8,435 results · Feed
-
Medium max 6.1USN-8578-1 1 CVE
CUPS vulnerability
It was discovered that CUPS did not properly filter control characters in IPP string attributes and PPD keywords. An unauthenticated attacker could exploit this to execute arbitrary code as the lp user on systems with shared target queues.
-
Medium max 4.2USN-8577-1 1 CVE
openssh vulnerability
USN-8222-1 fixed a vulnerability in OpenSSH. This update provides the corresponding fix for Ubuntu 16.04 LTS. Original advisory details: Vladimir Tokarev discovered that OpenSSH incorrectly handled certificates with the principal name containing a comma chara…
-
UnscoredUSN-8563-2 0 CVEs
nginx regression
USN-8563-1 fixed vulnerabilities in nginx. One of the fixes introduced ABI changes that could cause issues with external modules. This update reverts the fix for CVE-2026-42533 pending further investigation. We apologize for the inconvenience. Original adviso…
first Jul 20, 2026 -
UnscoredUSN-8563-1 0 CVEs
nginx vulnerabilities
It was discovered that nginx incorrectly handled certain map directives using regex matching and capture variables. A remote attacker could use this issue to cause nginx to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026…
first Jul 20, 2026 -
Medium max 6.5USN-8562-1 1 CVE
freetype vulnerability
It was discovered that FreeType incorrectly handled certain variable font files. An attacker could possibly use this issue to cause FreeType to crash, resulting in a denial of service, or obtain sensitive information.
first Jul 20, 2026 -
Medium max 5.9USN-8572-1 1 CVE
wget vulnerability
It was discovered that Wget did not properly validate the IP address provided in an FTP PASV response when operating in FTP passive mode. A remote attacker controlling a malicious FTP server, or an HTTP server that redirects to an FTP URL, could possibly use …
first Jul 20, 2026 -
Medium max 6.1USN-8565-1 2 CVEs
sqlite3 vulnerabilities
It was discovered that SQLite did not properly handle NULL pointer dereferences in the Session Extension when applying a corrupt changeset. An attacker could possibly use this issue to cause SQLite to crash, resulting in a denial of service. (CVE-2026-50812) …
first Jul 20, 2026 -
Medium max 5.6USN-8564-1 1 CVE
php8.1, php8.3, php8.5 vulnerabilities
It was discovered that PHP incorrectly handled certain TLS setup failures, resulting in a NULL pointer dereference. An attacker could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue only affected Ubuntu 26.04 LTS. (…
first Jul 20, 2026 -
Critical max 9.8USN-8571-1 15 CVEs
apache2 vulnerabilities
Pavel Kohout and Arkadi Vainbrand discovered that Apache HTTP Server incorrectly handled certain memory operations in mod_authn_socache. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-33007) Haruki Oyama, Merih Mengist…
first Jul 20, 2026 -
Medium max 6.1USN-8559-1 6 CVEs
rlottie vulnerabilities
It was discovered that rlottie incorrectly handled certain shift operations. An attacker could possibly use this issue to cause rlottie to read out of bounds, resulting in a denial of service or exposing sensitive information. (CVE-2026-10305) It was discover…
first Jul 20, 2026 -
High max 8.5USN-8560-1 4 CVEs
libxfont vulnerabilities
It was discovered that libXfont incorrectly handled scaling bitmap fonts, leading to a heap buffer overflow. An attacker able to access the X server could use this issue to cause libXfont to crash, resulting in a denial of service, or possibly execute arbitra…
first Jul 20, 2026 -
UnscoredUSN-8161-1 0 CVEs
qemu vulnerabilities
It was discovered that the LSI53C895A SCSI Host Bus Adapter implementation of QEMU incorrectly handled memory. An attacker inside the guest could possibly use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary c…
first Apr 9, 2026 -
UnscoredUSN-8536-1 0 CVEs
mariadb vulnerabilities
It was discovered that MariaDB did not properly validate parameters supplied by a joiner node during a State Snapshot Transfer using the mariabackup method. An attacker could possibly use this issue to execute arbitrary shell commands on the donor node. (CVE-…
first Jul 14, 2026 -
Medium max 5.0USN-8477-2 1 CVE
tar regression
USN-8477-1 fixed a vulnerability in tar. The update introduced a regression that could cause tar to fail to extract certain valid files. This update fixes the problem. Original advisory details: It was discovered that tar incorrectly handled certain crafted a…
first Jul 16, 2026 -
Critical max 9.1USN-8557-1 4 CVEs
python-authlib vulnerabilities
Jay Neiva and Mauro Carrillo discovered that Authlib did not properly validate cryptographic keys embedded in JWT headers. An attacker could possibly use this issue to forge trusted tokens, resulting in authentication and authorization bypass. (CVE-2026-27962…
first Jul 16, 2026 -
UnscoredUSN-8477-1 0 CVEs
tar vulnerability
It was discovered that tar incorrectly handled certain crafted archive files. An attacker could possibly use this to inject hidden files with attacker-controlled content, bypassing pre-extraction inspection mechanisms.
first Jun 25, 2026 -
Medium max 5.8USN-8556-1 2 CVEs
ruby2.3 vulnerabilities
It was discovered that the Net::IMAP client in Ruby did not properly sanitize Symbol arguments passed to IMAP commands. A remote attacker controlling a malicious IMAP server, or able to influence command arguments, could use this to inject arbitrary IMAP comm…
-
Critical max 9.0USN-8555-1 3 CVEs
ubuntu-advantage-tools vulnerabilities
Bilal Teke discovered that Ubuntu Advantage Tools exposed the Pro bearer token in command-line arguments when validating APT credentials. A local attacker could possibly use this issue to obtain sensitive information and gain unauthorized access to Ubuntu Pro…
-
UnscoredUSN-8552-1 0 CVEs
sympa vulnerability
It was discovered that Sympa did not properly validate input on the generic SSO login. A remote attacker could possibly use this issue to perform a path traversal attack and gain unintended access.
-
Critical max 9.1USN-8551-1 4 CVEs
tomcat8 vulnerabilities
It was discovered that Tomcat incorrectly handled authorization when multiple method constraints defined the same HTTP method. A remote attacker could possibly use this issue to bypass authorization restrictions. (CVE-2026-43515) It was discovered that the To…
-
Medium max 6.5USN-8550-1 1 CVE
libslirp vulnerability
It was discovered that libslirp incorrectly handled TCP urgent data. A privileged attacker inside a guest VM could possibly use this issue to obtain sensitive information from the host process memory.
-
Medium max 6.9USN-8549-1 1 CVE
python-idna vulnerability
It was discovered that idna did not properly reject oversized inputs before performing expensive processing. An attacker could possibly use this issue to cause idna to consume significant resources, leading to a denial of service.
-
Critical max 9.8USN-8544-1 3 CVEs
luajit vulnerabilities
It was discovered that LuaJIT incorrectly handled certain inputs. An attacker could possibly use these issues to cause a crash, resulting in a denial of service, or execute arbitrary code.
first Jul 14, 2026 -
UnscoredUSN-8456-1 0 CVEs
libxml2 vulnerability
Geoffrey Humphreys discovered that libxml2 had a use after free when parsing the internal subset of a DTD. A remote attacker could possibly use this issue to cause a denial of service or possibly execute arbitrary code.
first Jun 22, 2026 -
UnscoredUSN-8134-1 0 CVEs
pyasn1 vulnerabilities
It was discovered that pyasn1 could exhaust system resources when attempting to decode a malformed certificate. An attacker could possibly use this to cause a denial of service. (CVE-2026-23490) Kevin Tu discovered that pyasn1 could exhaust system resources v…
first Mar 30, 2026 -
UnscoredUSN-8129-1 0 CVEs
pyasn1 vulnerability
It was discovered that pyasn1 incorrectly handled recursion when decoding ASN.1 data. An attacker could use this issue to cause pyasn1 to consume resources, leading to a denial of service.
first Mar 30, 2026 -
Critical max 9.1USN-8543-1 5 CVEs
wget vulnerabilities
It was discovered that Wget mishandled semicolons in the userinfo subcomponent of a URL. A remote attacker could possibly use this issue to trick a user into connecting to a different host than intended. This issue only affected Ubuntu 14.04 LTS. (CVE-2024-38…
first Jul 14, 2026 -
High max 8.4USN-8541-1 3 CVEs
vim vulnerabilities
Hirohito Higashi discovered that Vim incorrectly escaped class or trait names when performing PHP omni-completion. An attacker could possibly use this issue to trick a user into opening a specially crafted PHP file and executing arbitrary commands. This issue…
first Jul 14, 2026 -
Medium max 5.9USN-8542-1 2 CVEs
dnsmasq vulnerabilities
Yiwei Hou discovered that Dnsmasq incorrectly handled logging of DS or DNSKEY. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2026-12725) It was discovered that Dnsmasq incorrectly validated the length of fixed-length DNS r…
first Jul 14, 2026 -
High max 8.2USN-8539-1 5 CVEs
gnutls28 vulnerabilities
Haruto Kimura discovered that GnuTLS did not properly apply permitted name constraints in certain certificate validation paths. A remote attacker could possibly use this issue to bypass certificate validation, leading to a machine-in-the-middle attack. (CVE-2…
-
Medium max 6.8USN-8538-1 1 CVE
alsa-lib vulnerability
It was discovered that alsa-lib incorrectly handled certain ALSA configuration text. An attacker could use this issue to cause alsa-lib to crash, resulting in a denial of service, or possibly execute arbitrary code.
-
High max 7.5USN-8537-1 1 CVE
python-httplib2 vulnerability
It was discovered that httplib2 performed unbounded decompression of HTTP response bodies when the server used gzip or deflate Content-Encoding. A remote attacker could possibly use this issue to cause httplib2 to use excessive resources, leading to a denial …
-
Medium max 5.4USN-8534-1 6 CVEs
libreoffice vulnerabilities
It was discovered that LibreOffice incorrectly handled importing DXF drawings. An attacker could use this issue to cause LibreOffice to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-6039) It was discovered that LibreOf…
first Jul 13, 2026 -
Medium max 6.5USN-8535-1 2 CVEs
pipewire vulnerabilities
It was discovered that PipeWire accepted unbounded Content-Length values in its RAOP module. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS. (CVE-2026-14324) It was discovered that PipeW…
first Jul 13, 2026 -
High max 7.7USN-8533-1 8 CVEs
openssh vulnerabilities
It was discovered that OpenSSH sftp did not properly constrain the location of downloaded files when connecting to an attacker-controlled server. An attacker could possibly use this issue to write files to unintended locations on the file system. (CVE-2026-59…
-
High max 7.8USN-8496-3 1 CVE
cifs-utils vulnerability
USN-8496-1 fixed vulnerabilities in cifs-utils. The update caused a regression and was backed out in USN-8496-2. This update reintroduces the security fix, along with a fix for the regression. Original advisory details: It was discovered that cifs-utils incor…
-
High max 7.0USN-8532-1 2 CVEs
libssh2 vulnerabilities
It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A remote attacker controlling a malicious SSH server could use this issue to cause a denial of service or possibly execute arbitrary code. (CVE-2026-58050) It was disco…
-
High max 7.4USN-8531-1 3 CVEs
libexif vulnerabilities
It was discovered that libexif had an integer overflow in its MakerNote decoder when called with a zero-length buffer. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. (CVE-2026-32775) It was discovered t…
-
Critical max 9.1USN-8467-1 2 CVEs
perl vulnerabilities
It was discovered that Perl's Archive::Tar module incorrectly handled symlink and hardlink targets during extraction. An attacker could use this issue to read or overwrite arbitrary files outside the extraction directory. (CVE-2026-42496) It was discovered th…
first Jun 24, 2026 -
High max 8.6USN-7668-1 4 CVEs
openjdk-21 vulnerabilities
It was discovered that the 2D component of OpenJDK 21 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2025-30749, CVE-2025-50106) Mashroor Hasan…
first Jul 24, 2025