8,435 results · Feed
-
UnscoredUSN-8071-2 0 CVEs
nss vulnerability
USN-8071-1 fixed a vulnerability in nss. This update provides the corresponding fix for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that NSS incorrectly handled memory when performin…
first Mar 5, 2026 -
UnscoredUSN-8069-1 0 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick did not properly decode certain SUN image files. An attacker could use this issue to cause ImageMagick to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-25897) It was discovered that I…
first Mar 4, 2026 -
UnscoredUSN-8068-1 0 CVEs
intel-microcode vulnerability
Sergiu Ghetie discovered that some Intel® processors did not properly handle values in the microcode flow. A local authenticated user could potentially use this issue to escalate their privileges.
first Mar 3, 2026 -
UnscoredUSN-8067-1 0 CVEs
mailman vulnerability
It was discovered that Mailman incorrectly handled CSRF tokens. A remote list member or moderator could possibly use their own token to craft an admin request CSRF attack and set a new admin password or make other changes.
first Mar 2, 2026 -
UnscoredUSN-8064-1 0 CVEs
mongodb vulnerabilities
Eliot Horowitz discovered that MongoDB may fail to validate some instances of malformed BSON. A remote attacker could possibly use this issue to cause MongoDB to crash, resulting in a denial of service. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-160…
first Feb 25, 2026 -
UnscoredUSN-8062-2 0 CVEs
curl vulnerabilities
USN-8062-1 fixed vulnerabilities in curl. This update provides the corresponding update for CVE-2025-14017, CVE-2025-15079, and CVE-2025-15224 for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was di…
first Mar 3, 2026 -
UnscoredUSN-8054-1 0 CVEs
djvulibre vulnerabilities
It was discovered that DjVuLibre could be forced to execute a division by zero in certain instances. A remote attacker could possibly use this issue to cause applications to stop responding or crash, resulting in a denial of service. (CVE-2021-46312) It was d…
first Feb 23, 2026 -
UnscoredUSN-8051-2 0 CVEs
libssh vulnerabilities
USN-8051-1 fixed vulnerabilities in libssh. This update provides the corresponding updates for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that libssh clients incorrectly handled the key exchange proc…
first Feb 23, 2026 -
UnscoredUSN-8045-1 0 CVEs
ceph vulnerabilities
Martin Schobert discovered that Ceph did not properly verify SSL certificates when using Pybind for secure mail connections, which could result in accepting invalid certificates. An attacker could possibly use this issue to perform an intermediary attack and …
first Feb 24, 2026 -
UnscoredUSN-8023-1 0 CVEs
libxmltok vulnerabilities
It was discovered that Expat, contained within the xmltok library, incorrectly handled the initialization of parsers for external entities. An attacker could possibly use this issue to cause a denial of service. (CVE-2026-24515) It was discovered that Expat, …
first Feb 11, 2026 -
UnscoredUSN-8022-1 0 CVEs
expat vulnerabilities
It was discovered that Expat incorrectly handled memory when parsing certain XML files. An attacker could possibly use this issue to cause a denial of service. This issue was only addressed in Ubuntu 25.10. (CVE-2025-59375) It was discovered that Expat incorr…
first Feb 10, 2026 -
UnscoredUSN-8018-3 0 CVEs
python2.7 vulnerabilities
USN-8018-1 fixed CVE-2025-12084, CVE-2025-15282, CVE-2026-0672, CVE-2026-0865 for python3. This update provides the corresponding updates for python2.7. Original advisory details: Denis Ledoux discovered that Python incorrectly parsed email message headers. A…
first Mar 19, 2026 -
UnscoredUSN-8018-2 0 CVEs
python3.4, python3.5, python3.6, python3.7, python3.8, python3.9, python3.10, python3.11, python3.12, python3.13, python3.14 regression
USN-8018-1 fixed vulnerabilities in python3. That update introduced regressions. The patches for CVE-2025-15366 and CVE-2025-15367 caused behavior regressions in IMAP and POP3 handling, which upstream chose to avoid by not backporting them. Additionally, the …
first Mar 9, 2026 -
UnscoredUSN-8007-1 0 CVEs
imagemagick vulnerabilities
It was discovered that ImageMagick incorrectly handled image depth values when processing MIFF image files. An attacker could use this issue to cause a denial of service or possibly execute arbitrary code. (CVE-2025-43965) It was discovered that ImageMagick i…
first Feb 3, 2026 -
UnscoredUSN-8005-1 0 CVEs
glibc vulnerabilities
Vitaly Simonovich discovered that the GNU C Library did not properly initialize the input when WRDE_REUSE is used. An attacker could possibly use this issue to cause applications to crash, leading to a denial of service. (CVE-2025-15281) Anastasia Belova disc…
first Feb 3, 2026 -
UnscoredUSN-7992-2 0 CVEs
inetutils vulnerability
USN-7992-1 fixed vulnerabilities in telnetd in Inetutils. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Kyu Neushwaistein discovered that telnetd in Inetutils incorrectly…
first Feb 18, 2026 -
UnscoredUSN-7985-1 0 CVEs
texlive-bin vulnerabilities
Shin Ando discovered that the Xpdf toolkit embedded in TeX Live incorrectly handled memory when decoding certain data streams. An attacker could possibly use this issue to cause TeX Live to crash, resulting in a denial of service, or execute arbitrary code. T…
first Jan 29, 2026 -
UnscoredUSN-7983-1 0 CVEs
containerd, containerd-app vulnerabilities
David Leadbeater discovered that containerd incorrectly set certain directory path permissions. An attacker could possibly use this issue to achieve unauthorised access to the files. (CVE-2024-25621) It was discovered that containerd did not properly handle t…
first Jan 29, 2026 -
UnscoredUSN-7982-1 0 CVEs
ffmpeg vulnerabilities
It was discovered that FFmpeg did not correctly handle certain memory operations. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS a…
first Jan 27, 2026 -
UnscoredUSN-7980-2 0 CVEs
openssl, openssl1.0 vulnerabilities
USN-7980-2 fixed vulnerabilities in OpenSSL. This update provides the corresponding updates for CVE-2025-68160 for openssl and openssl1.0, CVE-2025-69418 for openssl on Ubuntu 18.04 LTS and Ubuntu 20.04 LTS, CVE-2025-69419 for openssl on Ubuntu 18.04 LTS and …
first Jan 27, 2026 -
UnscoredUSN-7976-1 0 CVEs
node-form-data vulnerability
Ben Shonaldmann discovered that Form-data incorrectly generated boundary values for multipart form-encoded data, leading to predictable values. A remote attacker could possibly use this issue to make arbitrary requests to internal systems.
first Jan 26, 2026 -
UnscoredUSN-7974-1 0 CVEs
libxml2 vulnerabilities
It was discovered that libxml2 incorrectly handled maliciously crafted SGML catalog files. An attacker could possibly use this issue to cause libxml2 to consume excessive resources, leading to a denial of service. (CVE-2025-8732) It was discovered that libxml…
first Jan 22, 2026 -
UnscoredUSN-7969-1 0 CVEs
crawl vulnerability
David Mendenhall discovered that Dungeon Crawl Stone Soup was incorrectly handling Lua bytecode embedded in an uploaded .crawlrc file. An attacker could possibly use this issue to execute arbitrary code.
first Jan 19, 2026 -
UnscoredUSN-7967-1 0 CVEs
avahi vulnerabilities
It was discovered that Avahi incorrectly terminated when processing browser records with wide-area disabled. An attacker could possibly use this issue to cause Avahi to crash, resulting in a denial of service. (CVE-2025-68276) It was discovered that Avahi inc…
first Jan 19, 2026 -
UnscoredUSN-7965-1 0 CVEs
simgear vulnerability
It was discovered that SimGear could be made to bypass the sandboxing of Nasal scripts. An attacker could possibly use this issue to execute arbitrary code.
first Jan 15, 2026 -
UnscoredUSN-7964-1 0 CVEs
git vulnerabilities
It was discovered that Git did not properly sanitize URLs when asking for credentials via a terminal prompt. An attacker could possibly use this issue to trick a user into disclosing their password. (CVE-2024-50349) It was discovered that Git did not properly…
first Jan 15, 2026 -
UnscoredUSN-7960-1 0 CVEs
ruby-rack vulnerabilities
It was discovered that Rack incorrectly handled certain query parameters. An attacker could possibly use this issue to cause a limited denial of service. This issue was only addressed in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2025-59830) It was discovere…
first Jan 14, 2026 -
UnscoredUSN-7959-1 0 CVEs
klibc vulnerabilities
It was discovered that zlib, vendored in klibc, did not properly handle integer arithmetic. An attacker could possibly use this issue to execute arbitrary code or cause a denial of service.
first Jan 14, 2026 -
UnscoredUSN-7958-1 0 CVEs
angular.js vulnerabilities
It was discovered that AngularJS did not properly sanitize certain `xlink:href` attributes. A remote attacker could possibly use this issue to perform cross site scripting. This issue only affected Ubuntu 16.04 LTS. (CVE-2019-14863) It was discovered that Ang…
first Jan 14, 2026 -
UnscoredUSN-7956-1 0 CVEs
google-guest-agent vulnerability
Jakub Ciolek discovered that the Go Cryptography module included in Google Guest Agent did not validate GSSAPI authentication requests during SSH operations. An attacker could possibly use this issue to cause a denial of service.
first Jan 13, 2026 -
UnscoredUSN-7954-2 0 CVEs
libtasn1-6 vulnerabilities
USN-7954-1 fixed vulnerabilities in Libtasn1. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2021-46848 only affected Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.…
first Feb 10, 2026 -
UnscoredUSN-7950-1 0 CVEs
python-tornado vulnerabilities
It was discovered that Tornado incorrectly handled special characters in HTTP headers. An attacker could possibly use this issue to execute a cross- site scripting (XSS) attack. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ub…
first Jan 8, 2026 -
UnscoredUSN-7946-2 0 CVEs
gnupg vulnerability
USN-7946-1 fixed vulnerabilities in GnuPG 2.x. This update provides the corresponding updates for GnuPG 1.x. Original advisory details: It was discovered that GnuPG incorrectly handled crafted input. A remote attacker could possibly use this issue to crash th…
first Jan 8, 2026 -
UnscoredUSN-7946-1 0 CVEs
gnupg2 vulnerability
It was discovered that GnuPG incorrectly handled crafted input. A remote attacker could possibly use this issue to crash the program, or execute arbitrary code.
first Jan 8, 2026 -
UnscoredUSN-7945-1 0 CVEs
libxslt vulnerability
Ivan Fratric discovered that Libxslt was vulnerable to type confusion when performing XML transformations. An attacker could possibly use this issue to cause Libxslt to crash or corrupt memory, causing a denial of service or undefined behavior.
first Jan 7, 2026 -
UnscoredUSN-7944-1 0 CVEs
net-snmp vulnerability
Bahae Bahrini discovered that Net-SNMP could be made to write out of bounds. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.
first Jan 7, 2026 -
UnscoredUSN-7943-1 0 CVEs
libcaca vulnerability
Han Zheng discovered that libcaca incorrectly handled certain images. An attacker could possibly use this issue to cause libcaca to crash.
first Jan 7, 2026 -
UnscoredUSN-7942-2 0 CVEs
glib2.0 vulnerabilities
USN-7942-1 fixed vulnerabilities in GLib. This update provides the corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. CVE-2025-3360 only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory detai…
first Feb 10, 2026 -
UnscoredUSN-7924-1 0 CVEs
libpng1.6 vulnerabilities
It was discovered that libpng incorrectly handled memory when processing certain PNG files, which could result in an out-of-bounds memory access. If a user or automated system were tricked into opening a specially crafted PNG file, an attacker could use this …
first Dec 11, 2025 -
UnscoredUSN-7919-1 0 CVEs
binutils vulnerabilities
It was discovered that GNU binutils' dump_dwarf_section function could be manipulated to perform an out-of-bounds read. A local attacker could possibly use this issue to cause GNU binutils to crash, resulting in a denial of service. This issue only affected U…
first Dec 10, 2025