu 22.04 LTS and Ubunt…
-
High max 8.2USN-8583-1 2 CVEs
giflib vulnerabilities
It was discovered that GIFLIB incorrectly handled certain GIF image files. If a user or automated system were tricked into opening a specially crafted GIF file, a remote attacker could use this issue to cause GIFLIB to crash, resulting in a denial of service,…
-
Medium max 5.9USN-8585-1 3 CVEs
krb5 vulnerabilities
It was discovered that Kerberos had an integer underflow vulnerability in the berval2tl_data() function. An attacker could possibly use this issue to cause Kerberos to crash, resulting in a denial of service. (CVE-2026-11850) It was discovered that Kerberos h…
-
Medium max 6.1USN-8586-1 8 CVEs
libgphoto2 vulnerabilities
It was discovered that libgphoto2 did not properly validate buffer boundaries when parsing EOS image format data. An attacker with physical access could possibly use this issue to obtain sensitive information. (CVE-2026-40333) It was discovered that libgphoto…
-
Medium max 5.0USN-8477-3 1 CVE
tar regression
USN-8477-1 fixed a vulnerability in tar. That fix was incomplete and could cause tar to fail to extract old archives that recorded a nonzero size for directory entries, resulting in a regression. This update fixes the problem. We apologize for the inconvenien…
-
UnscoredUSN-8582-1 0 CVEs
jbig2dec vulnerabilities
Zeng Yunxiang and Song Jiaxuan discovered that jbig2dec had an out-of-bounds read vulnerability in its command-line tool. An attacker could possibly use this issue to cause jbig2dec to crash, resulting in a denial of service. This issue only affected Ubuntu 2…
first Jul 21, 2026 -
UnscoredUSN-8558-1 0 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick did not limit mutual references between MVG files. An attacker could possibly use this issue to cause a stack overflow, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18…
first Jul 20, 2026 -
High max 8.4USN-8579-1 3 CVEs
snapd vulnerabilities
James Henstridge discovered that snapd's default apparmor template did not restrict access to systemd-userdbd varlink interface. A local attacker could possibly use this issue to obtain sensitive information. (CVE-2024-5300) Qualys discovered that snap-confin…