Ubuntu Security Notices (USN)

8,437 results · Feed

• Unscored
  USN-5664-1 6 CVEs

  openjpeg vulnerabilities

  It was discovered that OpenJPEG did not properly handle PNM headers, resulting in a null pointer dereference. A remote attacker could possibly use this issue to cause a denial of service (DoS). (CVE-2016-7445) It was discovered that OpenJPEG incorrectly handl…

  Jun 25, 2026

  first Oct 7, 2022
• Unscored
  USN-5657-1 1 CVE

  graphite2 vulnerability

  It was discovered that Graphite2 mishandled specially crafted files. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.

  Jun 25, 2026

  first Oct 5, 2022
• Unscored
  USN-5656-1 1 CVE

  jackd2 vulnerability

  Joseph Yasi discovered that JACK incorrectly handled the closing of a socket in certain conditions. An attacker could potentially use this issue to cause a crash.

  Jun 25, 2026

  first Oct 4, 2022
• Unscored
  USN-5646-1 2 CVEs

  libxi vulnerabilities

  Tobias Stoeckmann discovered that libXi did not properly manage memory when handling X server responses. A remote attacker could use this issue to cause libXi to crash, resulting in a denial of service.

  Jun 25, 2026

  first Sep 28, 2022
• Unscored
  USN-5645-1 2 CVEs

  postgresql-9.5 vulnerabilities

  Jacob Champion discovered that PostgreSQL incorrectly handled SSL certificate verification and encryption. A remote attacker could possibly use this issue to inject arbitrary SQL queries when a connection is first established. (CVE-2021-23214) Tom Lane discov…

  Jun 25, 2026

  first Sep 28, 2022
• High max 7.5
  USN-5638-3 1 CVE

  expat vulnerability

  USN-5638-1 fixed a vulnerability in Expat. This update provides the corresponding updates for Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10. (CVE-2022-43680) This update also fixes a minor regression introduced in Ubu…

  Jun 25, 2026

  first Nov 23, 2022
• High max 8.1
  USN-5638-1 1 CVE

  expat vulnerability

  Rhodri James discovered that Expat incorrectly handled memory when processing certain malformed XML files. An attacker could possibly use this issue to cause a crash or execute arbitrary code.

  Jun 25, 2026

  first Sep 26, 2022
• Medium max 6.5
  USN-5629-1 1 CVE

  python3.5 vulnerability

  It was discovered that the Python http.server module incorrectly handled certain URIs. An attacker could potentially use this to redirect web traffic.

  Jun 25, 2026

  first Sep 22, 2022
• High max 7.5
  USN-5625-1 1 CVE

  mako vulnerability

  It was discovered that Mako incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service.

  Jun 25, 2026

  first Sep 21, 2022
• High max 7.1
  USN-5618-1 1 CVE

  ghostscript vulnerability

  It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an attacker could cause the program to crash.

  Jun 25, 2026

  first Sep 20, 2022
• High max 8.2
  USN-6530-2 1 CVE

  haproxy vulnerability

  Seth Manesse and Paul Plasil discovered that HAProxy incorrectly handled URI components containing the hash character (#). A remote attacker could possibly use this issue to obtain sensitive information, or to bypass certain path_end rules.

  Jun 25, 2026

  first Jul 23, 2024
• Medium max 5.3
  USN-6528-1 4 CVEs

  openjdk-8 vulnerabilities

  It was discovered that the HotSpot VM implementation in OpenJDK did not properly validate bytecode blocks in certain situations. An attacker could possibly use this to cause a denial of service. (CVE-2022-40433) Carter Kozak discovered that OpenJDK, when comp…

  Jun 25, 2026

  first Nov 29, 2023
• Unscored
  USN-5615-2 1 CVE

  sqlite3 vulnerability

  USN-5615-1 fixed several vulnerabilities in SQLite. This update provides the corresponding fix for CVE-2020-35525 for Ubuntu 16.04 ESM. Original advisory details: It was discovered that SQLite incorrectly handled INTERSEC query processing. An attacker could u…

  Jun 25, 2026

  first Sep 28, 2022
• Medium max 6.6
  USN-5614-2 1 CVE

  wayland vulnerability

  USN-5614-1 fixed a vulnerability in Wayland. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Wayland incorrectly handled reference counting certain objects. An attacker could use this issue…

  Jun 25, 2026

  first Oct 3, 2022
• Unscored
  USN-5606-2 0 CVEs

  poppler regression

  USN-5606-1 fixed a vulnerability in poppler. Unfortunately it was missing a commit to fix it properly. This update provides the corresponding fix for Ubuntu 18.04 LTS and Ubuntu 16.04 ESM. We apologize for the inconvenience. Original advisory details: It was …

  Jun 25, 2026

  first Sep 14, 2022
• Unscored
  USN-5606-1 1 CVE

  poppler vulnerability

  It was discovered that poppler incorrectly handled certain PDF. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code.

  Jun 25, 2026

  first Sep 12, 2022
• Unscored
  USN-5593-1 1 CVE

  libzstd vulnerability

  It was discovered that Zstandard incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code.

  Jun 25, 2026

  first Sep 1, 2022
• Unscored
  USN-5586-1 1 CVE

  libsdl1.2 vulnerability

  It was discovered that SDL (Simple DirectMedia Layer) incorrectly handled memory. An attacker could potentially use this issue to cause a denial of service or other unexpected behavior.

  Jun 25, 2026

  first Aug 29, 2022
• Unscored
  USN-5584-1 1 CVE

  schroot vulnerability

  It was discovered that Schroot incorrectly handled certain Schroot names. An attacker could possibly use this issue to break schroot's internal state causing a denial of service.

  Jun 25, 2026

  first Aug 29, 2022
• Unscored
  USN-5578-2 1 CVE

  open-vm-tools vulnerability

  USN-5578-1 fixed a vulnerability in Open VM Tools. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Open VM Tools incorrectly handled certain requests. An attacker inside the guest could pos…

  Jun 25, 2026

  first Aug 24, 2022
• Critical max 9.8
  USN-5573-1 1 CVE

  rsync vulnerability

  Evgeny Legerov discovered that zlib incorrectly handled memory when performing certain inflate operations. An attacker could use this issue to cause rsync to crash, resulting in a denial of service, or possibly execute arbitrary code.

  Jun 25, 2026

  first Aug 18, 2022
• Unscored
  USN-5555-1 7 CVEs

  gst-plugins-good1.0 vulnerabilities

  It was discovered that GStreamer Good Plugins incorrectly handled certain files. An attacker could possibly use this issue to execute arbitrary code. (CVE-2022-1920, CVE-2022-1921) It was discovered that GStreamer Good Plugins incorrectly handled certain file…

  Jun 25, 2026

  first Aug 8, 2022
• Unscored
  USN-5548-1 1 CVE

  libxml2 vulnerability

  It was discovered that libxml2 incorrectly handled certain XML files. An attacker could possibly use this issue to execute arbitrary code.

  Jun 25, 2026

  first Aug 4, 2022
• High max 7.5
  USN-5546-2 8 CVEs

  openjdk-8 vulnerabilities

  USN-5546-1 fixed vulnerabilities in OpenJDK. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Neil Madden discovered that OpenJDK did not properly verify ECDSA signatures. A remote attacker could possibly use thi…

  Jun 25, 2026

  first Aug 4, 2022
• Medium max 4.9
  USN-5537-2 1 CVE

  mysql-5.7 vulnerability

  USN-5537-1 fixed a vulnerability in MySQL. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Multiple security issues were discovered in MySQL and this update includes new upstream MySQL versions to fix these issue…

  Jun 25, 2026

  first Jul 28, 2022
• Unscored
  USN-5534-1 3 CVEs

  imagemagick vulnerabilities

  It was discovered that ImageMagick incorrectly handled certain values. If a user were tricked into processing a specially crafted image file, an attacker could possibly exploit this issue to cause a denial of service or other unspecified impact. (CVE-2022-325…

  Jun 25, 2026

  first Jul 26, 2022
• High max 7.8
  USN-5533-1 1 CVE

  vim vulnerability

  It was discovered that Vim incorrectly handled memory access. If a user were tricked into opening a specially crafted file, an attacker could possibly use this issue to cause the corruption of sensitive information, a crash, or arbitrary code execution.

  Jun 25, 2026

  first Jul 26, 2022
• Unscored
  USN-5527-2 4 CVEs

  check-mk vulnerabilities

  USN-5527-1 fixed vulnerabilities in Checkmk. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Checkmk incorrectly handled authentication. An attacker could possibly use this issue to cause a…

  Jun 25, 2026

  first Jul 20, 2022
• High max 7.5
  USN-5521-1 4 CVEs

  containerd vulnerabilities

  It was discovered that containerd insufficiently restricted permissions on container root and plugin directories. If a user or automated system were tricked into launching a specially crafted container image, a remote attacker could traverse directory content…

  Jun 25, 2026

  first Jul 15, 2022
• High max 7.8
  USN-5516-1 3 CVEs

  vim vulnerabilities

  It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the corruption of sensitive information, a crash, or arbitrary code execution.

  Jun 25, 2026

  first Jul 13, 2022
• Unscored
  USN-5510-2 2 CVEs

  xorg-server, xorg-server-hwe-16.04 vulnerabilities

  USN-5510-1 fixed several vulnerabilities in X.Org. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: Jan-Niklas Sohn discovered that the X.Org X Server incorrectly handled certain inputs. An attacker could use this…

  Jun 25, 2026

  first Jul 12, 2022
• High max 7.8
  USN-5507-1 3 CVEs

  vim vulnerabilities

  It was discovered that Vim incorrectly handled memory access. An attacker could potentially use this issue to cause the program to crash, use unexpected values, or execute arbitrary code. (CVE-2022-1968) It was discovered that Vim incorrectly handled memory a…

  Jun 25, 2026

  first Jul 8, 2022
• High max 8.4
  USN-5498-1 8 CVEs

  vim vulnerabilities

  It was discovered that Vim incorrectly handled memory when opening certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash, or possible execute arbitrary code.

  Jun 25, 2026

  first Jun 30, 2022
• Unscored
  USN-5497-2 5 CVEs

  libjpeg6b vulnerabilities

  USN-5497-1 fixed vulnerabilities in Libjpeg6b. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: It was discovered that Libjpeg6b was not properly performing bounds checks when compressing PPM and Targa image file…

  Jun 25, 2026

  first Jun 30, 2022
• High max 8.1
  USN-5479-2 2 CVEs

  php7.0 vulnerabilities

  USN-5479-1 fixed vulnerabilities in PHP. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Charles Fol discovered that PHP incorrectly handled initializing certain arrays when handling the pg_query_params function…

  Jun 25, 2026

  first Jul 4, 2022
• Unscored
  USN-5478-1 1 CVE

  util-linux vulnerability

  Christian Moch and Michael Gruhn discovered that the libblkid library of util-linux did not properly manage memory under certain circumstances. A local attacker could possibly use this issue to cause denial of service by consuming all memory through a special…

  Jun 25, 2026

  first Jun 14, 2022
• High max 7.4
  USN-5492-1 1 CVE

  vim vulnerability

  It was discovered that Vim incorrectly handled memory when opening and searching the contents of certain files. If an attacker could trick a user into opening a specially crafted file, it could cause Vim to crash.

  Jun 25, 2026

  first Jun 24, 2022
• Medium max 6.5
  USN-5490-1 1 CVE

  protobuf vulnerability

  It was discovered that Protocol Buffers did not properly parse certain symbols. An attacker could possibly use this issue to cause a denial of service or other unspecified impact.

  Jun 25, 2026

  first Jun 21, 2022
• Critical max 9.8
  USN-5488-2 1 CVE

  openssl vulnerability

  USN-5488-1 fixed vulnerabilities in OpenSSL. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Chancen and Daniel Fiala discovered that OpenSSL incorrectly handled the c_rehash script. A local attacker could possi…

  Jun 25, 2026

  first Jul 6, 2022
• Unscored
  USN-5473-2 0 CVEs

  ca-certificates update

  USN-5473-1 updated ca-certificates. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details: The ca-certificates package contained outdated CA certificates. This update refreshes the included certificates to those contain…

  Jun 25, 2026

  first Jul 13, 2022